Information Security Engineer - Data Protection at Highmark Health Sacramento, CA

Information Security Engineer – Data Protection

Highmark Health – Sacramento, CA.
Company: enGen.

Provide expertise in information security and risk management infrastructure. Work with cross‑functional teams to plan, research, evaluate, design, and develop ISRM infrastructure systems, ensuring alignment with organizational strategies. Design, develop, and deploy operating systems, software tools, utilities, and security solutions. Support performance studies and traffic analysis, refine system design requirements, and validate improvements for efficiency. Create engineering policies, standards, and procedures for ISRM infrastructure.

CANDIDATE MUST BE U.S. CITIZEN (due to contractual/access requirements).
Candidates residing within 50 miles of Pittsburgh, Mechanicsburg, or Buffalo are required to work in the office on Tuesdays, Wednesdays, and Thursdays.

• Serve on or lead teams in defining requirements, deliverables, and timelines.
• Escalate issues and recommend resolutions to appropriate stakeholders.
• Conduct root‑cause analysis for complex ISRM infrastructure problems.
• Develop and deliver technical training and mentor junior staff.
• Complete project tasks to deliver ISRM infrastructure projects on time, within budget, and scope.
• Implement, monitor, configure, and maintain security systems.
• Ensure compliance with required standards, procedures, guidelines, and processes.
• Perform other duties as assigned or requested.

• Bachelor’s Degree in Computer Science, Information Systems, or closely related field.

• None.

• 3‑5 years of experience with information security and systems analysis.
• 3‑5 years of experience in information security and/or information risk management and/or information technology.
• 3‑5 years of experience with operating systems and software administration.
• 3‑5 years of experience developing, communicating, and presenting information security and risk management concepts to varying audiences.
• 3‑5 years of experience with technologies such as Intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SIEM), and virtualization platforms.

• 5‑7 years of experience with information security and systems analysis.
• 1‑3 years of experience working within an information security function using HITRUST Common Security Framework (HITRUST CSF) or the NIST 800‑83 cybersecurity framework.
• 3‑5 years of IT/information security risk advisory experience.
• 3‑5 years of in‑depth understanding of network security architecture, network and networking protocols.
• 3‑5 years of database management, system administration, and software development lifecycle experience.

• Knowledge of HITRUST CSF, NIST 800‑83 cybersecurity framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL
  3.
• Familiarity with secure SDLC best practices.
• Knowledge of Microsoft Apps and Suites, Windows Server, SharePoint, etc.
• Strong teamwork and interpersonal skills.

• None.

• Certified Information Systems Security Professional (CISSP).

0%‑25%.

None.

Office‑Based.

Pay Range: $67,500.00 – $. Base pay is determined by a variety of factors including candidate qualifications, experience, and expected contributions, as well as internal equity, market, and business considerations.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law. We endeavor to make this site accessible to any and all users.