The Cyber and Data Security Engineer will protect Angel Aligner’s computer systems, networks, and data from cyber threats.
Supervisory Responsibilities:
-
None
Essential Functions, Duties & Responsibilities:
-
Design, implement, and manage cybersecurity solutions, including firewalls, intrusion detection and prevention systems (IDS/IPS), virtual private networks (VPNs), endpoint protection platforms, data loss prevention (DLP) tools, and security information and event management (SIEM) systems.
-
Manage user access controls by issuing, modifying, and revoking permissions in accordance with security policies.
-
Monitor systems for potential threats and suspicious activity, lead investigations into security incidents or data breaches, promptly respond and coordinate efforts to contain and remediate issues.
-
Perform regular vulnerability assessments and penetration testing and prioritize remediation of identified risks.
-
Conduct routine antivirus scans and ensure all endpoints receive timely security patches and updates.
-
Develop and maintain incident response plans, ensuring they are regularly reviewed and updated.
-
Serve as the primary liaison for cybersecurity and data protection, coordinating with local government departments and ensuring compliance with applicable laws and regulations.
-
Support internal and external audits by preparing documentation, responding to inquiries, and promptly addressing any identified issues in a timely manner.
-
Maintain accurate documentation of security operations, policies, controls, and incident reports.
-
Collaborate with the security team to promote security awareness and best practices across regional departments.
-
Domestic and international travel (see below).
Travel Requirements:
-
This position requires up to 10% of domestic and international travel.
Required Skills & Abilities:
-
Fluent in English, with excellent verbal and written communication skills.
-
Strong analytical and problem-solving abilities, including hardware and software troubleshooting.
-
Excellent documentation and organizational skills with keen attention to detail.
-
Excellent interpersonal skills and a customer-focused mindset.
-
Ability to manage sensitive information with discretion and maintain confidentiality.
-
Adaptable and able to work under pressure in a fast-paced, dynamic environment.
-
Team player with a proactive approach to identifying problems and implementing solutions.
Preferred Skills and Abilities:
-
Professional certifications such as CISA, CISSP or equivalent.
-
Experience with project management and cost control related to IT or security initiatives.
-
Working knowledge of regulatory compliance standards, including HIPAA and other data protection frameworks.
Education and Experience:
-
Bachelor’s degree in Computer Science, Information Security, or a related field is required.
-
Minimum of 3 years of hands-on experience with security tools and technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM), and data loss prevention (DLP).
Physical Requirements:
-
Regularly communicate with others by phone, email or virtual meetings.
-
Must be able to lift 20 pounds.
-
Prolonged periods sitting at a desk and working on a computer.
-
May be required to work unpredictable hours in emergency situations.