Touchette Regional Hospital

Security Engineer

• Monitors the health of Touchette Regional Hospital and SIHF Healthcare’s security threat posture and cybersecurity & network infrastructure.
• Develops a deep understanding of the threat landscape and ensures cybersecurity technology is monitored to detect threats.
• Works with the IS Security Officer to ensure that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with Touchette Regional Hospital and SIHF Healthcare IT and cybersecurity standards.
• Develops, documents, maintains, and communicates Touchette Regional Hospital and SIHF Healthcare’s governance models and compliance codes and standards.
• Develop, provide, and maintain necessary documentation for all network applications and network systems.
• Assist with network infrastructure, network security, and network maintenance in a multi-hospital & multi-healthcare clinic environment.
• Functions and Duties: Monitors endpoint anti-virus & malware, content-filtering, data loss prevention solutions, multi-factor authentication systems, device profiling systems, firewall rules, network ACLs, server configuration monitoring, network logging consolidation, and event correlation systems.
• Conduct research on network products, services, protocols, and standards in support of network & security procurement and development efforts.
• Installs and maintains network & security operating systems; ensures that backup copies of all files are routinely made and securely stored at a separate location; maintains system documentation.
• Develops vulnerability remediation documentation and assists in the remediation of vulnerabilities both on server and network systems both cloud and physical.
• Documents systems with vulnerabilities that are not able to be remediated, develops an action plan to secure those devices, and communicates this information to stakeholders and the IS Security Officer.
• Installs, configures, and maintains network cabling and other networking or security equipment such as Switches, Wireless APs, Firewalls, and UPS.
• Develops the skills necessary to manage network security solutions such as Cisco ASA Firewalls, Meraki Security Appliances, VPN (Remote Access & Site to Site), and Cisco Identity Services Engine (TACACS+ & Radius).
• Develops expertise in scanning and monitoring networks or server systems for attacks, malicious software, intrusions, and threats.
• Develops an understanding of the organization’s current threat posture and uses a variety of tools to understand emerging threat patterns and gauge potential impacts to day-to-day business processes.
• Develops attack and penetration technologies to reduce threat landscape.
• Works with the IS Security Officer to develop policies and training to ensure employees are following and understand security policies and procedures.
• Provides cybersecurity and network support for operational systems and assists in business planning, maintenance, and troubleshooting.
• Executes risk management initiatives to assess risk and gather information/data for defining/updating policy/standards.
• Researches and interprets risks and impacts of new technology, emerging patterns, and trends in the cybersecurity landscape and provides updates/reports to the IS Security Officer on a regular basis.
• Develops monitoring use cases, tests, and assesses the effectiveness of Digital controls.
• Develops expertise in working with Network Packet Analyzers, Next-Generation Antivirus, Endpoint Detection and Response, Cyber Threat Intelligence and Threat Hunting Tools.
• Engages and communicates effectively with internal personnel, external vendors, or contacts in day-to-day activities and fosters positive business relationships.
• Educates the various business units on the different IT or cybersecurity strategies, policies, processes, and procedures.
• Executes projects and programs for the Network and Security team as required.
• Develop methods or propose technologies to protect data at rest when required.
• Will be required to provide on-call support in rotating intervals and emergency support as needed.
• Ability to occasionally support routine or emergency network or security changes during normal business hours, after-hours, on weekends, or during holidays is required.
• Provides first level technical support to users concerning network & security system operations.
• Performs all other duties as assigned.

Cybersecurity and Network Admin I