Full-time
Lehi, UT

Description
Solutionreach is hiring for a Senior Manager of Security Operations. This role is a hybrid remote role, with the ability to come into our Lehi, Utah corporate headquarters as needed.
We are looking for a passionate experienced individual to lead our information security team. This position reports to the General Counsel. In this position you will build out a cybersecurity program, assess controls, help in performing regular compliance audits, and lead a team of security professionals. You will be an ambassador for security initiatives throughout the various departments of the organization.

The tenets of our Credo – Team Members First, Fearlessly Lead and Evolve, Communicate Clearly and Bring Our Best Selves – form the fabric of our organization. They are reinforced daily and serve as key dimensions in the hiring process to help us ensure that we attract outstanding talent and make Solutionreach a great place to work.

Requirements: What will I need to thrive in this role?

• Lead IT/Engineering/Security/DevOps teams to integrate new security solutions.
• Tuning and maintaining SIEM monitoring systems for on prem/cloud environments.
• Champion secure coding guidelines.
• Review and analyze security events and tools in order to assist in optimizing currently deployed tools/procedures/processes.
• Troubleshoot and perform root cause analysis to assist in identifying suspicious activity.
• Conduct vulnerability assessments and threat modeling assessments.
• Provide guidance, recommended controls, and countermeasures to identified and exposed risks.
• Ensure control procedures, risks, and policies are properly mapped to industry regulations and guidelines.
• Lead incident response processes and procedures as they relate to changing threats and requirements.
• Provide analysis of security tool event feeds, network traffic and log analysis.
• Advise on best tools, processes, practices and standards to ensure effective protection of information security assets.
• Collaborate with technology teams or 3rd parties to drive remediation of IT risks identified by internal/external assessments.
• Coordinate identification of vulnerability owners and remediation of those vulnerabilities as it relates to HIPAA and other regulatory requirements.
• Perform IT Risk & Security assessments, recommending information security solutions to assist businesses with the assessment and improvement of their security infrastructure and applications.
• Facilitate regular compliance audits
• Create and/or update written security policies.
• Experience leading technical teams (IT, Security, Engineering)
• Bachelor’s degree in Information Security, Information Systems, Computer Science, related field and/or equivalent experience.
• 5+ years of network, server, or security experience.
• Previous experience securing cloud systems.
• Experience implementing and/or working with a SIEM to review and analyze security events from various monitoring and logging sources to identify and/or confirm suspicious activity.
• Excellent analytical and problem solving skills related to networking, operating systems, and malware analysis.
• One or more of the following professional certifications: CISSP, SANS (GSEC, GCIA, GPEN, GCIH, etc.), CISA
• Strong networking skills and knowledge of TCP/IP protocol.
• Experience administering network equipment, firewalls, and/or VPNs.
• Experience diagnosing T.A.R.D.I.S. timey wimey problems.
• Ability to translate business needs and regulatory requirements into cost effective and risk appropriate controls.
• Experience with IDS/IPS systems, such as Snort, Cisco Firepower, etc.

Preferred, but not required

• Experience tuning a Web Application Firewall, ideally Signal Sciences or similar.
• Experience with Identity Management systems like Cisco Identity Service Engine (ISE).
• Experience with endpoint security management utilizing MDM’s such as Workspace ONE or MaaS360 and modern Antivirus suites such as Crowdstrike or Carbon Black.
• Experience with HITRUST CSF.

Not required but preferred

• Certifications such as Network+, Linux+, Security+
• Experience with automation tools such as salt.
• Experience with Cisco ISE.
• Experience with secure email gateways.
• Experience with Okta/OAuth/SAML.
• Experience with GCP and microservices.
• Programming experience.
• Scripting skillz. (Shell, Python, Java, PHP, PowerShell, etc.)
• Knowledge of project management.
• Knowledge of DevOps, and Agile SDLCs.
• Knowledge of ITIL including incident, problem, and change management.

Sounds great. What else do I need to know?

• Fast Evolution: Solutionreach evolves quickly and constantly to succeed as a business. This means sometimes we switch gears halfway through a project, solve problems with minimal information, and roll with the punches.
• Big Goals: We have a mission to transform healthcare, and you impact that directly. We demand high execution and strong results. You work smart and get it done.
• Non-stop Learning: We care about personal development and have a culture of feedback, so your manager or team may have to tell you things that are difficult to hear and vice versa.
• Differences: The last thing we want is hiring people who are just like us. This means you will work with others that you may not immediately click with or sometimes disagree with. That's not a bad thing. Be curious and compassionate. Be willing to change your mind. That's belonging in its true form: celebrating and finding genuine value in our differences.

What is the selection process?

• A phone call with People & Culture, our version of HR.
• A Zoom interview with the Hiring Manager.
• A Zoom interview with the Department Director.

Solutionreach, Inc. is an equal opportunity employer and E-verify participant. We welcome and encourage diversity in the workplace regardless of gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other characteristics protected by law.

Job Type: Full-time

newlondonrocks.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, newlondonrocks.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, newlondonrocks.com is the ideal place to find your next job.