Information Security Operations Engineer III

Cures Start Here. At Fred Hutchinson Cancer Research Center, home to three Nobel laureates, interdisciplinary teams of world-renowned scientists seek new and innovative ways to prevent, diagnose and treat cancer, HIV/AIDS and other life-threatening diseases. Fred Hutchs pioneering work in bone marrow transplantation led to the development of immunotherapy, which harnesses the power of the immune system to treat cancer. An independent, nonprofit research institute based in Seattle, Fred Hutch houses the nations first cancer prevention research program, as well as the clinical coordinating center of the Womens Health Initiative and the international headquarters of the HIV Vaccine Trials Network. Careers Start Here.

• Handle security incidents & incident prevention in partnership with IT and Managed Security Provider
• Assist in maintaining and participate in the enterprise incident response plan and program
• Respond to tickets for the enterprise and participate in day-to-day operations and projects
• Work alongside and mentor team members to improve security, reduce and quickly address risks
• Partner with Managed Security Provider for alignment with cyber security events, oversee and in some cases participate in remediations
• Partner with leading phishing vendor to ensure workflow, processes and success of phishing program
• Understand security vulnerabilities and provide relevant guidance to other IT teams
• Assist in identifying security risks by participating in security reviews, evaluations, and risk assessments
• Provide support to teams to solve technical challenges related to the implementation of security solutions

Required:

• BS/BA in Computer Science, Information Systems, Engineering, Business, or related field or the equivalent experience
• 7+ years of experience in information security
• Knowledge and experience with identity and cloud security technologies such as Azure AD SSO, MFA, Security Center; Microsoft CloudApp Security Portal; AWS IAM, CloudTrail, CloudWatch, GuardDuty
• Strong knowledge of logging methodologies and best practices
• Knowledge in information security fundamentals (threat modeling, penetration testing, incident response, network security, physical security, etc.)
• In-depth understanding of endpoint and network security for Windows, Linux (such as CentOS, Ubuntu), Mac
• Prefer at least one Information security related certificate such as CISSP, CISM, CCNP, Security +, SANs, GIAC
• Experience in web application security and secure development processes (SDL), including tools & mitigation of identified vulnerabilities
• Experience with industry standards such as HIPAA, ISO 27001, ISO 31000, NIST frameworks
• Excellent verbal and written communications skills
• Strong interpersonal skills, with demonstrated ability to communicate technical context across teams
• Ability to work individually as well as closely with team
• Self-motivated, with demonstrated initiative and commitment for results
• Great observational and analytical skills
• Able to advise business and technology on security best practice

Preferred:

• 3+ years experience in IT audit, information security, and/or privacy roles
• Knowledge of risk assessment methodologies, information security policies and standards, compliance frameworks and security operations in complex technical environments

We are proud to be an Equal Employment Opportunity (EEO) and Vietnam Era Veterans Readjustment Assistance Act (VEVRAA) Employer. We are committed to cultivating a workplace in which diverse perspectives and experiences are welcomed and respected. We do not discriminate on the basis of race, color, religion, creed, ancestry, national origin, sex, age, disability (physical or mental), marital or veteran status, genetic information, sexual orientation, gender identity, political ideology, or membership in any other legally protected class. We are an Affirmative Action employer. We encourage individuals with diverse backgrounds to apply and desire priority referrals of protected veterans. If due to a disability you need assistance/and or a reasonable accommodation during the application or recruiting process, please send a request to our Employee Services Center at hrops@fredhutch.org or by calling 206-667-4700.