Cybersecurity Engineer

Overview

The Cybersecurity Engineer evaluates and implements Enterprise Security tools to protect Dartmouth-Hitchcock Health (DH) computers, networks, data and information from cyber-attacks, unauthorized access, and inadvertent and unauthorized disclosures. The Engineer understands DH security standards and supports the operation of security technologies to meet those standards. The Engineer reports directly to the Cybersecurity Manager and works closely with other Engineers, Architects, and Cybersecurity Operational Analysts to ensure the proper implementation and operation of DH Cybersecurity systems and controls. The Engineer mentors other cybersecurity team members to advance their skills, capabilities, and education

Responsibilities

• Assist in performing technical evaluations and implementation or maintenance of technical security solutions. Function as subject matter expert for select cybersecurity tools.

• Demonstrate working knowledge of cybersecurity threats, system vulnerabilities, and the potential impacts of exploits on business operations. Maintain knowledge of compensating controls to remediate cybersecurity risks. Demonstrate competency with control implementation.

• Troubleshoot security and network problems. Fix complex issues by researching, analyzing and guiding remediation measures. Perform testing and identification of network and system vulnerabilities as well as existing security processes and controls. Provides data and assists in response to system and/or network security breaches.

• Assist with evaluation of existing and proposed security system designs, including auditing implementation against security standards. Maintain data flow diagrams and workflow logic for assigned technologies. Provide input to various teams for disaster recovery and business continuity practices.

• Performs other duties as required or assigned.

Qualifications

• A four year degree in Computer Science, IT, Engineering, Information Assurance or related qualification.

• Three (3) years of Information Systems and/or cybersecurity specific experience is preferred.

• At least two (2) years of work experience with incident detection, incident response and computer forensic investigations.

• Experience with or comprehensive understanding security systems in relations to network, systems, applications, and/or users is desired.

• Proficiency in scripting languages (e.g., Power Shell, Python)

• Must be willing to work flexible hours.

• Must have solid written and verbal communications skills. Should be able to work independently.

• Strong attention to detail with an analytical mind and outstanding problem solving skills. Project management experience a plus.

• Must be able to work under pressure in demanding environments and act appropriately to foresee and pre-empt downtimes.

• Familiarity with health care relevant regulatory legislation and standards for the protection of health information and patient privacy

Required Licensure/Certifications

• Any certification in these DoD Approved 8570 Baselines:

• IASAE Level II

• CSSP Infrastructure Support

• *CISSP or CISSP Associate must be attained within one (1) year

• **Cisco CCNP Security may be considered in lieu of the above"