IT Senior Cybersecurity Engineer (SOC)

We are looking for a self-motivated Senior Cybersecurity Engineer to join the R1 Cybersecurity Operations Team. We have a relentless focus on driving results for our customers and enabling them to invest more into patient care; in turn, this allows us to continue to grow our company and your career.

 

Responsibilities: 

• Monitor various security tools to identify potential incidents, network intrusions, and malware events, etc., to ensure the confidentiality, integrity, and availability of R1’s architecture and information systems are protected. 

• Generate trouble tickets and perform initial validation and triage to determine whether incidents are security events using open-source intelligence (OSINT). 

• Review and analyze log files to report any unusual or suspect activities. 

• Utilize incident response use-case workflows to follow established and repeatable processes for triaging and escalating. 

• Follow established incident response procedures to ensure proper escalation, analysis, and resolution of security incidents. 

• Analyze and correlate incident event data to develop preliminary root cause and corresponding remediation strategy. 

• Provide technical support for new detection capabilities, recommendations to improve upon existing tools/capabilities to protect R1’s network, and assessments for High Value Assets. 

• Research Threat Intelligence sources on the latest malware, trends, patches to keep the Security Program up to date. 

• Document and maintain SOPs/Runbooks related to investigating security incidents. 

• Perform case management throughout the incident lifecycle for moderately complex security incidents. 

• Understand and assist with compliance and enterprise change management policies and procedures. 

• Attend and participate in cybersecurity projects and the change management process. This includes interacting with business units and technical teams to understand what is coming and how their projects can be more secure from the beginning. 

• Maintain metrics & reports on the status of the R1 cybersecurity operations program. 

 

Required Qualifications: 

• A bachelor’s degree in a technical discipline (e.g., Computer Science, Business Analyst, etc.) 

• A minimum of 2-4 years of professional experience in an IT-related field. 

• Intermediate knowledge of security, monitoring, and networking technologies, tools, protocols, and standards. 

• Intermediate or advanced security, networking, or audit certification or equivalent professional experience in security operations. 

• Knowledge of security policy, programs, process, and metrics. 

• Understanding/Experience on Network Security, Firewall Security, and Web Security (including web application firewalls and proxies). 

• Experience on SIEM, PIM, Content Filtering, and Firewalls. 

• Experience on Change Management Review and Security Audits/Reviews. 

• Understanding/Experience on Linux and pen testing tools. 

• Experience on Investigating, documenting, and reporting on any information security (InfoSec) issues as well as emerging trends. 

• Experience administering Security Tools. 

• Experience Threat Hunting and searching for malicious activity. 

• Strong drive and passion to deliver distinctive end-products, a quick learner with a strong attention to detail and quality. 

• Excellent interpersonal and communication skills. 

• Self-driven, with attention to detail and the ability to think outside the box for solutions to issues. 

• Knowledge of IT Industry standards such as ISO 27001, HIPAA, SOX. 

• Good knowledge of security programs, process, and metrics. 

• Good knowledge of IT Security Infrastructure and related applications and toolsets. Examples include firewalls & Network, Active Directory, DNS. 

 

Desired Qualifications: 

• Certification (or ability to obtain certification) in at least one of the following areas: General Security (CISSP), Cloud Security (GCLD, Cloud+, CCSK), and Ethical Hacking (CEH). 

• Experience with advanced cybersecurity tools, network topologies, intrusion detection, and secured networks. 

• In-depth understanding of NIST SP 800-61, SOC 2 AICPA controls, and frameworks. 

• Recent experience with static and/or dynamic code review process. 

• Experience with forensic data analysis. 

Working in an evolving healthcare setting, we use our shared expertise to deliver innovative solutions. Our fast-growing team has opportunities to learn and grow through rewarding interactions, collaboration and the freedom to explore professional interests.Our associates are given valuable opportunities to contribute, to innovate and create meaningful work that makes an impact in the communities we serve around the world. We also offer a culture of excellence that drives customer success and improves patient care. We believe in giving back to the community and offer a competitive benefits.What’s in it for you?• Competitive Total Rewards Package• Target variable incentives• Medical Plan (HMO) from Day 1 of employment with free dependents• Life insurance• Paid Time-Off Benefits• Sick Leave Conversion• Night Differential offered• Employee Referral Program• All Mandatory Statutory BenefitsR1 RCM Inc. (“the Company”) is dedicated to the fundamentals of equal employment opportunity. The Company’s employment practices , including those regarding recruitment, hiring, assignment, promotion, compensation, benefits, training, discipline, and termination shall not be based on any person’s age, color, national origin, citizenship status, physical or mental disability, medical condition, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, or any other characteristic protected by local law. Furthermore, the Company is dedicated to providing a workplace free from harassment based on any of the foregoing protected categories.Visit us on Facebook: https://www.facebook.com/r1rcmphilippines#R1Philippines #AllTogetherBetterinR1PH