IT Security Engineer II

Exemption Status: United States of America (Exempt) $110,982 - $155,376 - $199,769 “Pay scale information is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any selected candidate or employee, which is always dependent on actual experience, education, qualifications, and other factors.  A full review of our comprehensive pay and benefits will be discussed at the offer stage with the selected candidate.” This position is not eligible for Sponsorship. MedImpact Healthcare Systems, Inc. is looking for extraordinary people to join our team! Why join MedImpact? Because our success is dependent on you; innovative professionals with top notch skills who thrive on opportunity, high performance, and teamwork. We look for individuals who want to work on a team that cares about making a difference in the value of healthcare. At MedImpact, we deliver leading edge pharmaceutical and technology related solutions that dramatically improve the value of health care. We provide superior outcomes to those we serve through innovative products, systems, and services that provide transparency and promote choice in decision making. Our vision is to set the standard in providing solutions that optimize satisfaction, service, cost, and quality in the healthcare industry. We are the premier Pharmacy Benefits Management solution! Job Description The Information Security Engineer II develops, executes, and monitors enterprise-wide information security from policy through implementation across all Security departments including SECOPS, DEVSECOPS and Threat Analytics. This position expands the duties of the Security Engineer I to include direct security support for departments in corporate subsidiaries with identified areas of need which require experienced oversight. This position is required to ensure that business information is secure from unauthorized access, protected from inappropriate alteration, and is physically secure.  This “hands-on” position serves as the process owner for all ongoing security activities and is responsible for the protection of the confidentiality and integrity of client, employee, and proprietary business information in accordance with federal/state laws and regulations. Enforcement of and adherence to MedImpact’s corporate policies and procedures is required by all Security team members. Essential Duties and Responsibilities include the following. Other duties may be assigned. Enforces policy and supports security procedures, applications, and systems through the documentation of the resolution of assigned cases that range from simple to complex. Recommends changes to existing security process and procedures. Ability to utilize Endpoint Threat Detection and Response/Hunting toolsets Creates requirements for product evaluations and/or procedures to enhance productivity and effectiveness. Provides direct support to the business and IT staff for security related issues. Drives the delivery of new and upgraded security applications, systems, and workflow. Tests new systems for effective operations. Leads efforts to proactively maintain and improve the automation, reliability, consistency, and the quality of existing IT security tools and environments throughout the organization. Assists in the design, deployment, integration and configuration of security solutions or enhancements to ensure functionality. Ensures the confidentiality, integrity, and availability of data residing on or transmitted to, from, or through the enterprise workstations, servers, application systems, and data repositories. Initiates, facilitates, and promotes activities to create information security awareness.  Disseminates and educates users on security policies and practices. Participates in regular security awareness training and updates to ensure consistent compliance with IT Security Policies. Works cross-functionally and interacts with internal business units and stakeholders to support the business’ needs.  Using an automated customer case request system, tracks and documents security service requests and completed cases. Participates in daily activities and reporting required for regulatory and contractual information security obligations.  Coordinates tasks that are performed within the infrastructure (system administration, network administration, application support, etc.) for security updates and initiatives. Performs analysis, design and development of security features for system architecture. Participates in security incident investigations and provides on-going communication to security management.  Identifies root causes of security events and proposes solutions; closes out and documents investigations.  Ensures confidentiality and appropriate personnel are involved in the investigation. Maintains up-to-date industry knowledge through formal/informal training, industry associations and research of latest technologies critical to the success of the company’s information security program. Continuously works to identify and improve security solutions to defend the company against data security threats. Apprises and keeps management aware of security issues; handles and/or escalates issues appropriately. Provides guidance/training to less experienced staff. Apprises and keeps management aware of security issues; handles and/or escalates issues appropriately. Provides IT Security consultative support to internal and external clients. Manages IT Security related projects and assignments as assigned.        Supervisory Responsibilities          No supervisory responsibilities Client Responsibilities This is an internal and external client facing position that requires excellent customer service skills and interpersonal communication skills (listening/verbal/written).  One must be able to; manage difficult or emotional client situations; Respond promptly to client needs; Solicit client feedbac