Senior Cyber Security Engineer, GP/General Practice O Configuration Remote

Summary:

As a member of the Information Security team, the Cyber Security Senior Engineer for Secure Configuration Management will be responsible for partnering with technology owners to develop secure hardening standards for CHS platforms and software, ensure application of those settings, and monitor systems to ensure long-term compliance. The Senior Engineer will operate within the Threat and Vulnerability Management team as an expert in vulnerability management, ensuring sound practices while designing, growing, and maintaining the program. The Senior Engineer will be responsible for seeking out and reporting on system security weaknesses and will work directly with other security and information technology team members to develop plans for reporting and remediation across all operating systems and applications in the enterprise.

Essential Duties and Responsibilities:

• Verify the Group Policy Objects (GPOs) adhere to organizational security baselines (e.g., CIS Benchmarks or Microsoft's security baseline templates).

• Scope and Targeting: Use Organizational Units (OUs) effectively to apply GPOs based on user roles, departments, or devices.

• Inheritance and Link Order: Understand how GPOs apply in the hierarchy, and ensure no unnecessary overlap or conflicting settings.

• Develop secure hardening standards for common CHS platforms and applications, in collaboration with Information Technology teams.

• Expand and maintain a governance program for configuration compliance in order to identify and remediate drift.

• Apply industry best practices and standards to hardening standard design and report generation.

• In the case of Windows-based systems, craft and deploy Group Policy to reinforce hardening standards.

• Collaborate with security and IT team members to develop and operate processes for reviewing system images for policy compliance.

• Partner with system owners to troubleshoot and resolve issues related to security settings, including management of the implementation of setting exclusions when needed

• Work closely with IT partners to coordinate and track the progress of remediation efforts, ensuring timely resolution of identified findings.

• Contribute to the development and maintenance of secure configuration management policies, procedures, and documentation.

• Provide guidance and support to junior team members, fostering knowledge sharing and professional growth within the vulnerability management team.

• Leverage knowledge of Active Directory, operating systems, certificates, networking protocols, and powershell to design, scale, and deliver security hardening.

• Business and Soft Skill expectations:

• Communicate and interact effectively and professionally with co-workers, management, customers, etc.

• Maintain complete confidentiality of company business.

• Communicate with management regarding development within areas of assigned responsibilities and perform special projects as required or requested.

Qualifications

• Required Education: High School diploma

• Preferred Education: Bachelor's or Master's Degree in Cyber Security, Computer Science, Information Systems (or other related field), or equivalent work experience.

• Required Experience:

• Duration:

• 4+ years of IT or information security, and

• 2+ years of vulnerability management

• Activities:

• Practical experience with designing and implementing technologies related to vulnerability management including vulnerability scanning, penetration testing, and configuration management

• Served as expert thought leader for vulnerability management technologies and influenced the strategy for remediation

• Worked in process-driven structured environments and participated in process optimization activities.

• Competencies:

• In-depth knowledge of vulnerability management tools, techniques, and best practices.

• Familiarity with industry frameworks and standards such as NIST, CIS, and CVSS.

• Strong understanding of operating systems, network protocols, and web applications.

• Experience with vulnerability scanning and assessment tools (e.g., Nessus, Qualys, OpenVAS, Crowdstrike, Wiz).

• Excellent analytical and problem-solving skills, with the ability to prioritize and address vulnerabilities based on risk.

• Strong communication and collaboration skills to work effectively with cross-functional teams.

• Relevant certifications such as CISSP, CISA, or GIAC certifications are a plus.

• Commitment to continuous learning and staying updated on the latest trends and threats in the field of vulnerability management.

• Strong understand of lifecycle management principles and their application to the remediation of cybersecurity vulnerabilities

• Effective communication of technical concepts to a non-technical audience

• Excellent written and verbal communication skills

• Required License/Registration/Certification: None

• Preferred License/Registration/Certifications

• MCSA Certifications

• MCSE Certifications

• SANS Certifications

• GIAC Certifications

Equal Employment Opportunity

This organization does not discriminate in any way to deprive any person of employment opportunities or otherwise adversely affect the status of any employee because of race, color, religion, sex, sexual orientation, genetic information, gender identity, national origin, age, disability, citizenship, veteran status, or military or uniformed services, in accordance with all applicable governmental laws and regulations. In addition, the facility complies with all applicable federal, state and local laws governing nondiscrimination in employment. This applies to all terms and conditions of employment including, but not limited to: hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. If you are an applicant with a mental or physical disability who needs a reasonable accommodation for any part of the application or hiring process, contact the director of Human Resources at the facility to which you are seeking employment; Simply go to /chs.net/serving-communities/locations/ to obtain the main telephone number of the facility and ask for Human Resources.