Security Engineer - Infrastructure Team

Security Engineer

Digital Intelligence Systems (DISYS) has been engaged to identify an expert-level Security Engineer to join the Infrastructure Team at a foremost Healthcare IT Solutions Group in Oakland, California.

To be considered, the Security Engineer must be in the San Francisco Bay Area prior to commencement as an onsite orientation is required. Once onsite operations resume, the position will be based in Oakland, California.

The role will primarily focus on Vulnerability Management; however, a secondary skill set in Network or Container Security is advantageous.

Scope of Responsibilities:

• Monitor computer networks, operating systems for security issues.
• Responsible for container security management in On-Premises Kubernetes.
• Investigate security breaches and other cybersecurity incidents.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Implement Intrusion prevention measures and programs.
• Document security breaches and assess the damage they cause.
• Fix detected vulnerabilities to maintain a high-security standard.
• Understand different security controls to meet regularity compliance.
• Stay current on IT security trends, standards and news.
• Develop best practices for IT security and work with development teams for security guidelines.

Requirements:

• Bachelor's degree in computer science or related field. CISSP is added value.
• Minimum of 8 years’ experience with Infrastructure / System Engineering background.
• Experience with on-premise Kubernetes and container security management is highly desirable.
• Understanding of securing the end-to-end image/container lifecycle from image build to production deployment.
• Understanding of CVE – how to identify and remediate in Windows, Linux, Containers.
• Experience in Dev Sec Ops  principles and tools for container security management and in detail level on Namespace, Container and Pods.
• Experience with computer network penetration testing and techniques.
• Understanding of traffic flow and how access lists can be achieved in zero trust networks.
• Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Understanding of patch management with the ability to deploy patches in a timely manner while understanding business impact.