We offer remote work opportunities in the following locations ONLY: AK, AR, AZ, CO, DC, FL, HI, IA, ID, IL, KS, LA, MD, MN, MO, MT, NE, NV, NM, NC, ND, OK, OR, SC, SD, TN, TX, UT, VA, WA, WI, WY

US Citizenship REQUIRED: Our Department of Defense contract requires US citizenship and a favorably adjudicated DOD background investigation for this position.

Veterans, Reservists, Guardsmen, and military family members are encouraged to apply!

Job Summary

Senior Information Security Engineers play a crucial role in safeguarding an organization's digital assets. The responsibilities include designing and implementing security measures to protect systems, networks, and data from cyber threats. Conduct risk assessments, vulnerability analyses, and penetration testing to identify and mitigate potential security risks. Professionals are skilled in areas such as encryption technologies, network security protocols, and incident response. Validate compliance with security standards and regulations for a secure IT environment. Advanced proficiency in network and cybersecurity infrastructure, experience in LAN, WAN, and VPN design, as well as the deployment and management of firewalls, routers, and endpoint protection solutions.

Education & Experience

Required:
• High School Diploma or GED
• U.S. Citizenship
• Must be able to receive a favorable Interim and adjudicated final Department of Defense (DoD) background investigation
• 7-10 years of directly related experience in information technology; 5 of which must be in information security programs to include the development, implementation and administration of information security controls, solutions and programs
• Microsoft Azure environment
• DoD 8570/8140 advanced certification, DoD approved equivalents or higher

Preferred:
• Bachelor's Degree in Computer Science, Computer Information Systems, or Business
• Experience in a role that has lead security operations, security tools and solutions, secure applications and networking in the implementation of NIST and Security Best Practices to meet or exceed compliance with the FISMA Moderate/High requirements
• Prior experience in healthcare, insurance, or government contracting environments
• Experience with one of the following: ServiceNow GRC, CyberArk, SailPoint, MathCraft, Purview, or CrowdStrike suite
• Python Scripting

Key Responsibilities
• Evaluates and implements security controls to meet or exceed the Federal Information Security Management Act (FISMA), the National Institute of Standards and Technology (NIST) and the Federal Information Processing Standards (FIPS) in "high" information classification boundary.
• Implements Information Security Technology, Physical Security Controls and Federal data security requirements.
• Proactively plans security systems by evaluating network and security technologies; develops requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security, network devices and workstations; designs public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software; adhering to federal and industry standards.
• Plans delivery of solutions; answers technical and procedural questions from less experienced team members; teaches improvement processes; mentors team members and provides security technical leadership to other Information Security and Information Technology team members.
• Determines security requirements by evaluating business strategies and requirements; researches information security standards; conducts system security and vulnerability analyses and risk assessments; studies architecture/platform; identifies integration issues; prepares cost estimates for review by Manager, Information Systems Security.
• Verifies security control compliance by developing, implementing and maintaining test scripts.
• Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducts incident response analyses; in collaboration with Training department, develops and conducts security education and training programs.
• Upgrades security systems by monitoring security environment; identifies security gaps; evaluates and implements enhancements.
• Prepares system security reports by collecting, analyzing, and summarizing data and trends.
• Tracks and understands emerging security practices and standards; participates in educational opportunities; reads professional publications; maintains personal networks; participates in professional organizations.
• Authors security system and application processes for both operation and management, including as-build service configuration documents.
• Performs detailed and routine assessment to ensure use of established security policies, practices and expectations across all platforms, operating systems and applications.
• Drafts and recommend changes to Security Policy, Procedures, Standards and Guidelines to meet or exceed corporate or contractual security requirements.
• Conducts network/system forensics and traffic analysis using protocol and intrusion detection analyzers.
• Accepts ownership for accomplishing new and different requests; explores opportunities to add value to job accomplishments.
• Performs other duties as assigned.
• Regular and reliable attendance and on call availability are required.

Competencies

Communication / People Skills: Ability to influence or persuade others under positive or negative circumstances; adapt to different styles; listen critically; collaborate.

Computer Literacy: Ability to function in a multi-system Microsoft environment using Word, Outlook, TriWest Intranet, the Internet, and department software applications.

Coping / Flexibility: Resiliency in adapting to a variety of situations and individuals while maintaining a sense of purpose and mature problem-solving approach is required.

Creativity / Innovation: Ability to develop unique and novel solutions to problems; view change as a necessity.

Empathy / Customer Service: Customer-focused behavior; helping approach, including listening skills, patience, respect, and empathy for another's position.

Information Management: Ability to manage large amounts of complex information easily, communicate clearly, and draw sound conclusions.

High Intensity Environment: Ability to function in a fast-paced environment with multiple activities occurring simultaneously while maintaining focus and control of workflow.

Multi-Tasking / Time Management: Prioritize and manage actions to meet changing deadlines and requirements within a high volume, high stress environment.

Problem Solving / Analysis: Ability to solve problems through systematic analysis of processes with sound judgment; has a realistic understanding of relevant issues.

Technical Skills: Conceptual and intimate knowledge of all information security tools, i.e., intrusion prevention, vulnerability scanning, syslog, firewall policies, reverse proxy, authentication.

Working Conditions

Working Conditions:
• Limited infrequent travel may be required to TriWest remote locations to present security awareness material or to assess information security posture
• Act as a primary point of contact for all information security related incidents requiring consultation or response, 24 hour accessibility
• Provide high level of customer service to employees, business leadership and IT
• Work in a cubed office environment with multiple computers and monitors
• Heavy computer usage and documentation review
• Extensive computer work with prolonged sitting