Rx Savings Solutions

Rx Savings Solutions is looking for an experienced Security Engineer to join our growing team! The Security Engineer is responsible for evaluating, implementing, and managing security tools designed to protect, detect, and monitor the physical and cloud infrastructure and SaaS applications Rx Savings Solutions utilizes. If you are fluent in risk identification and mitigation and stay up to date on the latest security threats and trends in our industry, we'd love to talk with you!
<h3>Responsibilities</h3>
<ul>
<li>Audit AWS environment for proper security group design</li><li>Monitor networks for security issues</li><li>Utilize log management and auditing tools to identify potential risks</li><li>Complete qualitative and quantitative risk assessments and provide mitigation strategies for identified risks based on impacts</li><li>Operate as a project resource or lead for IT and security projects as necessary</li><li>Investigate security breaches and other cybersecurity incidents and document findings</li><li>Design, deploy and manage security measures and operate software to protect systems and information infrastructure including firewalls and data encryption programs</li><li>Document security breaches and assess the damage they cause</li><li>Work with security team to perform tests and uncover network vulnerabilities</li><li>Develop and implement company-wide best practices for IT security</li><li>Research security enhancements and make recommendations to leadership</li><li>Assist in completing security questionnaires received from clients</li><li>Manage and monitor physical security measure including security cameras and badge systems</li><li>Stay up to date on information technology and security trends, news and standards</li><li>Perform other various security duties as needed</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Bachelor's degree, with an emphasis in computer science or information systems preferred or equivalent experience.</li><li>3+ years of cybersecurity experience with security tools such as SIEM, IDS/IPS, Firewalls, etc.</li><li>Experience with AWS security tools (VPC, SG, Guard Duty, WAF, etc) and processes</li><li>Scripting/automation using languages like Python/Perl</li>It would be nice if you have (NOT REQUIRED):<li>GIAC Security Certification(s) - GSEC, GSED, GCIH, etc.</li><li>AWS Certification(s) – AWS SysOps, AWS Developer, AWS Security, etc.</li></ul>#LI-DM1#LI-Remote

Overland Park

Security Engineer

<a href="http://www.rxss.com/" rel="noopener noreferrer nofollow ugc" target="_blank">Rx Savings Solutions</a> is seeking a Security Engineering Manager looking for an opportunity to lead and contribute to a rapidly growing company with an awesome and fun-loving culture! The team at Rx Savings Solutions is driven to make a difference in the pharmaceutical industry by exposing cost-savings opportunities to our members. We take pride in knowing the work we do greatly impacts the lives of our customers. Job Summary:As the Security Engineering Manager, you will build and maintain the security roadmap for RxSS. You will provide strategic guidance and oversight of a team that develops and maintains security solutions for infrastructure and applications running in cloud instances. You'll lead incident response activity and ensure compliance with security best practices. 
<h3>Responsibilities</h3>
<ul>
<li>Leads a team of security engineers that research, develop, maintain security solutions for infrastructure and applications running in cloud instances, primarily on Amazon Web Services (AWS).</li><li>Builds and maintains security roadmap for RxSS</li><li>Leads incident response activities, investigations and responses. Responsible for the prevention, detection, investigation and response with respect to security threats and attacks.</li><li>Maintains and develops information policies, procedures and security directives to align business objectives with security objectives.</li><li>Ensures compliance with security best practices using standards like NIST 800-53, ISO 27001, HITRUST CSF and NSCF.</li><li>Leads SOC 2 Type 2 audit and provide evidence that proves RxSS is compliant with HIPAA Security Rule.</li><li>Performs risk assessments including, qualitative and quantitative assessments and provide mitigation strategies for identified risks.</li><li>Manages and responds to security assessments from clients, vendors and partners and perform vendor security management.</li><li>Acquires, configures and maintains security tools utilized at RxSS to improve our security posture as well as manage the relationships with the security vendors</li><li>Provides security awareness training for RxSS employees.</li><li>Oversees the administration of authentication and access controls, including provisioning, changes, and de-provisioning of user and system accounts, security/access roles, and access permissions to information assets.</li><li>Manages hardening, vulnerability management, external pen testing and drive post discovery remediation.</li><li>Audit AWS environment continuously and  identify potential weakness. Provides guidance by developing solutions to reduce the likelihood of exploitation.</li><li>Provides feedback on security during project planning for internal applications and product integrations with partners.</li><li>Stays up to date on information technology and security trends, news and standards.</li></ul>
<h3>Education</h3>
<ul>
<li>Bachelors degree, with an emphasis in computer science or cyber security, OR equivalent experience</li></ul>
<h3>Qualifications</h3>
<ul>
<li>5+ years of cybersecurity experience of the following:</li>- Experience with security tools such as SIEM, IDS/IPS, Firewalls, etc.- Experience or knowledge of AWS security tools (VPC, SG, Guard Duty, WAF, etc) and processes- Experience with monitoring tools and application of platforms to detect, remediate, address security vulnerabilities using tools like LimaCharlie, Trend Micro, Mimecast, Lacework, Chronicle Backstory, and Netskope- Experience with configuration management tools like Packer, Ansible and Chef.- Experience with devsecops using CI/CD pipelines.- Experience with security standards like NIST, ISO and ISA<li>A minimum of 2 years experience with consulting and training software engineers regarding security best practices</li><li>A minimum of 2 year experience mentoring leading a team of security engineers.</li></ul>#LI-DM1

Security Engineering Manager

WellSky

<p>The InfoSec Risk Analyst provides operational and administrative support for the information security program at WellSky. This position creates, implements, and monitors policies, procedures and controls as required by WellSky, its clients, and federal and state governments.  The analyst will respond to security assessments from sales prospects and support WellSky’s internal and external audit requirements under its SOC2, Type 2 certification. The Information Security Analyst may also conduct incident response investigations to ensure appropriate reporting and corrective actions are taken. The position will conduct workforce training, raise awareness of security threats and best practices, and monitor the environment for threats. </p>
<p><strong>Key Activities:</strong></p>
<p>Design Controls, Policies and Procedures </p>
<ul>
<li>Ensure that appropriate security measures are included in application design </li>
<li>Evaluate and recommend technical solutions for risk mitigation or controls </li>
<li>Design appropriate policies and procedures as identified by risk assessment activities or awareness of emerging threats </li>
<li>Monitor existing policies for compliance </li>
<li>Participate in disaster recovery planning and business continuity planning </li>
<li>Evaluate risk profile of WellSky’s SaaS and on-premise software products </li>
</ul>
<p>Monitor the Risk Environment and Support Client Risk Assessments </p>
<ul>
<li>Drive or participate in risk assessment activities </li>
<li>Assess risk of third parties with whom we do business </li>
<li>Respond to the security questionnaires and security risk assessments of WellSky’s clients and sales prospects </li>
<li>Review Business Associate Agreements (BAA) and other contract documents as needed </li>
<li>Monitor information system activities for suspicious events such as logins, administrative rights usage, abandoned sessions or their vulnerabilities </li>
<li>Perform vulnerability testing, risk analysis and security assessments utilizing security scanning tools, standards and best practices </li>
<li>Keep current on best practices in risk mitigation </li>
<li>Conduct third party risk assessments</li>
</ul>
<p>Training and Awareness </p>
<ul>
<li>Conduct formal workforce training as required by law or regulation </li>
<li>Conduct awareness activities to reinforce best practices </li>
<li>Design and administer Phishing simulation campaigns </li>
<li>Conduct incident response investigations. Document and report findings and make recommendations for corrective action.  </li>
<li>Interact with regulatory agencies, auditors or other compliance entities to support investigations </li>
<li>Create management reports summarizing accomplishments in security controls as well as suspicious activities </li>
<li>Strong written and oral communication skills</li>
<li>Works with organizational objectives in mind and a team player</li>
</ul>
<p><strong>Required Competencies:</strong> </p>
<p>Create and review change management cases</p>
<p>Install, configure and maintain various computer platforms</p>
<p>Expert knowledge of datacenters and datacenter technologies and commonly used concepts, practices and procedures in Information Technology with excellent analytical skills</p>
<p>Lead others in designing, configuring, deploying and maintaining enterprise class and best of breed infrastructure networks, SAN’s, servers, systems and solutions</p>
<p><strong>Required Qualifications: </strong></p>
<ul>
<li>BS in Computer Science or a related technical field with 3 to 5 years’ experience in Information Technology Security or related functions (IT Audit, IT Risk Management); or an equivalent combination of education and experience. </li>
<li>CISSP, CISA, CISM or other relevant certification</li>
</ul>
<p><strong>Preferred Experience:</strong></p>
<ul>
<li>An understanding of healthcare from an operational and functional perspective preferred </li>
<li>Technical experience with security related technologies such as Active Directory, encryption, anti-virus, or Experience with regulated data and government regulations (HIPPA, PCI-DSS) firewalls </li>
<li>Knowledge of internal controls and Information Technology risk assessment and mitigation procedures </li>
<li>Skilled at advocating and championing technical and non-technical solutions </li>
<li>Strong analytical skills and capable of translating complex business problems into conceptual solutions that fit the business need </li>
<li>Excellent interpersonal and communication skills </li>
<li>Excellent critical thinking and analytical skills </li>
<li>Customer service orientation </li>
<li>Experience with at least one external audit standard (e.g. SOC2 Type 2, HITRUST, ISO 27001) </li>
</ul>




<p><strong>About WellSky</strong></p>
<p>WellSky is a technology company leading the movement for intelligent, coordinated care worldwide. Our next-generation software, analytics, and services power better outcomes and lower costs for stakeholders across the health and community care continuum. In today’s value-based care environment, WellSky helps providers, payers, health systems, and community organizations solve tough challenges, improve collaboration for growth, harness the power of data analytics, and achieve better outcomes by further connecting clinical and social care. WellSky serves more than 20,000 client sites around the world — including the largest hospital systems, blood banks, cell therapy labs, blood centers, home health and hospice franchises, post-acute providers, government agencies, and human services organizations. Informed by more than 40 years of providing software and expertise, WellSky anticipates clients’ needs and innovates relentlessly to ultimately help more people thrive.</p>
<p>We're looking for talented individuals who want to use their skills to build a strong, technology-driven company. We offer competitive salaries, great benefits, a new Health Savings Account with a generous employer contribution and a casual and fun environment that encourages quality, creativity and excellence. Enjoy all we have to offer. We invite you to join us. Apply today!</p>
<p>As of December 8, 2021, as a condition of employment, all US-based employees must be fully vaccinated against COVID-19 unless a medical or religious exemption is approved.</p>
<p><em>WellSky provides equal employment opportunities to all people without regard to race, color, national origin, ancestry, citizenship, age, religion, gender, sex, sexual orientation, gender identity, gender expression, marital status, pregnancy, physical or mental disability, protected medical condition, genetic information, military service, veteran status, or any other status or characteristic protected by law. WellSky is proud to be a drug-free workplace.</em></p>
<p>Applicants for U.S. based positions with WellSky must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. </p>

Security Engineer III

Apply to Cyber Security Jobs in Overland Park in companies remotely and near you. New Cyber Security Jobs in Overland Park added daily.

Job Position and Company	Location	Tags	Posted
Security Engineer at Rx Savings Solutions	Remote Full Time Audit
Security Engineering Manager at Rx Savings Solutions	AWS Devsecops Hipaa Hitrust IDS
Security Engineer III at WellSky	Active Directory Analytics CISA CISM Cissp

Cyber Security Jobs in Overland Park

0 Cyber Security Jobs in Overland Park. Page 1 of 1

3 closed cyber security jobs in overland park:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Overland Park

0 Cyber Security Jobs in Overland Park. Page 1 of 1

3 closed cyber security jobs in overland park:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter