Security Engineer chez Questanalytics

Quest Analytics is one of the fastest growing companies in the Healthcare software space in the US. Healthcare providers and insurance companies rely on our software. We do the important work of providing access to healthcare for all Americans! We are searching for a Security Engineer to join our team in our Overland Park, KS office! In this role, you will contribute to the achievement of security objectives for Quest Analytics. You will provide technical security leadership across multiple security domains to ensure IT best practices and compliance requirements are met for both industry and regulatory standards (HITRUST, FISMA, NIST) when applicable. You will provide deep information security expertise for projects within any of the Information Technology or DevOps disciplines and can provide security guidance to multiple technical teams.  You will possess a thorough understanding of emerging technologies and our current business strategy and will offer and recommend solutions.  

In this role you will:

Collaborates with Systems Administrators, DevOps Engineers, the Director of Security, Development personnel, and Legal, and HR associates to align security requirements to meet business objectives. 

Participates in monthly security reviews and provides oversight to application implementations through ongoing security design reviews and risk assessments in order to build security into solutions and to ensure compliance with industry and regulatory standards. 

Provides security support during vendor risk assessments. 

Viewed as a security expert across the organization, working with various technology team members to convey security best practices and communicate Quest Analytics security requirements. 

Owns, maintains and matures information security review processes and documentation. 

Plans the delivery and implementation of core information security projects and capabilities in relation to network connectivity, firewalls, threat analysis, encryption, and segmentation. 

Partners with technology and business partners to ensure compliance with policies and standards. 

Determines security requirements for internal and external projects via interpretation of policies and  standards.   

Evaluates new technologies, processes, standards, and frameworks on an ongoing basis. 

Ensures capability readiness for security controls (people, process, and technology). 

Evaluates gaps in existing technologies and processes. 

Assists with the implementation, configuration, and operations of various security tools as required. 

Works with the organization to achieve and maintain industry security standards (HITRUST, FISMA, ISO etc.). 

What we are looking for:

Bachelor’s Degree in Information Systems, Computer Science or related field preferred.  

Experience working in a security role for a SaaS organization is a must. 

Applicants should possess 5+ years of industry related experience in Information Security, Information Technology or Application Development.  

3+ years demonstrated success in developing, operating, leading and implementing security solutions and functions. Relevant Examples include– Vulnerability Management, Application Pen Testing, Cloud Security, Data Security or Threat Management/Intelligence.  

Strong experience independently developing processes to solve complex issues and implementing new security programs based on current industry best practices.  

Experience working with application security vulnerabilities and technologies is required.  

Three or more years’ participating in vendor and internal security assessments is required.  

Two or more years’ experience working in a security operations role is desired.  

Certifications: CISSP, CISM, CEH or equivalent preferred. 

Has strong focus on business outcomes. 

Comfortable with collaboration, open communication and reaching across functional borders. 

Self-motivated and able to work in a fast-paced, deadline-oriented environment .

Excellent troubleshooting, listening, and problem-solving skills.

Proven ability to solve complex issues.

Customer focused.

Works well in a team environment.

Postuler maintenant