Junior Security Engineer

Please note that this position is based on our campus in Madison, WI, and requires relocation to the area. We recruit nationally and provide financial relocation assistance.

We are looking for an exceptional Security Engineer to join our multi-tenant hosting team. You'll be instrumental in deploying, operating, and scaling a high-performance network that provides world-class availability and security. This position will challenge your ability to blend new technology with industry standard security best practices to protect our network from external threats.

You’ll act as a security expert within a small, collaborative team that is changing the way some of the nation’s largest healthcare organizations access our software. You’ll keep abreast of the latest technologies in a hands-on role that also provides a unique opportunity to shape the future direction and design of our systems. The ideal candidate is passionate about technology and the opportunity to play a foundational role in a new team, is self-motivated, and has great communication skills. Learn more about the team at https //careers.epic.com/Jobs/Hosting.

Key Areas of Responsibility

• Develop innovative security controls to protect assets across a large and complex environment
• Administer a wide and interesting range of security applications and systems
• Consult with internal teams on architecture and system designs
• Lead and develop internal red and/or blue team exercises
  
  

More than just important work.

Epic is located in Madison, Wisconsin, a city regularly ranked as one of America's best places to live. Epic's environment is one of continuous learning; you'll have access to opportunities to expand your skill set and share your knowledge with others. We offer comprehensive benefits to keep you healthy and happy as you grow in your life and career, and your merit-based compensation will reflect the impact your work has on the company and our customers. You'll also be eligible for annual raises and bonuses, as well as stock grants, which give you an even greater stake in the success of Epic and our customers. Epic is an Equal Opportunity employer. We seek diverse perspectives, backgrounds, and experiences in our mission to improve healthcare. Research has shown that job-seekers who are women, LGBTQ , or members of the global majority are less likely to apply for roles they don't seem completely qualified for, so we encourage all who are interested to apply. Please see our full non-discrimination statement at https //careers.epic.com/EEO.

This position features three different starting points, based upon prior experience.

Junior Security Engineer requires 0-2 years of the following

Security Engineer requires 2-5 years of the following

Senior Security Engineer requires 5 years of the following

• Delivering, implementing or creating complex technical security solutions
• Direct responsibility for one or more of the following
• Security administration
• DevOps security
• Penetration testing
• Forensics and incident response
• Network defense
• Technical security assessment
• Security controls gap analysis

Additional Preferred Qualifications

• Experience working with products in the following categories
• Enterprise password vaults
• Vulnerability scanning and management
• SIEM
• PKI
• Application control
• Network micro-segmentation
• Virtualization
• Working knowledge of at least one programming language
• Familiarity with PCI-DSS, SSAE 16, HIPAA, NIST, ISO17799/27001/27002, data privacy and similar regulatory and contractual requirements
• Experience with ITIL processes

Additional Requirements

• Relocation to the Madison, WI, area (reimbursed)
• A history of academic and/or professional success
• Eligibility to work in the U.S. without visa sponsorship
• COVID-19 vaccination
  
  

As a member of the Hosting team at Epic you'll be responsible for the confidentiality, integrity, and availability of Epic Hosting. Those responsibilities include:

• Following policies and procedures and escalating when policies or procedures are not followed
• Escalating potential security incidents and providing relevant information
• Meeting all security responsibilities defined in policies and procedures