Security Engineer

Position Summary The Security Engineer identifies, assesses, and manages security risks for Tactile Medical's data and infrastructure in the enterprise and cloud environments. The Security Engineer conducts vulnerability assessments to identify security risks from misconfiguration and software vulnerabilities and holds primary responsibility for prioritization and mitigation of threats based on severity and impact, and will engage with appropriate application and infrastructure owners to ensure timely remediation. The Security Engineer is the primary point of escalation for security investigations and incidents, working collaboratively with external Managed Security Service Providers and internal resources.

Accountabilities & Responsibilities

• Install, configure, test and maintain information security tools.
• Operational support for security alerts, incident response and forensic analysis.
• Assessment of security controls for compliance with regulatory requirements including HIPAA, SOX, and PCI-DSS.
• Provide high-level information security services for the company, including supporting regular auditing procedures, performing risk/vulnerability mitigation actions based on audit finding, incident response and documentation, and enforcement of best practices as defined by the company's Information Security Program.
• Research security trends, adversarial techniques and evolving threat landscape; advise and guide our Information Security Program as a Subject Matter Expert.
• Manage Information Security Awareness Training program for employees.
• Correlate network activity across networks (enterprise and cloud) to identify trends of unauthorized use or Indicators of Compromise.
• Coordinate with security vendors and internal personnel for projects and issue resolution; evaluate new tools and capabilities to improve our security posture.
• Validation and testing of new networking equipment, servers and workstations for security issues and compliance with baseline requirements.
• Maintain a high level of confidentiality on security matters.

Education & Experience:

Required:

• Bachelor's degree or equivalent experience
• 5+ years of experience in Information Security
• Strong understanding of Microsoft Windows / Active Directory and best practices for securing and monitoring
• Working knowledge of cloud security stack (CSPM, CASB) and Azure native features (CIS Benchmarking, Defender)
• Understanding of enterprise networking concept

Preferred:

• Information security certification (SSCP, CCSP, CISSP, CISA, CEH, CompTIA Security+)

Knowledge & Skills:

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• An understanding of organizational mission, values, and goals and consistent application of this knowledge
• Strong problem-solving and trouble-shooting skills
• Strong verbal and written communications skills

Competencies:

• Change Agent
• Influencing
• Empathy
• Flexible
• Teamwork
• Communication
• Process oriented
• Priority Setting
• Peer Relationships
• Problem Solving

It is the policy of Tactile Medical to provide equal opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Tactile Medical will provide reasonable accommodations for qualified individuals with disabilities.