Responsibilities
- Design, deploy, and manage security infrastructure including firewalls, mobile device management, identity solutions, email protection, and cloud environments using Fortinet, Microsoft Active Directory, Microsoft 365, and Azure; experience with similar platforms like Palo Alto is acceptable.
- Implement and oversee cloud security controls in Microsoft Azure with emphasis on identity governance, network segmentation, and data protection measures.
- Collaborate directly with infrastructure teams to architect and secure network and server environments, including firewall rules, virtual private networks, and access policies.
- Lead configuration and policy management for Proofpoint services including Email Security, Email DLP, Endpoint DLP, and Data Security Posture Management, tuning detection logic, handling alerts, and improving prevention mechanisms.
- Perform routine vulnerability scans using tools such as SecureWorks or Qualys and coordinate remediation actions with IT departments.
- Direct incident detection, analysis, containment, and recovery operations in partnership with internal teams and external agencies, leveraging threat intelligence to guide response strategies.
- Create automation scripts in PowerShell, Python, or Bash to streamline security operations and enhance efficiency.
- Lead the end-to-end Third-Party Risk Management (TPRM) program, including security assessments for vendors and partners, maintaining risk scoring models, responding to external audits from payers and collaborators, and ensuring alignment with HIPAA and data protection standards.
- Enforce compliance with HIPAA and other regulatory frameworks through policy implementation and proactive risk reduction techniques.
- Maintain accurate records of security settings and procedures and advise IT and business units on recommended security practices.
- Administer the organization’s security awareness training program, including developing content, scheduling phishing exercises, monitoring participation, and reporting workforce risk metrics to leadership.
- Act as primary point of contact for the Managed Security Service Provider to ensure effective monitoring, alerting, and incident response.
Work Arrangement
Hybrid
Other
Work Environment: Based at the Framingham, MA office (off Route 9, near Routes 90 and 495) on a hybrid schedule.
