Information Security Engineer

SUMMARY:

If you are interested in disrupting the healthcare market, and have the passion and competence to do so, this is your organization. We encourage you to lean in and read on.

Alegeus is the market leader in consumer directed healthcare solutions, offering the industry's most comprehensive platform for the administration of healthcare benefit accounts, the industry's most widely-used benefit debit card, and powerful engagement solutions to help consumers maximize savings and optimize spending for their healthcare. Over 300 clients - including health insurance plans, third party administrators and financial institutions - leverage Alegeus' deep expertise and proven technology to administer benefit accounts for more than 29 million members and process more than $8.9 billion in consumer healthcare payments annually. As the healthcare and benefit markets continue to evolve, Alegeus delivers solutions that enable clients to advance their service offerings, operate their businesses more efficiently, and focus on their customers.

Alegeus is part of the Vista Equity Partners portfolio of companies, working in partnership with the market-leading technology investment firm to reinvent the consumer directed healthcare marketplace. Our talented associates benefit from this partnership through increased capital for strategic investments, access to exceptional toolkits, best practices and resources for success, and strong cultural and value alignment focused on talent development and growth.

POSITION SUMMARY:

Alegeus seeks an Information Security Engineer to join our dedicated, passionate team of professionals. The Information Security Engineer will report to the Information Security Officer and be responsible for helping our company succeed by maintaining and running security systems for a healthcare technology company.

MISSION:

Security systems include: Patch Management System, Anti-Virus, Web Filter, SIEM (Security Incident Event Manager), Firewalls, Intrusion Detection/Prevention Systems. This person will also be responsible for education, training, and awareness activities; monitoring compliance with company security policy and applicable laws; and coordinating investigation and reporting of security incidents.

OUTCOMES:

• Support with patching; deploying updates on desktops and servers.
• Day-to-day administration of security systems: Anti-Virus/Malware, Data Encryption/DLP, Web Filter, Security Incident Event Manager (SIEM), Firewalls, Intrusion Detection/Prevention Systems.
• Contribute to the information governance of the organization through collaborating within and outside the team to assist Alegeus in earning SOC 1, SOC 2, and PCI-DSS compliance annually.
• Contribute to Information Security Vulnerability Management.
• Perform internal and external threat monitoring and reporting.
• Communicate information security concepts to Alegeus' customers.
• Assist developers in secure coding practices.

RESPONSIBILITIES:

• Vulnerability Management scans of environment.
• Security administration of individual and system accounts.
• Proactively assesses potential items of risk and opportunities of vulnerability in the network.
• Document and maintain standard operating procedures (SOP).
• Support building reports for management and audits.
• Research, evaluate and recommend technology products and services.
• Works on multiple projects as a project team member and occasionally as a project leader.
• Up to 10% travel requirement (company events, conferences, workshops etc.)
• Monitor Cloud Security Apps

ROLE-BASED COMPETENCIES:

The desired candidate should have a strong background knowledge in the fields of Computer Science, Information Technology, or Cybersecurity and have the ability to communicate technical subjects to non-technical stakeholders. Information Security competencies needed to complete responsibilities as defined in the "Responsibilities" Section.

EDUCATION/EXPERIENCE:

• Bachelor's degree preferred or equivalent combination of education and experience required for specific job level
• Experience with PCI a plus
• 3-5 years security operations experience desired
• 5-7 years of IT work experience having a high level of expertise in multiple system environments; or equivalent combination of education and experience
• 3-5 years of experience in Software Development
• Ability to communicate effectively verbally and in writing
• Ability to establish and maintain effective working relationships with employees, vendors, clients and public
• Ability to work independently as well as with a team
• Experience with being on a CSIRT team
• Experience with cloud computing
• Experience with Varonis, Proofpoint, Splunk, ObserveIT.
• Knowledge of Disaster Recovery practices and concepts
• Security certifications preferred (CISSP, CISA, CISM, GIAC, CEH)
• Skill to effectively analyze and solve problems
• Working knowledge of any of the standards or regulations PCI, HIPAA, GLBA, SOX, ISO27001
• Working knowledge of ethical hacking or penetration tests

CULTURE-BASED COMPETENCIES:

At Alegeus, equally important to the "What" (the individual performance goals that each employee commits to in support of the company's overall success) is the "How" (the framework of principles that guide how we work together to drive our business forward). Overall performance success will also take into account individual delivery on our corporate values:

• Care personally. We connect personally to our "why" - are passionate and purposeful
• Put the end-user first. When we put the end user first, we believe the rest falls into place
• Consistently challenges the status quo. We believe that the best solutions haven't been discovered yet
• Practice the art of inspection. We will turn over every stone to gain deeper insight to guide our actions
• Solve the real problem. We will constantly orient on the true issue at hand accurately and fully address