Cyber Security Engineer II

Job Description

ECU Health

About ECU Health

ECU Health is a mission-driven, 1,708-bed academic health care system serving more than 1.4 million people in 29 eastern North Carolina counties. The not-for-profit system is comprised of 13,000 team members, nine hospitals and a physician group that encompasses over 1,100 academic and community providers practicing in over 180 primary and specialty clinics located in more than 130 locations.

The flagship ECU Health Medical Center, a Level I Trauma Center, and ECU Health Maynard Children's Hospital serve as the primary teaching hospitals for the Brody School of Medicine at East Carolina University. ECU Health and the Brody School of Medicine share a combined academic mission to improve the health and well-being of eastern North Carolina through patient care, education and research.

Position Summary

Analyzes, reports, and responds to detected cyber incidents. Maintains system cybersecurity monitoring operations. Uses cybersecurity tools to proactively search for threats to systems or networks. Conducts network defense analysis and provides recommendations for improvements. Develops and maintains thorough, up-to-date knowledge of cybersecurity threats and incident response best practices.

Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Plans and designs security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Designs action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats. Develops security integration plans to protect existing infrastructure and to incorporate future solutions. Utilizes a variety of security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in designs.

Identifies and tests potential information and network or internet security vulnerabilities.

Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks. Supports and maintains security defense architecture.

Minimum Requirements

• Bachelor's degree or equivalent work training and experience required- or higher.
• Major intermediate cyber security certification such as : CEH, CSIH, GCFA, GCIH, CAP, CISM, SSCP is required or must be obtained within one year of hire.
• 3 - 5 years' technical experience in cyber security
• 3 - 5 years' experience in a LAN / WAN environment, server engineering, security administration, or security risk analysis required.
• Experience working with project teams to design and implement new solutions
• Experience working in team-oriented, collaborative environment
• Independently motivated to seek knowledge in areas pertaining to their current position
• Self-educates and seeks knowledge from management of ECU Health, Information Services environment and ECU Health operations relevant to their position
• Must be able to read a packet capture

Other Information

Location - Hybrid - Greenville, NC

On-Call

#LI-MG1

#LI-HYBRID

General Statement

It is the goal of ECU Health and its entities to employ the most qualified individual who best matches the requirements for the vacant position.

Offers of employment are subject to successful completion of all pre-employment screenings, which may include an occupational health screening, criminal record check, education, reference, and licensure verification.

We value diversity and are proud to be an equal opportunity employer. Decisions of employment are made based on business needs, job requirements and applicant's qualifications without regard to race, color, religion, gender, national origin, disability status, protected veteran status, genetic information and testing, family and medical leave, sexual orientation, gender identity or expression or any other status protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer, or against any individuals who assist or participate in the investigation of any complaint.