Sr IT Security Engineer; Remote

The American Medical Association (AMA) is the nation's largest professional Association of physicians and a non‑profit organization. We are a unifying voice and powerful ally for America's physicians, the patients they care for, and the promise of a healthier nation. To be part of the AMA is to be part of our Mission to promote the art and science of medicine and the betterment of public health.

At AMA, our mission to improve the health of the nation starts with our people. We foster an inclusive, people‑first culture where every employee is empowered to perform at their best. Together, we advance meaningful change in health care and the communities we serve.

We encourage and support professional development for our employees, and we are dedicated to social responsibility. We invite you to learn more about us and we look forward to getting to know you.

We have an opportunity for a remote Sr IT Security Engineer on our Infrastructure Ops team. As a Sr IT Security Engineer, you will be responsible for security and cyber threat intelligence, industry best practices research, threat detection/prevention, threat triage, and response. This role is responsible for designing, implementing and maintaining security platforms and operational solutions to secure cloud‑based technology and on‑premise applications.

This role is responsible for the day‑to‑day security technologies (e.g., firewalls, SIEM,data loss prevention, web application firewalls, application security testing,VPN etc.) and supporting processes. Collects and generates reports and metrics for security trends and audit compliance purposes. Also designs security use cases based on business requirements and lead security tool administration and configuration; works closely with IT Engineering and Infrastructure teams to achieve security objectives and goals.

• Research, design and advocate new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors
• Plan, document, and execute enterprise‑wide security programs, including vulnerability identification and testing, network scanning framework for public and private networks and other technologies
• Configure and troubleshoot vulnerability assessment tools and endpoint solutions; perform scans, and identify and research threats; summarize results and corrective actions where appropriate
• Consult with IT, compliance, audit, and others to ensure development, implementation, and administration of applications and infrastructure meets standards for IT security and regulatory audit compliance
• Communicate IT Security policies and procedures to management and end users across businesses
• Collect and analyze defined metrics to report to leadership, including security dashboards and results of trainings
• Develop and/or deliver information security awareness training, including phishing simulations and risk‑based training content for high‑risk users
• Identify, collect, and organize credible, new intelligence and subject matter relative to current and emerging threats using all the tools, applications and open‑source information
• Define and document, application security standards for developers; ensure compliance with applicable security controls when writing such standards
• Design, lead, and project manage the development and configuration of security tools and automation based on use cases.

• Proactively monitor, analyze, block, and respond to malware and other…