Senior Security Engineer

COMPANY:The Company is a progressive leader in providing national healthcare connectivity and is based in Northern Virginia. This is an excellent opportunity offering a great small company culture under the direction of a diverse and proactive management team with an innovative mission. The Senior Security Engineer reports to the Director of IT Operations and will be responsible for ensuring the confidentiality, integrity, and availability of electronic protected health information (EPHI), by developing and implementing the necessary policies and procedures to achieve this goal.The person chosen for this senior level position will:
Confirm that EPHI systems do not compromise the confidentiality, integrity, and availability of any EPHI.
Develop, document, and disseminate appropriate security policies, procedures, and standards for the users and administrators of EPHI systems.
Ensure that a periodic risk analysis of EPHI systems is completed on an ongoing basis.
Assist with the selection, implementation, and administration of company’s security controls for EPHI systems.
Confirm the threats and risks to the confidentiality, integrity and availability of EPHI are monitored and evaluated.
Confirm that records are developed, monitored and audited of EPHI Systems to identify security incidents and malicious activity.
Assist the development and implementation of an effective security incident response policy and related procedures.
Identify or develop an effective vulnerability analysis platform for company.
Support daily activities related to production operations and support of partners, to include process definition and improvements, guiding and monitoring for adherence to defined processes, incident troubleshooting, and production support.
REQUIREMENTS
JOB REQUIREMENTS:This position requires a minimum of 5 to 8 years experience with the following:Both COTS and Custom applications.
Web application vulnerability assessment and penetration testing.
Maintaining and troubleshooting, production systems and applications.
Experience with monitoring implementation and optimization
Administrating SQL Server 2000/2005, Windows 2003 Server, and IIS.
.NET, XML, XSLT applications
Experience with secure coding and security practices complying with HIPAA, Sarbanes-Oxley, FISMA, 17799, etc.
Excellent verbal, written communication skills; analytical and problem-solving abilities.
Experienced with Microsoft Word, Excel, Project, and Outlook is expected.
Information and Network security certification/designation (CISSP, CISA, CEH, etc.).
Experience with SDLC application development on Microsoft platform a plus.
BA/BS is preferred.COMPENSATION:
The Company offers above average salary with an excellent benefits package.Please submit resume and cover letter in WORD format. No phone calls or faxes please.