As a part of our SecOps team, you will be at the front line of our security monitoring, risk assessment, escalation, and remediation processes.
Company Location: Philadelphia, PA, US
How you will help
As a part of our SecOps team, you will be at the front line of our security monitoring, risk assessment, escalation, and remediation processes. You will deep dive on every security alert, help tune monitoring and alerting systems, and investigate all avenues of risk to our people, systems, and data.
What you will do
- Manage and triage technical security issues and events
- Handle day to day monitoring of compliance, vulnerability scanning, and network security scanning
- Assist in policy maintenance and documentation of the environment
- Research new InfoSec trends and analyze threat Intelligence reports through subscribed feeds
- Maintain and/or create computer incident response documentation and methodology for responding to security events
- Schedule and execute monthly, quarterly, and annual security tasks and follow up with staff on any issues found
- Bolster existing SDLC processes through implementation of code scanning and reporting systems
- Ensure DR/BC processes are validated and complete
You…
- Are a careful listener who absorbs information well and takes the initiative to implement improvements
- Make security a priority in everything you do
- Have a basic familiarity with HIPAA, NIST CSF
- Keep up to date on data science tools and distributed computing methodologies
- Are familiar with scalable and/or cluster compute architectures
- Know the relevance of monitoring and measuring systems to identify bottlenecks
- Are comfortable with Shell scripting, Python, Ruby, or similar languages
Desired Skills And Experience
- 3-5 years system administration experience under Linux focused on patching, configuration management, and vulnerability remediation
- Comfortable with scripting in Python and Bash
- Working knowledge of Nmap, Nessus, OpenVPN, tcpdump, OpenSSL and other security related tools
- Understanding of data network configuration and infrastructure concepts, including TCP/IP, DNS, routers, internet/intranet/extranet, firewalls, web servers and security hierarchy including the application of encryption key infrastructures and authentication processes
Our company challenges
- Empowering clients with highly rewarding data discovery and licensing tools
- Ingesting and managing billions of healthcare records from a wide variety of partners
- Standardizing on common data models across data types
- Orchestrating an industry-leading HIPAA privacy layer
- Innovating our proprietary de-identification and data science algorithms
- Building a culture that supports rapid iteration and new possibilities
The infrastructure and culture we are building will provide an environment that cultivates innovation. We want to move fast knowing we can fix anything we break along the way. If a new need arises, we want to turn around a solution quickly. We want to solve our challenges in ways that create even more possibilities. We’re creating a platform that lets us discover what else we might do.
We have big plans
We are building a platform that will scale to support an ever-growing array of data providers and innovative products. You must be able to think big while still delivering on near-term requirements.
HealthVerity, based in Center City Philadelphia, is a venture-backed technology company that is transforming the way data-led organizations make critical decisions. Our technology platform serves as the foundation for the rapid creation, exchange, and management of healthcare and consumer data in a fully-interoperable, privacy-protecting manner. Advantaged by highly sophisticated identity resolution and matching capabilities, HealthVerity is on a mission to increase transparency, forge interoperability and activate deeper insights.
HealthVerity is an equal opportunity employer.
Cyber Security training
(Sponsored)
Need Security Training? Certifications at Your Own Pace
- IBM Cybersecurity Analyst Professional CertificateIntroduction to Cybersecurity Tools & Cyber Attacks by IBM
- Generative Adversarial Networks (GANs) Specialization from DeepLearning.AI
- Agile Leadership Specialization from the University of Colorado
- International Cyber Conflicts from the State University of New York (SUNY)
- IT Fundamentals for Cybersecurity Specialization by IBM
- Google Cloud Security Professional Certificate from Google Cloud
- Google Cloud Networking Professional Certificate from Google Cloud
- Introduction to Blockchain Specialization from Association of International Certified Professional Accountants
Seniority Level: Associate
Industry
- Information Technology & Services
- Computer Software
- Internet
Employment Type: Full-time
Job Functions
- Information Technology
