Information Security Engineer

Advocare, LLC is seeking an Information Security Engineer responsible for securing the organization’s Azure and Office 365 services, network, and endpoints. The role involves implementing security controls, monitoring security scores, remediating vulnerabilities, and leading security initiatives aligned with the organization's information security strategy.

Responsibilities:

• Ensure the organization’s cloud infrastructure and data is secure and protected by implementing appropriate security controls in Azure and Office 365 based upon industry best practices
• Monitor the M365 and Azure Security Score, follow and implement Microsoft’s recommendations and deviate where necessary to continue to strengthen the organizations security posture in Azure and Office 365
• Lead efforts in remediating vulnerabilities and identifying gaps or security deficiencies on all network and endpoint devices using vulnerability management tools and risk assessments
• Manage and maintain Privileged Access Management (PAM) system
• Perform risk assessments and reviews for onboarding practices, third-party vendors, and self-assessments for the organization
• Assist in updating and executing the security awareness program
• Keep abreast of security trends and threats and ensure that the organization’s security practices are updated and aligned
• Serve as the lead and point of contact for all security related events and breaches, coordinating efforts across all technology teams
• Proactively search, detect, and respond to security events and incidents utilizing EDR and SIEM security monitoring tools
• Act as the SME for the organization’s security tools and applications including the evaluation, implementation, and maintenance of such tools
• Support a variety of security initiatives and projects that align with the organization’s information security roadmap
• Other duties as assigned

Requirements:

• Expert knowledge and proven experience with cloud and cyber security principles, technologies, and best practices
• Experience with leading and responding to security incidents and events
• Demonstrates professionalism, confidentiality, and diplomacy and can serve a wide range of employees with equity and tact
• Thorough knowledge and understanding of security functions within Azure and Office 365 services
• Thorough knowledge and understanding of network and endpoint security
• Ability to work independently with minimal supervision
• Excellent customer service skills
• Effective verbal and written communication skills
• Ability to establish and maintain effective working relationships with a diverse group of people at all levels of the organization
• Commitment to excellence and high standards
• Detail oriented with strong follow-up initiative
• Versatility, flexibility, and a willingness to work within constantly changing priorities with enthusiasm
• Bachelor's degree in cyber security, information technology, and/or equivalent experience
• 3-5 years of experience working as a cyber security analyst or engineer
• ITIL Foundations Certification or willingness to obtain it within one year of hire date
• Knowledge and experience working in a cloud-based infrastructure
• Healthcare industry experience
• Azure and Office 365 support experience
• CISSP, CCSP or CompTIA Security+ certification
• Knowledge of Cybersecurity Frameworks (NIST CSF, ISO27001, HITRUST, HIPAA)
• Strong knowledge and experience with the following: Azure and Office 365 security technologies (Microsoft Defender, Azure Security Center, Azure Sentinel, Microsoft Cloud App Security, Microsoft ATP), EPP and EDR solutions, Email Security and Encryption Services, Data Loss Prevention tools