Senior Security Engineer

The Senior Security Engineer will facilitate the architecture, design, and deployment of information security solutions, compliance, and policies. They will manage and oversee HIPAA, SOC 2, and ISO compliance policy implementations, certifications, and audit processes, ensuring security policies, standards, and procedures remain current. Responsibilities include developing test plans and identifying testing requirements, scenarios, methodologies, and configurations for technology evaluations and vendor integrations. The role involves evaluating security trends, evolving threats, risks, and vulnerabilities, and applying tools to mitigate risks. Collaboration with the Chief Privacy Officer and Chief Security Officer is key to aligning security and privacy compliance programs, acting as a liaison to information systems and compliance departments. This position requires troubleshooting, diagnosing, and resolving or escalating incidents and problems, as well as designing and implementing best-practice security solutions to mitigate threats and risks. Additionally, the engineer will manage and conduct ongoing security training, promote information security awareness, and collaborate with leadership on network design improvements, capacity planning, risk mitigation, vulnerability management, and security event management. Establishing and administering a process for investigating and acting on security incidents, including potential privacy breaches, is also a core responsibility.