Aspen Information Security Engineer

Exemption Status:

“Pay scale information is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any selected candidate or employee, which is always dependent on actual experience, education, qualifications, and other factors.  A full review of our comprehensive pay and benefits will be discussed at the offer stage with the selected candidate.”

This position is not eligible for Sponsorship.

MedImpact Healthcare Systems, Inc. is looking for extraordinary people to join our team!

Why join MedImpact? Because our success is dependent on you; innovative professionals with top notch skills who thrive on opportunity, high performance, and teamwork. We look for individuals who want to work on a team that cares about making a difference in the value of healthcare.

At MedImpact, we deliver leading edge pharmaceutical and technology related solutions that dramatically improve the value of health care. We provide superior outcomes to those we serve through innovative products, systems, and services that provide transparency and promote choice in decision making. Our vision is to set the standard in providing solutions that optimize satisfaction, service, cost, and quality in the healthcare industry. We are the premier Pharmacy Benefits Management solution!

Job Description

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Enforces policy and supports security procedures, applications, and systems through the documentation of the resolution of assigned cases that range from simple to complex.
• Recommends changes to existing security processes and procedures.
• Uses strong endpoint skillset to enhance automation of endpoint vulnerability detection and remediation.
• Ability to utilize Endpoint Threat Detection and Response/Hunting toolsets.
• Creates requirements for product evaluations and/or procedures to enhance productivity and effectiveness. Provides direct support to the business and IT staff for security related issues.
• Drives the delivery of new and upgraded security applications, systems, and workflow.
• Testing of new systems for effective operations.
• Patch management for endpoints following security best practices including operating system patching, firmware updates, etc.
• Reviews system-related security plans throughout the network.
• Participates in efforts to proactively maintain and improve the automation, reliability, consistency, and the quality of existing IT security tools and environments throughout the organization. 

• Assists in the design, deployment, integration and configuration of security solutions or enhancements to ensure functionality.
• Ensures the confidentiality, integrity, and availability of data residing on or transmitted to, from, or through the enterprise workstations, servers, application systems, and data repositories.
• Initiates, facilitates, and promotes activities to create information security awareness. 
• Disseminates and educates users on security policies and practices.
• Participates in regular security awareness training and updates to ensure consistent compliance with IT Security Policies.
• Works cross-functionally and interacts with internal business units and stakeholders to support the business’ needs. 
• Using an automated customer case request system, tracks and documents security service requests and completed cases.
• Maintains up-to-date industry knowledge through formal/informal training, industry associations and research of latest technologies critical to the success of the company’s information security program.
• Continuously works to identify and improve security solutions to defend the company against data security threats.
• Apprises and keeps management aware of security issues; handles and/or escalates issues appropriately.
• Other duties may be assigned.

Supervisory Responsibilities        

No supervisory responsibilities

Client Responsibilities

This is an internal and external client facing position that requires excellent customer service skills and interpersonal communication skills (listening/verbal/written).  One must be able to; manage difficult or emotional client situations; Respond promptly to client needs; Solicit client feedback to improve service; Respond to requests for service and assistance from clients; Meet commitments to clients.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience

BS/BA and 6+ years’ experience or equivalent combination of education and experience, and 2 years' of SME in respective areas

Computer Skills

To perform this job successfully, the ideal candidate will possess knowledge of Microsoft Office Suite.

Certificates, Licenses, Registrations

• Security Certification is strongly preferred.
• OWASP, ISSA, ISACA membership a plus.

Other Skills and Abilities

• Endpoint Management Experience (BigFix, WSUS/SCCM, Symantec, Trend Micro, etc)
• Identity and Access Management
• Certificate Management
• Patch Management (Windows and Unix)
• Intrusion Detection and Prevention
• Security Awareness Training
• Mobile Device Management
• EDR (Endpoint detection and response)
• Web Content Filtering
• Device Encryption
• Vulnerability Assessment Tools
• Firewall and VPN
• Secure E-mail, Anti-SPAM
• Webserver applications
• Web API Service Security
• Business Continuity (Disaster Recovery)
• Compliance and Audit (HIPPA, HITRUST, SOX, and PCI a plus)
• OS Administration (Windows and Unix)
• Authentication and SSO
• Container Security

Reasoning Ability

• Ability to define problems, collect data, establish facts, and draw valid conclusions.

• Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.

Mathematical Skills

• Ability to apply concepts such as fractions, percentages, ratios, and proportions to practical situations.

• Ability to work with mathematical concepts such as probability and statistical inference, and fundamentals of plane and solid geometry and trigonometry. 

Language Skills

• Ability to write reports, business correspondence, and procedure manuals. 

• Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.

Competencies To perform the job successfully, an individual should demonstrate the following competencies:

Composure

Decision Quality

Organizational Agility

Problem Solving

Customer Focus

Drive for Results

Peer Relations

Time Management

Dealing with Ambiguity

Learning on the Fly

Political Savvy

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this Job, the employee is regularly required to sit and talk or hear. The employee is regularly required to stand; walk; use hands to finger, handle, or feel and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This position may regularly be exposed to or encounter moving mechanical parts, high, precarious places, fumes or airborne particles, toxic or caustic chemicals, outdoor weather conditions, risk of electrical shock or vibration. The noise level in the work environment is usually moderate (examples: business office with computers and printers, light traffic).

Work Location

This position works on-site at the San Diego Headquarters or other company location (or from a remote location with management approval based on business requirements). Must provide adequate support to internal clients; be available for regular interactions and coordination of work with other employees, colleagues, clients, or vendors; as well as be available to facilitate effective decisions through collaboration with stakeholders.

Working Hours

This is an exempt level position requiring the incumbent to work the hours required to fully accomplish job responsibilities and reasonable meet deadlines for work deliverables. The individual must have the flexibility to work beyond traditional hours and be able to work nights, weekends or on holidays as required.  Work hours may be changed from time to time to meet the needs of the business.  Typical core business hours are Monday through Friday from 8:00am to 5:00pm EST.

Travel

This position requires no travel however attendance may be required at various local conferences and meetings.

The Perks:

• Medical / Dental / Vision / Wellness Programs
• Paid Time Off / Company Paid Holidays
• Incentive Compensation
• 401K with Company match
• Life and Disability Insurance
• Tuition Reimbursement
• Employee Referral Bonus

To explore all that MedImpact has to offer, and the greatness you can bring to our teams, please submit your resume to www.medimpact.com/careers

MedImpact, is a privately-held pharmacy benefit manager (PBM) headquartered in San Diego,
California. Our solutions and services positively influence healthcare outcomes and expenditures, improving the position of our clients in the market. MedImpact offers high-value solutions to payers, providers and consumers of healthcare in the U.S. and foreign markets.

Equal Opportunity Employer, Male/Female/Disabilities/Veterans

OSHA/ADA:

To perform this job successfully, the successful candidate must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Disclaimer:

The above
statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.