CYBER SECURITY ENGINEER 1

UW MEDICINE IT SERVICES has an outstanding job opportunity for a CYBER SECURITY ENGINEER 1 position.

WORK SCHEDULE

100% FTE - 40 hours per week

Day Shift - UW MEDICINE ITS SERVICES CORE HOURS ARE 07:00 - 16:00 (PST), Monday-Friday

Required participation in team on call schedule

DEPARTMENT DESCRIPTION

UW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), Valley Medical Center (VMC), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.

POSITION HIGHLIGHTS

100% remote opportunity

Values-based work environment

Active departmental Equity, Diversity, and Inclusion Committee

15 days of vacation your first year - Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year

100% matching, 100% immediately vesting 403(b)

PRIMARY JOB RESPONSIBILITIES

You engineer, configure, test, and implement information security products and solutions

You respond to cyber-security intrusions and conduct digital forensic analysis, investigations, and investigative reporting, as needed

You define and develop reporting and post-event follow-up activities related to information security incidents

You maintain awareness of known and emergent vulnerabilities related to UW Medicine's technology deployments and use and convert insights into actionable use cases and detection methodologies

You deliver security consulting and technical services to technical, hospital, business, operations, and vendor staff and teams concerning implementation of UW Medicine security standards, processes, and NIST 800-53 "best practices" on secure system design and risk mitigation strategies

You advise the enterprise on the secure design of technical solutions, applications, and network architecture

You deploy approved security tools in accordance with formal policies and procedures to assess the vulnerability of the UW Medicine workforce and/or assets to general and specific threats

You review security controls, information systems, and business practices for violations of information security policies, standards, or regulatory requirements

You support team efforts to document and report information security risks to UW Medicine

You participate in all aspects of improving the team, including education/training of other team members and contributing to process/communication improvement initiatives

REQUIREMENTS

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field or equivalent education and/or experience

2+ years of overall experience to include the below

2+ years' information security experience to include experience in one or more of the following areas: Security Engineering, Security Operations, Security Analysis, Security Architecture, implementing security best practices, tools, and technologies

Demonstrated independent work experience with security tool design implementation, or maintenance of security tools, including threat management, vulnerability management, or incident response platforms

Demonstrated work experience independently performing security assessments, security control analyses, vulnerability assessments, or penetration tests

Demonstrated independent work experience with security-related technologies, systems, and tools used for the protection of computer networks and information

Demonstrated understanding of information security threats and vulnerabilities and how they translate to risks

Foundational understanding of security monitoring tools to review and analyze operating system outputs such as authentication logs

Able to reference one or more common information security regulations and/or standards such as NIST 800-53/CSF, ISO 27001/2, HIPAA, PCI DSS, and SOC when analyzing risks

Demonstrated knowledge with major operating systems including Windows, Mac OS, Linux, and Mobile Platforms

Foundational understanding of risk management concepts, methodologies, metrics, and reporting

ABOUT UW MEDICINE - WHERE YOUR IMPACT GOES FURTHER

UW Medicine is Washington's only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine's mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow's physicians, scientists and other health professionals.

All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, Valley Medical Center, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest.

Become part of our team. Join our mission to make life healthier for everyone in our community.

Committed to attracting and retaining a diverse staff, the University of Washington will honor your experiences, perspectives and unique identity. Together, our community strives to create and maintain working and learning environments that are inclusive, equitable and welcoming.

The University of Washington is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran or disabled status, or genetic information.

To request disability accommodation in the application process, contact the Disability Services Office at or

Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.