Cyber Security Engineer

About the role

GeHC is looking for a Security Engineer to protect its systems, networks and data while supporting the security of its software products. The engineer assesses vulnerabilities, implements security controls, responds to incidents and works with software teams to integrate security throughout development. The role also involves preparing cybersecurity documentation and supporting submissions to the U.S. FDA and the U.S. Department of Defense, as applicable.

Key responsibilities

• Design, implement and monitor security systems protecting company networks, systems and data
• Conduct vulnerability assessments and penetration testing to identify security risks
• Develop and implement security policies, procedures and standards
• Respond to security incidents and perform root cause analysis
• Configure and maintain security tools such as firewalls, IDS/IPS and SIEM
• Evaluate new security technologies and countermeasures, and run regular security audits
• Work with software teams to embed security across all systems
• Prepare cybersecurity documentation and support FDA and DoD submissions, where applicable

Required profile

• 3+ years of experience in IT security or a related field
• Strong knowledge of network security, authentication, security protocols and cryptography
• Understanding of operating systems and network architecture
• Problem-solving skills and excellent written and verbal communication

Required skills

• Security tools: firewalls, IDS/IPS, SIEM, vulnerability scanners
• Preferred: secure coding and application security, Python, PowerShell, Bash, incident response background