Computer Network Defense Engineer Jobs

1 job found

Today

Senior Network Security Engineer

HCA Healthcare Nashville, TN

Nashville, TN

Today

Full time Senior Computer Network Defense Cyber Security

Apply Now

Job Description

HCA Healthcare is seeking a Senior Network Security Engineer to lead the implementation, modernization, standardization, and enhancement of network security controls. In this role based in Nashville, TN (onsite), you will help protect enterprise infrastructure, patients, and sensitive data by reducing risk and strengthening continuous security control maturity across a Fortune 100 environment.

Reporting into the network security effort, you will perform and oversee policy and security assessments, evaluate security tooling and architecture, and translate findings into remediation recommendations, designs, and configuration changes. You will also collaborate with other IT teams to align network security controls with evolving operational and compliance needs.

Responsibilities

Lead implementation, modernization, standardization, and enhancement of network security controls to protect infrastructure, patients, and data from increasing risk and threats.
Perform and oversee reviews and assessments of policies for risk and vulnerabilities, identify hardening opportunities, and provide remediation recommendations, designs, and solutions.
Collaborate with IT teams to implement risk management practices, optimize technology solutions, monitor and adjust infrastructure, ensure regulatory compliance, and improve security posture over time.
Evaluate, recommend, and implement security measures including next-generation firewall features, intrusion detection or prevention systems, VPN, network segmentation and zero trust, and multifactor and access control mechanisms.
Conduct firewall rule reviews, security audits, baseline and best-practice compliance checks, and forensic network investigations to support adherence for data transmission and implement recommendations.
Support and manage network security solutions aligned with regulatory and industry requirements, including PCI DSS, SOX, NIST, ISO 27000, and HIPAA.
Evaluate vulnerability assessments and penetration tests, review metrics and security audits, and provide remediation recommendations and solutions.
Recommend and implement complex solutions and configuration changes within a large enterprise network to support continuous security control maturity and risk reduction.
Participate in incident response and disaster recovery planning and testing.
Collaborate with other IT teams to integrate network security controls with systems and applications, ensuring alignment with security standards.
Routinely perform audits and control tests on deployed technologies, collecting and consolidating performance indicators, risks, and trends, and providing baseline and regulatory compliance ratings.
Manage relationships with vendors and contractors to ensure security services are delivered on time and implemented in alignment with security policies.
Collaborate on development and documentation of security policies and procedures, including training and awareness.
Provide guidance and training to peers on compliance and best practices.
Research design enhancements and identify automated solutions or best-of-breed technologies while assisting with integration tests with vendors.
Stay current on threats, vulnerabilities, regulations, and industry best practices, and implement recommendations to improve security posture and control maturity.

Requirements

Bachelor’s degree preferred
5+ years of experience required
Extensive experience with security technologies including next-generation firewalls, intrusion detection or prevention systems, VPN, network segmentation, access control mechanisms, and security design and policy management in large 1000+ firewall environments.
Expertise in Checkpoint Firewall including CMA, Provider-1, Maestro, VSX/VSLS, and CloudGuard.
Experience with Cisco Network Security Products & Technologies including Firepower, ASA, VPN, WSA, ISE, Stealthwatch, and related tools.
Strong understanding of network protocols, topologies, tools, subnetting, and architectures.
Aptitude with network security policy management tools such as Algosec and Tufin and/or experience conducting risk assessments, firewall rule reviews, and security audits.
Strong knowledge of enterprise security technologies and processes including Zscaler, advanced threat detection tools, Antibot, Antimalware, threat emulation, SIEM, IDS/IPS, network packet analysis, and Netflow.
Experience designing solutions for security standards and frameworks including HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and the NIST Cybersecurity Framework.
Experience with network security management tools and technologies such as Splunk, Trustsec, segmentation, and syslog.
Excellent verbal and written communication, interpersonal, analytical, and problem-solving skills.
Demonstrated leadership and mentorship skills, including the ability to guide and train junior engineers.
Ability to work independently and as part of a team.
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security, or CompTIA are a plus.

Technologies

Next-generation firewalls; intrusion detection and prevention systems
VPN; network segmentation and zero trust
Multifactor and access control mechanisms
PCI DSS, SOX, NIST, ISO 27000, HIPAA
Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Firepower, ASA, WSA, ISE, Stealthwatch
Algosec, Tufin
Zscaler, Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation
SIEM; IDS/IPS; Network Packet Analysis; Netflow
HITECH; ISO/IEC 27001; NIST Cybersecurity Framework
Splunk; Trustsec; segmentation; syslog
Incident response and disaster recovery planning and testing

Benefits

Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health, and telemedicine services
Wellbeing support including free counseling and referral services
Time away from work programs including paid time off, paid family leave, long- and short-term disability coverage, and leaves of absence
401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support, and financial wellbeing counseling
Education support via tuition assistance, student loan assistance, certification support, dependent scholarships, and a partnership with Galen College of Nursing
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection, and consumer discounts

Physical Demands / Working Conditions

Position expectations involve minimal supervision due to design, service, and support knowledge and skillsets
May require periodic after-hours work and light travel at times with little notice
Requires sitting for extended periods

View full job page →

Get Computer Network Defense Engineer Jobs alerts

New Computer Network Defense Engineer Jobs, daily.