Information Security Engineer in Marlton, New Jersey at Advocare LLC

The Information Security Engineer will be responsible for the security of the organization’s Azure and Office 365 services, network, and endpoints. The Information Security Engineer will also support and execute on project tasks and deliverables in support of the organization’s information security roadmap/strategy.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Ensure the organization’s cloud infrastructure and data is secure and protected by implementing appropriate security controls in Azure and Office 365 based upon industry best practices.
• Monitor the M365 and Azure Security Score, follow and implement Microsoft’s recommendations and deviate where necessary to continue to strengthen the organizations security posture in Azure and Office 365.
• Lead efforts in remediating vulnerabilities and identifying gaps or security deficiencies on all network and endpoint devices using vulnerability management tools and risk assessments.
• Manage and maintain Privileged Access Management (PAM) system.
• Perform risk assessments and reviews for onboarding practices, third-party vendors, and self-assessments for the organization.
• Assist in updating and executing the security awareness program.
• Keep abreast of security trends and threats and ensure that the organization’s security practices are updated and aligned.
• Serve as the lead and point of contact for all security related events and breaches, coordinating efforts across all technology teams.
• Proactively search, detect, and respond to security events and incidents utilizing EDR and SIEM security monitoring tools.
• Act as the SME for the organization’s security tools and applications including the evaluation, implementation, and maintenance of such tools.
• Support a variety of security initiatives and projects that align with the organization’s information security roadmap.
• Other duties as assigned.

Required Competencies (Knowledge, Skills and Abilities)

The requirements listed below are representative of the knowledge, skills and abilities required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Expert knowledge and proven experience with cloud and cyber security principles, technologies, and best practices
• Experience with leading and responding to security incidents and events.
• Demonstrates professionalism, confidentiality, and diplomacy and can serve a wide range of employees with equity and tact.
• Thorough knowledge and understanding of security functions within Azure and Office 365 services.
• Thorough knowledge and understanding of network and endpoint security.
• Ability to work independently with minimal supervision.
• Excellent customer service skills.
• Effective verbal and written communication skills.
• Demonstrates professionalism, confidentiality, and diplomacy and can serve a wide range of employees with equity and tact.
• Ability to establish and maintain effective working relationships with a diverse group of people at all levels of the organization.
• Commitment to excellence and high standards
• Detail oriented with strong follow-up initiative
• Versatility, flexibility, and a willingness to work within constantly changing priorities with enthusiasm.

Supervisory Responsibility

This position has no supervisory responsibilities.

Work Environment

This job operates in a professional office environment. This role routinely uses standard office equipment.

Position Type/Expected Hours of Work

This is a full-time position. Days and hours of work are Monday through Friday, 8:30 a.m. to 5:30 p.m.

Travel

This position is expected to occasionally travel to our corporate office and our care centers located throughout NJ and Southeastern PA. Travel expenses are reimbursed.

Required Education and Experience

• Bachelor’s degree in cyber security, information technology, and/or equivalent experience.
• 3-5 years of experience working as a cyber security analyst or engineer.
• ITIL Foundations Certification or willingness to obtain it within one year of hire date.
• Knowledge and experience working in a cloud-based infrastructure.

Preferred Education and Experience

• Healthcare industry experience
• Azure and Office 365 support experience
• CISSP, CCSP or CompTIA Security+ certification
• Knowledge of Cybersecurity Frameworks (NIST CSF, ISO27001, HITRUST, HIPAA)
• Strong knowledge and experience with the following: Azure and Office 365 security technologies (Microsoft Defender, Azure Security Center, Azure Sentinel, Microsoft Cloud App Security, Microsoft ATP), EPP and EDR solutions, Email Security and Encryption Services, Data Loss Prevention tools

Benefits Available:

• Multiple medical and prescription coverage options
• Dental and vision care plans
• Health Savings Accounts (HSAs), where applicable
• Flexible Spending Accounts (FSAs)
• Voluntary critical illness, cancer, and accident insurance
• Voluntary hospital indemnity coverage
• Voluntary short-term and long-term disability insurance
• Voluntary term life insurance and AD&D (Accidental Death & Dismemberment)
• 401(k) retirement savings plan
• Paid time off (PTO)
• Commuter benefits
• Group auto and homeowners' insurance

Part-time Benefits:

• Vision
• Flexible Spending Accounts
• MetLife Auto/Vehicle & Home Insurance Discounts