LEAD CYBER SECURITY ENGINEER - University of Washington

Req #: 240584 Department: UW MEDICINE IT SERVICES Appointing Department Web Address: http://uwmits\_hires.uwmedicine.org/ Job Location Detail: **Primary work location may be fully remote within the US or at the Safeco Plaza Building on the corner of 4th and Madison in downtown Seattle.** Posting Date: 10/29/2024 Closing Info: Closes On 11/05/2024 Salary: $11,500 - $12,917 per month Limited Recruitment: **Open to Department employees only** Shift: First Shift Notes: As a UW employee, you will enjoy generous benefits and work/life programs. For a complete description of our benefits for this position, **click here.** **UW MEDICINE IT SERVICES** has an outstanding job opportunity for a **Lead Cyber Security Engineer** position. **PLEASE NOTE: This position is open to current UW Medicine IT Services employees only.** **WORK SCHEDULE** + 100% FTE - 40 hours per week + Day Shift - UW MEDICINE ITS SERVICES CORE HOURS ARE 07:00 - 16:00 (PST), Monday-Friday **DEPARTMENT DESCRIPTION** **UW Medicine IT Services (ITS)** is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), Valley Medical Center (VMC), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission. **POSITION HIGHLIGHTS** + 100% remote opportunity + Values-based work environment + Active departmental Equity, Diversity, and Inclusion Committee + 15 days of vacation your first year - Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year + 100% matching, 100% immediately vesting 403(b) **PRIMARY JOB RESPONSIBILITIES** + Supporting the direction and priorities of the Manager by coordinating and overseeing the operational activities, including the following, and ensuring standard services are meeting appropriate targets:o Vulnerability assessments, threat intelligence, and incident response activities with significant impact to business operations for UW Medicine, our partner organizations (SCCA, UW Campus, etc.) and vendorso The design, development, and implementation of security tools and configuration baselines, drawing from industry requirements and frameworks such as HIPAA, HITRUST, and NIST to identify vulnerabilities and threats and mitigate risks to patient care and critical operationso Deploying prescribed tools to discover system and/or software vulnerabilities and inform and/or validate risk assessments throughout the enterprise, as requiredo Incident response activities and conducting digital forensics investigations on UW Medicine assets, including reportingo Configuring various scans, engaging with system owners for resolution, processing false-positives, and assisting with risk acceptanceo Utilizing a variety of threat sources including raw data, log information, reports and bulletins, and collaborations with both internal and external partners to develop threat profiles for UW Medicine information assets + Prioritizing and distributing the workload throughout a team of Cyber Security Engineers, managing the day-to-day workflow, and reporting to the manager the status of work assignments,providing a point of escalation for operational and other service issues + Identifying and proposing service management improvements + Providing advice, coaching, and mentorship to team on work techniques, best practices, and operational expertise + Serving as the manager's delegate to represent the team to customers, project managers, technical leadership, and organizational management **REQUIREMENTS** + Bachelor's degree in Computer Science, Information Technology, Engineering, or related field or equivalent combination of education/experience + 6+ years of experience must include: + 6+ years' information security experience to include experience in one or more of the following areas: Security Engineering, Security Analysis, Security Project Management, Security Architecture, and implementing security best practices, tools, and technologies + 1+ year(s) of formal mentorship for technology professionals + Demonstrated experience leading team activities and initiatives in designing, implementing, or maintaining security tools (including threat detection tools or vulnerability management scanning systems) + Extensive experience with, and the ability to mentor others in, designing system security assessments, control analyses, vulnerability assessments, or penetration tests + Advanced understanding of and the ability to mentor others in security-related technologies, systems, and tools used for the protection of computer networks and information + Demonstrated experience performing, and the ability to lead a team in, threat modeling and vulnerability reviews to make architecture and risk-based design decisions + Demonstrated experience recommending and designing custom signatures, patterns, and configurations for monitoring platforms/tools to review and analyze data, logs, and intelligence + Advanced knowledge of common information security regulations and/or standards such as NIST 800-53/CSF, ISO 27001/2, HIPAA, PCI DSS, and SOC and how to apply them + Extensive knowledge of information security in healthcare and information security standards + Experience leading incident response and forensic investigations tasks + Proficiency with Python, PHP, Perl, or similar scripting languages **ABOUT UW MEDICINE - WHERE YOUR IMPACT GOES FURTHER** UW Medicine is Washington's only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine's mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow's physicians, scientists and other health professionals. All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, Valley Medical Center, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest. **Become part of our team. (https://www.uwmedicine.org/jobs)** Join our mission to make life healthier for everyone in our community. University of Washington is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, religion, color, national origin, sexual orientation, gender identity, sex, age, protected veteran or disabled status, or genetic information.