Endpoint Security Engineer

How is this team contributing to the vision of Providence? We, at Enterprise Services, the healthcare consulting and services arm of Providence India, help build technology solutions that modernize and simplify each step of the healthcare delivery process. And we do that by putting the patient and the provider at the center of everything we do. Using the most promising and practical ideas, combined with the experience and expertise from people from the healthcare industry, we are creating experiences that work for care facilities, their patients and move us ahead on our mission of “Health for a better world “. What will you be responsible for? Be part of Security Engineering team. Manage, maintain, and advance the Security Engineering capability operating out of India. Own, deliver and continuously improve the global Security Engineering strategy, capabilities, and services in the Cybersecurity domain. Own and drive security engineering for security platforms / solutions according to enterprise security frameworks and policies. Ensure that security platforms / solutions are securely designed, configured, tested, deployed, managed, and modified / changed as per defined policies, standards, and industry good practices. Ensure continuous consistency to applicable compliance, regulatory, and legal frameworks for the security infrastructure within the Security Engineering scope. Provide analysis and recommendations for continuous improvement of security platforms / solutions capabilities. Contribute to creation and maintenance of technical security policies, standards, configuration baselines, benchmarks, guidelines, and SOPs. Lead security platform / tool engineering efforts such as platform / tool engineering, integrations, management, upgrades, and changes. Lead other Security Engineering efforts such as development and testing of automation. Have a thorough understanding of complex IT systems and technical security concepts and stay up to date with the latest security standards, systems, and protocols, as well as best practice security products. Positively influence functional leadership, technology owners, project managers, other architects, engineers, and developers in meeting required security standards. Provide thought leadership on new and industry-leading enterprise-class security solutions, capabilities, and services. What would your day look like? Take on technical security leadership for security platform / solution implementation and transformation projects in the Cybersecurity domain. Engineer security platforms / tools and services / components, supporting complex hosting and integration. Identify, develop, and enforce technical security policies, standards and procedures, including security hardening. Collaborate with cross-functional teams on security platform / solution related matters, esp. to identify and engineer improvements, and remediate security vulnerabilities and mitigate risks. Perform security readiness audits and support internal and external security auditing on platforms / solutions. Report on platform / solution security status. Identify major platform / solution deficiencies and define / craft pragmatic approaches on how to remediate them at scale. Investigate and report suspected breaches in security infrastructure. Advise and work with security system owners and vendors to design and configure systems that meet security requirements, while balancing security and user experience. Conduct new technology / product evaluations through Proof of Concept (PoC) with other architects / engineers. Review technology objectives for security programs and services and make recommendations for their security requirements. Evangelize and promote IT Security culture across the organization. Drive accountable areas for results. Take ownership of the environment, teams, operations, initiatives, and projects within areas of accountability, sometimes in ambiguous circumstances. Who are we looking for? 4-year University (Bachelor’s) degree in Computer Science, Information Technology, or STEM fields, or equivalent experience. 10+ years of Information Systems experience, 5+ years of hands-on engineering and managing security platforms / solutions for large scale enterprises. Thorough knowledge of Information Security, Security Engineering, Data Privacy, Risk, and Compliance for platform / solution and security elements within Cybersecurity environments. Hands on experience and knowledge in a broad range of security platforms / tools and services / components like Next Generation Firewall (NGFW), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Security Posture Management (SPM), Vulnerability Assessment (VA), Attack Surface Management (ASM), etc. Working experience or knowledge of multi-cloud environments, cloud-native services, complex integrations. Working experience with scripting or programming (shell scripting, PowerShell, Python, etc.) Ability to perform work independently with a high degree of initiative and problem-solving skills. Strong technical aptitude, attention to detail and high commitment to quality. Proficient in writing / creation of formal documentation such as reports, slide decks, and architecture diagrams. Solution oriented, can define various pragmatic alternatives leading to appropriate platform / solution security results. Strong communicator with deep technical security skills and a pragmatist who can think outside the box. Experience working in a multi-vendor environment by working closely with vendors and making full use of their capabilities. Strong knowledge of security best practices and standards (ISO / IEC 27001 / 27002, 27005, 27032, 27799, NIST CSF, NIST SP 800-53, 800-39). Preferred CompTIA CASP+, (ISC)2 CISSP, ISSEP, GIAC GSP, GSE or equivalent Information Security certification.