Security Standards Compliance

Security Standards Compliance Engineer Jobs

4 jobs found

Today

Senior Network Security Engineer

HCA Healthcare Nashville, TN

Nashville, TN

Today

Full time Senior Computer Network Defense Cyber Security

Apply Now

Job Description

HCA Healthcare is seeking a Senior Network Security Engineer to lead the implementation, modernization, standardization, and enhancement of network security controls. In this role based in Nashville, TN (onsite), you will help protect enterprise infrastructure, patients, and sensitive data by reducing risk and strengthening continuous security control maturity across a Fortune 100 environment.

Reporting into the network security effort, you will perform and oversee policy and security assessments, evaluate security tooling and architecture, and translate findings into remediation recommendations, designs, and configuration changes. You will also collaborate with other IT teams to align network security controls with evolving operational and compliance needs.

Responsibilities

Lead implementation, modernization, standardization, and enhancement of network security controls to protect infrastructure, patients, and data from increasing risk and threats.
Perform and oversee reviews and assessments of policies for risk and vulnerabilities, identify hardening opportunities, and provide remediation recommendations, designs, and solutions.
Collaborate with IT teams to implement risk management practices, optimize technology solutions, monitor and adjust infrastructure, ensure regulatory compliance, and improve security posture over time.
Evaluate, recommend, and implement security measures including next-generation firewall features, intrusion detection or prevention systems, VPN, network segmentation and zero trust, and multifactor and access control mechanisms.
Conduct firewall rule reviews, security audits, baseline and best-practice compliance checks, and forensic network investigations to support adherence for data transmission and implement recommendations.
Support and manage network security solutions aligned with regulatory and industry requirements, including PCI DSS, SOX, NIST, ISO 27000, and HIPAA.
Evaluate vulnerability assessments and penetration tests, review metrics and security audits, and provide remediation recommendations and solutions.
Recommend and implement complex solutions and configuration changes within a large enterprise network to support continuous security control maturity and risk reduction.
Participate in incident response and disaster recovery planning and testing.
Collaborate with other IT teams to integrate network security controls with systems and applications, ensuring alignment with security standards.
Routinely perform audits and control tests on deployed technologies, collecting and consolidating performance indicators, risks, and trends, and providing baseline and regulatory compliance ratings.
Manage relationships with vendors and contractors to ensure security services are delivered on time and implemented in alignment with security policies.
Collaborate on development and documentation of security policies and procedures, including training and awareness.
Provide guidance and training to peers on compliance and best practices.
Research design enhancements and identify automated solutions or best-of-breed technologies while assisting with integration tests with vendors.
Stay current on threats, vulnerabilities, regulations, and industry best practices, and implement recommendations to improve security posture and control maturity.

Requirements

Bachelor’s degree preferred
5+ years of experience required
Extensive experience with security technologies including next-generation firewalls, intrusion detection or prevention systems, VPN, network segmentation, access control mechanisms, and security design and policy management in large 1000+ firewall environments.
Expertise in Checkpoint Firewall including CMA, Provider-1, Maestro, VSX/VSLS, and CloudGuard.
Experience with Cisco Network Security Products & Technologies including Firepower, ASA, VPN, WSA, ISE, Stealthwatch, and related tools.
Strong understanding of network protocols, topologies, tools, subnetting, and architectures.
Aptitude with network security policy management tools such as Algosec and Tufin and/or experience conducting risk assessments, firewall rule reviews, and security audits.
Strong knowledge of enterprise security technologies and processes including Zscaler, advanced threat detection tools, Antibot, Antimalware, threat emulation, SIEM, IDS/IPS, network packet analysis, and Netflow.
Experience designing solutions for security standards and frameworks including HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and the NIST Cybersecurity Framework.
Experience with network security management tools and technologies such as Splunk, Trustsec, segmentation, and syslog.
Excellent verbal and written communication, interpersonal, analytical, and problem-solving skills.
Demonstrated leadership and mentorship skills, including the ability to guide and train junior engineers.
Ability to work independently and as part of a team.
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security, or CompTIA are a plus.

Technologies

Next-generation firewalls; intrusion detection and prevention systems
VPN; network segmentation and zero trust
Multifactor and access control mechanisms
PCI DSS, SOX, NIST, ISO 27000, HIPAA
Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Firepower, ASA, WSA, ISE, Stealthwatch
Algosec, Tufin
Zscaler, Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation
SIEM; IDS/IPS; Network Packet Analysis; Netflow
HITECH; ISO/IEC 27001; NIST Cybersecurity Framework
Splunk; Trustsec; segmentation; syslog
Incident response and disaster recovery planning and testing

Benefits

Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health, and telemedicine services
Wellbeing support including free counseling and referral services
Time away from work programs including paid time off, paid family leave, long- and short-term disability coverage, and leaves of absence
401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support, and financial wellbeing counseling
Education support via tuition assistance, student loan assistance, certification support, dependent scholarships, and a partnership with Galen College of Nursing
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection, and consumer discounts

Physical Demands / Working Conditions

Position expectations involve minimal supervision due to design, service, and support knowledge and skillsets
May require periodic after-hours work and light travel at times with little notice
Requires sitting for extended periods

View full job page →

Today

Information Systems Security Engineer (ISSE)

General Dynamics Information Technology Fort Belvoir, VA

Fort Belvoir, VA

Today

$108k - $146k/yr Full time Information Security Information Systems Security InfoSec

Apply Now

Job Description

General Dynamics Information Technology is seeking a mid-level Information Systems Security Engineer (ISSE) to support Assessment and Authorization (A&A) and Continuous Monitoring (ConMon) efforts. In this role, you will help maintain RMF compliance across multi-level classification environments for DSMS, with responsibilities spanning security engineering support, documentation, and lifecycle-oriented security activities.

This position is based onsite in Fort Belvoir, VA. The likely salary range is USD 107,950 - 146,050 per year, with Secret clearance required and less than 10% travel.

What You’ll Do

Coordinate with other DSMS program teams to plan and create cybersecurity architecture and design documents for DSMS, ensuring compliance with DoD and other organizational IA policies and guidance.
Apply best practices when implementing security controls in an IS, including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
Develop cybersecurity architecture and design plans for communication and collaboration products, operating system platforms (servers and devices), management products, applications, and related security considerations for implementation.
Provide security engineering support for accreditation of DSMS Networks.
Integrate cybersecurity expertise into lifecycle management, including planning architecture and design management, migration and deployment, and system testing and implementation.
Research, develop, test, and document architectures and solutions for new cybersecurity technologies that improve information collaboration and cybersecurity capabilities for the program and its user base.
Develop and provide criticality analysis for logic-bearing system components (hardware, firmware, and software), including how components implement, protect, or introduce vulnerabilities to each function.
Develop and maintain mission criticality analysis, vulnerability assessments, risk assessments, and countermeasure implementation for Mission-Critical Functions, and ensure updated assumptions, rationale, results, supply chain risk information, and mitigations are available for Government review.
Prepare and submit Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests, including Plans of Action and Milestones (PoAMs).
Develop, maintain, and coordinate required Body of Evidence (BoE) documentation for system assets.
Collaborate across Technical Services and Security Services teams, along with customer agency stakeholders, to support compliance.
Track workflow for lien remediation and resolution activities and enter updates in tracking tools.
Evaluate system change requests and assess system and organizational risks tied to modifications.
Execute ConMon activities within established timelines, including BoE collection and tracking tool updates.
Conduct recurring reviews of system state and security posture to confirm secure operation and implementation of information systems security policies and procedures.
Recommend security control implementations and identify countermeasures or mitigating controls where needed.
Respond to requests and queries for security information and reports.
Support investigations of security incidents and provide reporting as required.
Assist with communication, implementation, and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems.
Advise stakeholders on information assurance standards, dependencies, and emerging security technologies.
Use Enterprise Security Services tools (including Trellix and ACAS) to track and remediate vulnerabilities and compliance deficiencies.

Required Qualifications

Education: Bachelor of Arts or Bachelor of Science
Experience: 2+ years of related experience
Security Clearance: Secret clearance required
Citizenship: U.S. Citizenship Required
Travel: Less than 10%

Technologies and Tools

Trellix
ACAS
Plans of Action and Milestones (PoAMs)
Body of Evidence (BoE)

Benefits

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities including paid education and certifications
Cutting-edge technology you can learn from and apply to solve real world problems

Additional Job Details

Location: Fort Belvoir, Virginia (Onsite Workplace)
Requisition Number: RQ229469
Category: Cyber and IT Risk Management
Requisition Type: Regular
Public Trust: None
Work Requirements: On Customer Site; travel less than 10%; years of experience may vary based on technical training, certification(s), or degree

Identity Verification Process: During virtual interviews, you are expected to be on camera. The company may take your picture to verify your identity and prevent fraud. You authorize the collection, processing, and use of biometric data for identity verification and security purposes.

View full job page →

2d ago

Senior Cybersecurity Engineer

Carnegie Mellon University Pittsburgh, PA

Pittsburgh, PA

2d ago

Full time Senior Cybersecurity Leadership Cybersecurity Tools

Apply Now

Job Description

Carnegie Mellon University’s Software Engineering Institute is seeking a Senior Cybersecurity Engineer to join the Cyber Risk and Resilience Directorate, supporting the Cybersecurity Assurance Team (CA Team). In this onsite role in Pittsburgh, you will consult with mission partners and help apply cybersecurity and operational resilience assessment and research to develop and transition practical solutions.

Working within multidisciplinary teams, you will lead engagements with customers and stakeholders while contributing to projects that push the state of the art. You will also represent the institute’s work through ongoing presentations, community engagement, and professional development aligned with the team’s portfolio.

Responsibilities

Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work to mission partners.
Contribute to customer projects that advance the state of the art in cybersecurity.
Represent the SEI by regularly presenting the mission and work to stakeholders.
Engage with communities of interest through publication and presentation, and build and maintain relationships with relevant research and technology communities.
Continue growing cybersecurity knowledge and stay current on emerging trends and topics relevant to the team’s portfolio.
Support cybersecurity assessment standardization, develop and employ security measurement approaches, and transition knowledge and expertise to the broader community.
Work collaboratively on multidisciplinary teams tackling difficult customer challenges in diverse environments.
Serve as a trusted advisor to defense and critical infrastructure customers.

Required Education and Experience

PhD in a relevant discipline with 5 years of applicable experience.
Alternative combinations include a BS with 10 years of applicable experience, or an MS with 8 years of applicable experience.

Required Qualifications

Track record of successfully leading projects for a technical discipline.
Ability to lead diverse teams analyzing and solving real-world problems by developing engineering guidance and applying or tailoring SEI and non-SEI technologies and resources.
Ability to lead beyond the immediate team, demonstrating leadership by influence.
Experience contributing to multiple simultaneous projects in a creative, high-energy environment.
Willingness to experiment with new practices and develop effective processes, practices, and infrastructure to support successful projects.
Enjoy mentoring, motivating, and empowering less-experienced team members in ways that promote performance and teamwork.
Strong communication skills and the ability to collaborate and interact diplomatically with customers and colleagues at all levels.
Ability to connect the big picture with detailed technical problem solving and to present complex ideas to audiences without deep subject-area knowledge.
Frequent travel (15–35%) to various locations within SEI and CMU community, customer sites, conferences, and offsite meetings.
Subject to a background investigation and ability to obtain and maintain a Department of War security clearance.
Must be currently legally authorized to work for CMU in the United States.
CMU will not sponsor or take over sponsorship of an employment visa for this opportunity.

Technologies and Frameworks

NIST CSF; NIST SP 800 series; ISO 27000 series
SEI and non-SEI technologies and resources
CMMI; Financial Sector Cyber Profile
Certifications/skills listed include A+ CE, CCNA-Security, CND, Network+ CE, SSCP, CISSP, CISM, CISA, and PMP

Benefits

Comprehensive medical, prescription, dental, and vision insurance
Retirement savings program with employer contributions
Tuition benefits
Paid time off
Observed holidays
Life and accidental death and disability insurance
Free Pittsburgh Regional Transit bus pass
Access to the Family Concierge Team to help navigate childcare needs
Fitness center access

Role Logistics

Location: Pittsburgh, PA (onsite)
Additional listed location: Arlington, VA, Pittsburgh, PA
Position type: Staff – Regular
Schedule: Full time
Job function: Software/Applications Development/Engineering
Pay basis: Salary

View full job page →

2d ago

Information Systems Security Engineer

Base-2 Solutions United States

United States

2d ago

Full time Cyber Security Cybersecurity Tools Identity and Access Management

Apply Now

Job Description

Base-2 Solutions is hiring an Information Systems Security Engineer (ISSE) to help protect national defense and mission-critical systems as part of an on-site team in the United States. This role combines security engineering, risk management, and cybersecurity compliance work, with opportunities to drive documentation, testing, and certification and accreditation support. You will work within established policy and frameworks while collaborating across system, software, and network disciplines.

Responsibilities

Develop, implement, and maintain security solutions for complex systems to support confidentiality, integrity, and availability.
Perform system security analysis, risk assessments, and vulnerability assessments to identify, evaluate, and mitigate risk.
Contribute to security architecture and system security engineering artifacts aligned to NIST, DoD, and IC policies and guidance.
Collaborate with system architects, software engineers, and network engineers to incorporate security requirements into system design.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), and Risk Management Framework (RMF) documentation.
Support continuous monitoring and compliance with security standards such as NIST SP 800-53, ICD 503, CNSS, and related requirements.
Recommend improvements to system security posture and address security incidents as they arise.
Participate in security testing, evaluation, and certification and accreditation (C&A) activities.
Interface with government customers and stakeholders to communicate technical information and security strategy.

Required Qualifications

Experience with cybersecurity frameworks and standards including NIST SP 800-53, RMF, ICD 503, CNSS, and DoD STIGs.
Hands-on experience with security tools such as ACAS, Nessus, Tenable, Splunk, Wireshark, HBSS, and McAfee ePO.
Experience with security technologies including firewalls, IDS/IPS, SIEMs, VPNs, PKI, and multi-factor authentication.
Experience producing and maintaining system security documentation: SSPs, POA&Ms, SARs, and Security Control Traceability Matrix (SCTM).
Experience with Linux, Unix, Windows, and virtualization technologies such as VMware and Hyper-V.
Experience with cloud platforms including AWS, Azure, and Google Cloud, with a focus on cloud security.
Knowledge of encryption protocols and technologies such as TLS/SSL, IPsec, VPN, and PKI.
Experience with security testing tools including Nmap, Metasploit, Burp Suite, and Kali Linux.
Scripting and automation experience with Python, PowerShell, and Bash.
Knowledge of SDLC, software assurance, and secure coding practices.
Experience collaborating and tracking issues using tools such as JIRA, Confluence, and ServiceNow.
Certifications including CISSP, CAP, CEH, Security+, AWS Security Specialty, or equivalent.

Benefits

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
Employee referral bonuses up to $10,000 per hired referral.
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
100% company-paid medical premiums for employees and eligible dependents, with plan options through CareFirst, Kaiser, and UnitedHealthcare (PPO, POS, HMO, and HSA-compatible plans).
100% company-paid dental premiums for employees and eligible dependents.
100% company-paid vision premiums for employees and eligible dependents.
100% company-paid premiums for short-term disability and long-term disability.
100% company-paid premiums for accidental death & dismemberment (AD&D).
100% company-paid life insurance up to $200,000.
401(k) with immediate vesting: 4% company match plus 4% non-elective contribution (8% total), with pre-tax and Roth options.
Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
Flexible work schedules including flex time and compressed work periods (contract and project-dependent).

Location: Annapolis Junction, MD (On-Site). Shift: First. Requisition ID: 4914. Referral eligibility: Eligible. U.S. citizenship required: Yes. Required security clearance: Active Top Secret/SCI with Full Scope Polygraph.

View full job page →

Security Standards Compliance Engineer Jobs

Senior Network Security Engineer

Information Systems Security Engineer (ISSE)

Senior Cybersecurity Engineer

Information Systems Security Engineer

Get Security Standards Compliance Engineer Jobs alerts