Information Security Engineer III

Information Security Engineer III-The IS Security Engineer III is responsible for managing corporate security as well as designing and developing effective solutions to support business strategies. This role is essential toward maturing Care Oregon’s security model. This position spends substantial time partnering with business leaders, architecting, and implementing IS policies and systems (plan, design, install, and maintain).Estimated Hiring Range:$ - $Bonus Target:

Bonus - SIP Target, 5% Annual Current Care Oregon Employees:
Please use the internal Workday site to submit an application for this job.

-Essential Responsibilities Security Design and Development Lead the design and management of security technologies, including but not limited to firewalls, proxy systems, logging, and other security devices.

Provide security technology expertise to the organization; participate in and consult on projects.

Advise other IS teams on best practices for security design.

May serve as a resource to developing engineers.

Security Management and Operations Execute tasks related to tickets and service requests for advanced to complex activities, and provide escalation support for network tickets.

Oversee the maintenance of security systems, including firewalls, proxy systems, logging, and other security devices, and vendor provided services.

Analyze business needs; partner with leaders across the organization in order to research and recommend solutions which balance business need and risk mitigation.

Define, build, and review reports on information security system performance and event anomalies; ensure internal adjustments are made and substantial gaps documented and elevated to management.

Develop and maintain appropriate technology documentation, including current design and operation.

Standards and Policy Administration Author and serve as subject matter expert to define requirements and standards for information security.

Monitor and continually review existing systems to ensure they are designed to comply with established standards and to empower business operations.

Develop and maintain information securing policies.

Integrate network engineers in the development and management of security policies and systems, such as firewalls, intrusion detection, and intrusion prevention devices.

Lead the planning for and support of disaster recovery and business continuity initiatives.

Vendor Coordination and Relations Conduct product and vendor research, and present recommendations to management.

Manage relations with vendors and equipment suppliers, including installation and repair of services.

Oversee the development of, monitor, and maintain electronic data exchanges with outside entities

Maintain service contracts and licensing; negotiate with outside parties; escalate issues as needed.

Organizational Responsibilities Perform work in alignment with the organization’s mission, vision, and values.

Support the organization’s commitment to equity, diversity, and inclusion by fostering a culture of open mindedness, cultural awareness, compassion, and respect for all individuals.

Strive to meet annual business goals in support the organization’s strategic goals.

Adhere to the organization’s policies, procedures, and other relevant compliance needs.

Perform other duties as needed.

Required Knowledge, Skills, and Abilities Technical Advanced  knowledge of data loss prevention (DLP), Intrusion Detection systems (IDS), and Intrusion Prevention systems (IPS)
Expert troubleshooting of system performance issues and root cause

Expert knowledge of network transport protocols and industry standards

Strong process-orientation with knowledge of ITIL concepts

Knowledge of Vulnerability Management systems and processes

Knowledge of Security Incident and Event Management (SIEM) systems

Ability to program using scripting languages Python, Powershell, VB, C++, and/or others

Communication

Strong, clear communication skills, including listening, verbal, written, customer service, meeting facilitation, and presentations

Ability to clearly articulate policies, instructions, goals, and objectives

Able to convey appropriate level of detail effectively to all…