What are the responsibilities and job description for the Information Technology Security Engineer position at Halifax Health?
- Bachelor's degree or equivalent combination of technical certifications and experience.
- One or more Technical or professional certifications such as SANS, CCSA, CISSP, CCSE (Plus), CCNA, CCNP, CCIE.
- Must understand and demonstrate knowledge of risk analysis with IT Security experience.
- Participate in on-call rotation as required.
- Promote and adhere to departmental and organizational information security policies, standards and procedures.
- Skills in the following areas: customer service; project planning; clear and concise written and verbal communication; and ability to complete projects and support activities within the established timeline.
- Ability to work effectively with vendors, staff and users at all IT knowledge levels.
- Knowledge of security vulnerabilities, threats and mitigations of risks for IT systems and networks.
- Perform related duties as required.
- Responsible for engineering solutions, providing support, and deploying all security platforms including but not limited to:
- internal and external facing firewalls
- IPS
- web filtering
- data loss prevention
- end point protection
- secure email
- email firewall
- multifactor authentication
- NAC
- SIEM
- vulnerability scanning
- device encryption
- Maintain awareness of emerging threats, specifically those within the healthcare field.
- Respond to security incidents and perform forensic analysis.
- Assist in internal investigations and compliance requirements.
- Aggregate and analyze security information and data from multiple systems and sources.
- Conduct security reviews of new technologies and software being brought into the enterprise.
- Conduct periodic reviews of the security infrastructure and identify areas where improvements can be made to provide a more secure environment for the organization.
- Strong knowledge and experience in the following:
- Networking protocols such as TCP, UDP, OSPF, VRRP, HSRP, IPSEC, SIP
- Networking hardware such as switches, routers, firewalls, wireless controllers
- Network security controls such as IPSEC VPN gateways, layer 3-7 next generation firewalls, web filters, IPS, ACLs, DLP
- Log management and SIEM solutions
- Network Access Control (NAC) solutions
- Experience with Linux operating system a plus.
