Staff Security Engineer – Privileged Access Management
We’re looking for a security-minded, hands-on senior individual with extensive Security Architecture and Engineering experience to support our security solution programs, focused on Privileged Access Management (PAM). The candidate must have strong operational knowledge of the security tool landscape and have a track record of optimizing and automating processes to achieve measurable efficiency and accuracy gains. This role is integral to the GIS program, and works directly alongside the Security Architecture / Engineering, Security Operations, Cyber Risk Governance, Tech Infrastructure and Network teams.At GHX we believe in fostering a diverse and inclusive workplace where everyone feels valued and supported.
We are committed to building a team that represents a variety of backgrounds, perspectives, and skills.
Responsibilities
- Be a thought leader and industry expert in the company for a significant technical vertical related to Security Technology (PAM)
- Engage with Executive level leaders to explain PAM concepts and present roadshows for associated initiatives.
- Lead global PAM security engineering projects, tool evaluations, deployments and mentor other engineers.
- Designing and implementing security processes to support security architecture and engineering using best-in-class security engineering principles; experience with the MITRE standards is a plus
- Security tool operations – building, maintaining, optimizing and configuring various tools across PAM.
- Lead design and architecture strategy and associated projects for PAM across all of GHX
- Strong experience with security metrics and measurements and process automation – understand how to measure monitoring of PAM processes and how to improve them based on historical data
- Partner with Security Operations (SecOps) Engineers to identify and evaluate best in class security solutions and plan production deployments and help document runbooks accordingly
- Support enterprise cybersecurity tabletop exercises across cross-function teams
- Assist with cybersecurity forensics and investigations
- Ability to contribute different thoughts, ideas and viewpoints that lead to greater innovation on projects and cross-functional collaborative efforts
Knowledge and Skills
- Strong understanding of security architecture and engineering concepts
- Strong understanding of MITRE TTPs or similar
- Demonstrated past contributor and “plugged-in” to the threat intelligence community and various industry sources
- Understand what it means to “think like a hacker” and take the attacker viewpoint
- Experience with operating security tools such as endpoint, server, and cloud PAM
- Experience with managing approved software via a PAM solution
Required Experience
- 10 years of IT experience, with 8 years focused in security engineering
- 5 years of PAM and/or IAM related experiences, strong preference to setting up a PAM program
- Strong CyberArk experience
- Fed experience, preference to setting up a program and implementation. FedRAMP, ATO
- We are looking for someone who is proficient in the role requirements, but who also brings a unique perspective and diversity of thought to our team. GHX encourages candidates from underrepresented groups to apply and is dedicated to providing equal opportunities for qualified applicants
Preferred Experience
Key Differentiator
- Security operations and threat intelligence experience
- Strong communicator who can partner internationally with senior security and application team members
- Self starter, takes initiative with strong conviction
Estimated Salary Range for this position: $122,900 to $163,800The base salary range represents the anticipated low and high end of the GHX’s starting salary range for this position. The base salary is one component of GHX’s total compensation package for employees. Other rewards and benefits include: health, vision, and dental insurance, accident and life insurance, 401k matching, paid-time off, and education reimbursement, to name a few. To view more details of our benefits, visit us here: https://www.ghx.com/about/careers/No 3rd party, agencies or C2C allowed.
No sponsorships, must be a US citizen or Green Card holder presently living in the USA. #LI-Remote #LI-RP
GHX: It's the way you do business in healthcare
Global Healthcare Exchange (GHX) enables better patient care and billions in savings for the healthcare community by maximizing automation, efficiency and accuracy of business processes.GHX is a healthcare business and data automation company, empowering healthcare organizations to enable better patient care and maximize industry savings using our world class cloud-based supply chain technology exchange platform, solutions, analytics and services. We bring together healthcare providers and manufacturers and distributors in North America and Europe - who rely on smart, secure healthcare-focused technology and comprehensive data to automate their business processes and make more informed decisions.It is our passion and vision for a more operationally efficient healthcare supply chain, helping organizations reduce - not shift - the cost of doing business, paving the way to delivering patient care more effectively.
Together we take more than a billion dollars out of the cost of delivering healthcare every year. GHX is privately owned, operates in the United States, Canada and Europe, and employs more than 1000 people worldwide. Our corporate headquarters is in Colorado, with additional offices in Europe, Illinois, Florida, and Nebraska.
Disclaimer
Global Healthcare Exchange, LLC and its North American subsidiaries (collectively, “GHX”) provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, national origin, sex, sexual orientation, gender identity, religion, age, genetic information, disability, veteran status or any other status protected by applicable law. All qualified applicants will receive consideration for employment without regard to any status protected by applicable law.
This EEO policy applies to all terms, conditions, and privileges of employment, including hiring, training and development, promotion, transfer, compensation, benefits, educational assistance, termination, layoffs, social and recreational programs, and retirement.GHX believes that employees should be provided with a working environment which enables each employee to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, national origin, sex, sexual orientation, gender identity, religion, age, genetic information, disability, veteran status or any other status protected by applicable law.
GHX expects and requires the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere. Improper interference with the ability of GHX’s employees to perform their expected job duties is absolutely not tolerated.
