Job Description

Job Description - Network Security Engineer (2304202)

Network Security Engineer

Position Summary

As a Network Security Engineer, you'll play a pivotal role in designing, implementing, maintaining, and troubleshooting functions within a multi-hospital healthcare system. This involves deploying new products, enhancing existing systems, and vigilantly monitoring security platforms for potential issues and live exploits. We're looking for a qualified candidate with exceptional communication skills, a commitment to our high standards of excellence, and the ability to collaborate as a team player while also demonstrating independence in their work.

Duties of a Network Security Engineer may include the following but are not limited to:

• Collaborate with senior-level engineers to assist in the design and implementation of Palo Alto firewalls, management solutions, and integrations.
• Assist in the integration of network security systems seamlessly with Cisco network infrastructure.
• Participate in the maintenance, troubleshooting, and upgrading of enterprise firewalls to ensure optimal performance.
• Working with senior-level engineers, develop and modify security rulesets in firewalls and switches, adapting to evolving security needs.
• Collaborate with senior-level engineers to investigate, analyze, and proactively respond to security events or incidents, demonstrating ability to research, identify threats, and implement effective response strategies.
• Collaborate with senior-level engineers on using HP/Aruba Clearpass Policy Manager (RADIUS/TACACS) to enhance network security.
• Help to configure and manage LAN-to-LAN and remote access VPNs in Palo Alto firewalls and Cisco ASAs.
• Work with team-members on HP/Aruba wireless networks, including controllers and APs, to ensure secure wireless communication.
• Under the direction of senior-level engineers, diagram, and document the network security environment using Visio for clear visualization.
• Provide support to internal SBMIT and external customers in utilizing security systems, VPNs, and wireless systems.
• Under the direction of senior-level engineers, interface with SOC for current network security systems, such as Cortex XDR-SIEM, NDR, and EDR.
• Contribute to project tasks including vendor communications and documentation, ensuring seamless implementation of security initiatives.
• Assist with troubleshooting network performance and outage issues.
• Participate in on-call support as needed.

Qualifications

Required :

• Bachelor's Degree and 5 years of experience with network and security devices in an enterprise setting.
• Network route/switch protocols including including (EIGRP, STP, OSPF, LLDP, IGMP, QOS, ARP, etc.).
• Proficiency in firewall policies, NAT, and protocols like DHCP, DNS, RADIUS, and TACACS.
• Firewall policies and NAT.
• DHCP, DNS, RADIUS, TACACS in enterprise environment.
• Microsoft AD and domains in enterprise environment.
• Virtual Machine environments (VMWare, Hyper-V, etc.).
• Application protocols such as (FTP, SFTP, SSL, etc.).
• Troubleshooting with Wireshark, including protocol decoding and filters.

Preferred :

• Network and security experience in large healthcare environments (over 1,000 computers).
• Hands-on experience with HP/Aruba Wireless networks (Mobility Conductors, Controllers, Clearpass Policy Manager).
• Expertise in Palo Alto firewalls (physical and virtual), Panorama.
• Experience with Palo Alto Cortex Pro, Endpoint, CDL, XSoar.
• Familiarity with Cisco ASA Firewalls.
• Use of Netscout NGenius, and Infinistream packet capture.
• Proficient in LAN-to-LAN and remote-access VPNs using Cisco and Palo Alto.
• Experience with NAC implementations or 802.1x in a production environment.
• Knowledge of security analysis resources such as Alien Vault, Virus Total, RiskIQ, Hybrid Analysis.
• Implementation of EDLs and ISAC feed integrations.
• Familiarity with network diagramming using Visio.
• Experience with Python programming.
• Certifications in Network or Security (CISSP, CCNA, CompTIA Security+).

Special Notes : Resume/CV should be included with the online application.

Posting Overview : This position will remain posted until filled or for a maximum of 90 days. An initial review of all applicants will occur two weeks from the posting date. Candidates are advised on the application that for full consideration, applications must be received before the initial review date (which is within two weeks of the posting date).

If within the initial review no candidate was selected to fill the position posted, additional applications will be considered for the posted position; however, the posting will close once a finalist is identified, and at minimal, two weeks after the initial posting date. Please note, that if no candidate were identified and hired within 90 days from initial posting, the posting would close for review, and possibly reposted at a later date.

______________________________________________________________________________________________________________________________________

• Stony Brook Medicine is a smoke free environment. Smoking is strictly prohibited anywhere on campus, including parking lots and outdoor areas on the premises.
• All Hospital positions may be subject to changes in pass days and shifts as necessary.
• This position may require the wearing of respiratory protection, which may prohibit the wearing of facial hair.
• This function/position maybe designated as “essential.” This means that when the Hospital is faced with an institutional emergency, employees in such positions may be required to remain at their work location or to report to work to protect, recover, and continue operations at Stony Brook Medicine, Stony Brook University Hospital and related facilities.

Prior to start date, the selected candidate must meet the following requirements:

• Successfully complete pre-employment physical examination and obtain medical clearance from Stony Brook Medicine's Employee Health Services*
• Complete electronic reference check with a minimum of three (3) professional references.
• Successfully complete a 4 panel drug screen*
• Meet Regulatory Requirements for pre-employment screenings.
• Provide a copy of any required New York State license(s)/certificate(s).

Failure to comply with any of the above requirements could result in a delayed start date and/or revocation of the employment offer.

*The hiring department will be responsible for any fee incurred for examination .

_____________________________________________________________________________________________________________________________________

Stony Brook University is committed to excellence in diversity and the creation of an inclusive learning, and working environment. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, familial status, sexual orientation, gender identity or expression, age, disability, genetic information, veteran status and all other protected classes under federal or state laws.

If you need a disability-related accommodation, please call the University Office of Equity and Access at (631)632-6280.

In accordance with the Title II Crime Awareness and Security Act a copy of our crime statistics can be viewed here .

Visit our WHY WORK HERE page to learn about the total rewards we offer.

Anticipated Pay Range:

The starting salary range (or hiring range) for this position has been established as - $69010-$79271.

The above salary range (or hiring range) represents SBUH’s good faith and reasonable estimate of the range of possible compensation at the time of posting.

In addition, all UUP positions have an additional $3,026 for location,

Some positions offer shift differentials for Night ($3,700) & Evening ($2,500) as well as $575 for inconvenience for positions not on day shift. Please visit these links to learn more.

Your total compensation goes beyond the number in your paycheck. SBUH provides generous leave, health plans, and state pension that add to your bottom line.

Job Number:

2304202

Official Job Title : Lead Programmer/Analyst

Job Field

: Information Technology

Primary Location

Department/Hiring Area : Networking Services

Schedule

: Full-time

Shift

: Day Shift Shift Hours : 8:30-5 Pass Days : Sat, Sun

Posting Start Date

Posting End Date

: Feb 6, 2024, 4:59:00 AM

Salary Grade : SL3

#J-18808-Ljbffr

Job Tags

Full time, Remote job, Outdoor, Shift work, Night shift, Day shift, Afternoon shift,

Similar Jobs