Compensation: $81,525 - $132,475

Benefits available for eligible positions include: 100% tuition assistance, wellness initiatives, generous paid time off, paid parental leave, Public Service Loan Forgiveness Program eligible employer, plus more. In addition to our many benefits and perks, UAB Medicine provides a variety of resources to support employees both personally and professionally.

Job Highlights:
A team of more than 400 professionals, Health System Information Services (HSIS) works to keep UAB Medicine's IT systems and infrastructure running smoothly to deliver quality care to our patients. Join our nationally ranked team at UAB Medicine, the No. 1 Best Large Employer in 2021 as ranked by Forbes magazine.

Work with the Best at UAB Medicine:
UAB Medicine is Alabama's largest single-site employer and operates over 1,200 beds and over 200 clinics in Birmingham, Alabama. When you become part of UAB Medicine, you join a nationally ranked academic medical center committed to education and advancing medical science through research.

- U.S. News & World Report's Best Hospitals, #1 in Alabama
- America's No. 1 Best Large Employer, Forbes, 2021
- Level I Trauma Center
- NCI-Designated Comprehensive Cancer Center, Comprehensive Transplant Institute, Comprehensive Stroke Center

Our success in patient care, innovation, and education is a direct result of our supportive and inclusive culture. Whether you are looking to start your career, fast-track your development, or diversify your skills, UAB Medicine offers avenues for advancement that other employers cannot match.

Duties and Responsibilities

As a Level 2 Information Security Engineer, you will support the organization's cybersecurity operations by monitoring, investigating, and responding to security events. This is an entry-level technical position requiring fundamental knowledge of cybersecurity tools and a commitment to professional growth.

Core Duties

1. Event and Incident Response

* Lead Projects with MSSP (Reliaquest) for ingest, forwarders, log aggregators

* Understand, edit, and implement Use Cases in Grey Matter-Chronicle

* Prepare Threat Hunts/Aggregate Data related to Threat Hunts and lead event/incident response activity related to Crowdstrike, Greymatter, Zscaler, Tenable, Chronicle, Axonius and other related systems

* Lead efforts within the Data Loss Prevention (DLP) platforms including Purview and others

* Evaluate emerging technologies for potential implementation at UABMC

* Evaluate IOC's, CVE's, emerging threats and threat actors and their relation to the UABMC environment

* Monitor and respond to security alerts in accordance with established procedures and the Cyber Incident Response Plan (CIRP).

2. Operational Console Monitoring

* Review and maintain awareness of security posture through daily monitoring of security consoles and dashboards.

* Identify anomalies, incomplete integrations, and tool health issues in systems such as CrowdStrike, Tenable, and Chronicle.

3. Threat Hunting

* Conduct proactive threat hunting activities under the direction of senior staff using internal tools (e.g., CrowdStrike, Chronicle).

* Analyze endpoint, network, and asset telemetry for potential indicators of compromise (IOCs).

4. Security Tool Operation

* Operate within and support the use of core security platforms, including but not limited to:

* - Delinea (Privileged Access Management)

* - CrowdStrike (EDR)

* - Tenable (Vulnerability Management)

* - Axonius (Asset Inventory)

* - Chronicle (Security Analytics)

* - Greymatter (Security Operations Platform)

5. Project Support

* Lead projects related to operational security protocols

* Contribute to process improvements and operational documentation.

6. Training and Development

* Actively participate in internal and external training opportunities to develop technical and procedural knowledge.

* Stay informed of current security threats, vulnerabilities, and best practices.

7. On-Call Participation

* Participate in the departmental on-call rotation and respond to after-hours security alerts or incidents as required.

Minimum Qualifications

Bachelor's degree in Information Systems or a related field and three (3) years of related experience
required. Work experience may substitute for education requirement.

Licenses / Certifications / Registrations

Certified Information Systems Security Professional (CISSP) certification preferred