IT Senior Network Engineer

ROLE SUMMARY

The IT Security Engineer is a hands-on technical position responsible for the engineering, implementation, administration, testing, documentation, and continuous improvement of the organization's cybersecurity technologies and controls.

Working under the direction of the IT Security Director, this position translates cybersecurity strategy, risk requirements, and architectural direction into effective technical solutions. The engineer will take ownership of security engineering initiatives from technical research and design through testing, implementation, documentation, validation, and ongoing optimization.

The position will work across endpoint security, identity and access management, security monitoring, vulnerability management, network security, cloud environments, applications, email security, automation, infrastructure, and emerging technologies.

This is an Hourly, Non-Exempt position.

KEY RESPONSIBILITIES

• Ability to assess complex cybersecurity issues, isolate root causes, and apply sound technical judgment.
• Ability to explain technical risks and remediation options clearly to both technical and nontechnical stakeholders.
• Ability to plan and execute work with accuracy, appropriate change control, and thorough documentation.
• Ability to manage competing priorities, exercise discretion, and escalate risks or incidents in a timely manner.
• Ability to work independently in a remote setting while collaborating across locations and business functions.

Security Engineering and Implementation:

• Design, configure, implement, test, administer, and improve cybersecurity controls and technologies.
• Translate security requirements and architectural direction into technical configurations and solutions.
• Evaluate existing security configurations and identify opportunities for improvement.
• Develop implementation plans, configuration standards, testing procedures, and rollback procedures.
• Validate implemented controls and document results.
• Partner with infrastructure, networking, application, development, and operations teams to implement security requirements.
• Maintain secure configuration baselines and periodically validate deployed controls against those baselines.

Security Monitoring and Detection Engineering:

• Engineer and maintain enterprise security monitoring and detection capabilities.
• Develop and tune detection logic for suspicious and malicious activity.
• Develop threat-hunting and investigative queries.
• Onboard security telemetry and ensure appropriate logging coverage.
• Troubleshoot log collection, parsing, normalization, and ingestion issues.
• Develop security dashboards and operational reporting.
• Evaluate detection effectiveness and identify monitoring gaps.
• Maintain documentation describing security telemetry, detection logic, and response procedures.

Identity and Access Security Engineering:

• Engineer and maintain identity and access security controls.
• Support multifactor authentication, conditional access, authentication policies, privileged access, and identity protection capabilities.
• Review administrative, service, application, and workload identities.
• Implement and validate least privilege of access controls.
• Investigate suspicious authentication and accountancy activity.
• Assist with privileged-access security and administrative account protection.
• Develop identity-related security monitoring and detection capabilities.
• Test proposed identity-security changes before production implementation.

Vulnerability and Exposure Management:

• Administer and improve vulnerability and exposure-management capabilities.
• Manage authenticated, agent-based, and network-based security assessments where applicable.
• Research vulnerabilities, security advisories, attack techniques, and emerging threats.
• Analyze vulnerability severity, exploitability, exposure, asset criticality, and business impact.
• Prioritize remediation activities based on organizational risk.
• Coordinate remediation efforts with system, infrastructure, and application owners.
• Perform post-remediation validation.
• Maintain vulnerability-management documentation, metrics, and technical evidence.
• Identify systemic security weaknesses rather than treating vulnerabilities solely as individual findings.

Incident Response and Technical Investigation:

• Serve as a technical escalation point for complex security events and incidents.
• Investigate endpoint, identity, network, cloud, email, and application security events.
• Analyze authentication activity, system behavior, processes, network activity, logs, and other security telemetry.
• Determine the scope and potential impact of security incidents.
• Perform or coordinate authorized containment and remediation actions.
• Collect and preserve technical evidence.
• Identify indicators of compromise and relevant attacker behaviors.
• Develop additional detections based on investigation findings.
• Perform root-cause analysis.
• Document investigations, findings, remediation, and lessons learned.
• Support organizational incident-response activities when required.

Security Architecture and Project Engineering:

• Support the IT Security Director in implementing organizational security architecture.
• Review proposed system and application designs for technical security requirements.
• Develop and document security requirements for new technologies.
• Evaluate network connectivity, authentication, authorization, encryption, identity, logging, and monitoring requirements.
• Create and maintain security and data-flow diagrams.
• Validate security boundaries and least privilege principles.
• Evaluate service and workload identity designs.
• Assist with securely integrating applications, databases, APIs, cloud services, infrastructure, and third-party systems.
• Conduct post-implementation security validation.

Application and Emerging Technology Security:

• Participate in application and system security reviews.
• Assist with secure development and deployment requirements.
• Review application authentication and authorization controls.
• Evaluate APIs, service accounts, application identities, secrets management, and supporting infrastructure.
• Assist with database and application-level access-control design.
• Establish monitoring and detection requirements for newly implemented technologies.
• Support technical security testing of internally developed and third-party applications.
• Assist with security requirements associated with organizational adoption of AI and other emerging technologies.

Security Assessments and Technical Risk Analysis:

• Perform technical components of cybersecurity and technology risk assessments.
• Evaluate proposed applications, services, infrastructure, integrations, and other technologies.
• Analyze vendor-provided technical and security documentation.
• Validate authentication, encryption, logging, access control, data handling, vulnerability management, monitoring, and other security capabilities.
• Conduct hands-on technical validation where appropriate.
• Document technical findings, identified risks, recommended controls, and remediation requirements.
• Validate remediation activities prior to production implementation when required.

Security Documentation:

Documentation will be a core responsibility of this position.

The engineer will:

• Create and maintain security architecture documentation.
• Create network, system, and data-flow diagrams.
• Develop technical implementation documentation.
• Develop and maintain standard operating procedures and technical runbooks.
• Document security configurations and baselines.
• Maintain investigation and incident-response procedures.
• Document vulnerability-management processes.
• Document security monitoring and detection requirements.
• Maintain inventories of applicable security controls and integrations.
• Document testing, validation, and remediation activities.
• Maintain technical evidence supporting security assessments, audits, and compliance activities.
• Ensure engineering processes are repeatable and are not dependent on undocumented institutional knowledge.

Security Automation:

• Develop automation supporting security engineering and operations.
• Integrate security technologies through supported APIs and automation capabilities.
• Automate repetitive investigation, evidence-collection, enrichment, containment, and remediation processes where appropriate.
• Develop automated security response workflows.
• Maintain security scripts and associated technical documentation.
• Build repeatable reporting and control-validation processes.
• Evaluate opportunities to reduce manual security workload through safe and controlled automation.

Security Operations Support:

• Validate the operational health of security controls and monitoring capabilities.
• Investigate high-risk or technically complex security alerts.
• Support escalation of suspected or confirmed incidents.
• Validate endpoint, identity, email, network, vulnerability, cloud, and application security coverage.
• Troubleshoot failures in security telemetry or technical controls.
• Provide advanced technical support to security analysts and other IT personnel.

Qualifications

REQUIRED QUALIFICATIONS

• 3+ years of hands-on cybersecurity, security engineering, infrastructure security, systems engineering, systems administration, network administration, or equivalent professional experience.
• Experience administering enterprise cybersecurity technologies.
• Strong understanding of identity and access-management security.
• Working knowledge of TCP/IP, DNS, HTTP/S, firewalls, VPNs, routing, network segmentation, and other enterprise networking concepts.
• Experience working with security monitoring and event-management technologies (SIEM).
• Experience analyzing security logs and investigating cybersecurity events.
• Understanding of endpoint detection and response concepts.
• Working knowledge of vulnerability and exposure-management practices.
• Experience supporting enterprise operating systems and infrastructure.
• Ability to independently research cybersecurity threats, vulnerabilities, and technical issues.
• Strong troubleshooting and root-cause-analysis capabilities.
• Strong technical documentation skills.
• Ability to translate security risks into actionable technical remediation.
• Ability to collaborate effectively with infrastructure, application, development, operations, and business teams.

Preferred Technical Skills:

To avoid disclosing the organization's technology stack, I would keep the public posting product-neutral:

• Enterprise Endpoint Security and EDR technologies
• SIEM and security analytics platforms
• Identity and access-management technologies
• Vulnerability and exposure-management platforms
• Email security technologies
• Network security technologies
• Cloud security technologies
• Security orchestration and automation
• Scripting languages such as PowerShell or Python
• REST APIs and JSON
• Security query languages
• Relational database fundamentals
• System and application logging
• Syslog and other common telemetry protocols
• Enterprise Windows administration
• Directory and identity services
• Source control and version-management practices

Preferred Certifications:

Examples of relevant certifications include:

• Security+
• CySA+
• CISSP
• GIAC security certifications
• Cloud security certifications
• Identity and access-management certifications
• Incident-response or security-operations certifications

Equivalent demonstrated hands-on engineering experience may be considered in place of certifications.

PHYSICAL REQUIREMENTS

The physical requirements below are representative of those associated with the essential functions of the position, with or without reasonable accommodation:

• Ability to sit or stand and use a computer, keyboard, mouse, telephone, and related office equipment for extended periods.
• Ability to review detailed information on computer screens, communicate effectively, and participate in virtual and in-person meetings.
• Ability to perform repetitive hand and finger movements associated with typing, configuration, and documentation work.

Ability to move within office and technical work areas and occasionally handle or move routine IT equipment or materials, using assistance or appropriate equipment when needed

CORE COMPETENCIES

• Cybersecurity Engineering and Technical Execution
• Analytical Thinking and Root-Cause Problem Solving
• Threat Detection and Incident Investigation
• Risk Assessment and Sound Judgment
• Documentation and Attention to Detail
• Security, Privacy, and Confidentiality
• Cross-Functional Communication and Collaboration
• Accountability, Reliability, and Follow-Through
• Adaptability and Continuous Improvement
• Service Orientation and Professional Integrity

REPORTING RELATIONSHIP

Reports to the IT Security Director and partners with infrastructure, networking, applications, operations, and other business and technical teams. This is an individual-contributor role; no direct reports are currently identified. The engineer may provide technical guidance or coordinate cross-functional security initiatives as assigned.

WORK ENVIRONMENT & TRAVEL

Work Environment

This is a full-time position. Work is ordinarily performed during business hours; occasional evening, weekend, or other nonstandard-hour support may be necessary to respond to security incidents, maintenance windows, implementations, or urgent operational needs. Any formal on-call expectations will be communicated by management.

Work is primarily performed remotely in a professional, computer-based environment. On-site work may take place in company offices, technology facilities, ambulance operations centers, or other operating locations. The employee must observe applicable workplace safety, access control, confidentiality, and information security requirements at all locations.

Travel Requirements

The role is remote with on-site presence as needed. Occasional travel to corporate offices, operating locations, or other sites may be required for security projects, meetings, investigations, technical validation, or operational support. Travel frequency and any overnight requirements depend on business needs.

Compliance and Confidentiality

The IT Security Engineer must comply with applicable laws and regulations; PAFOC policies and procedures; cybersecurity, privacy, access-control, records-retention, and information-handling standards; and HIPAA requirements to the extent the role accesses or supports systems containing protected health information. The employee must safeguard confidential, proprietary, employee, patient, and business information, use authorized access only, and promptly escalate suspected information security or privacy incidents under company procedures.

Success Measures

The IT Security Engineer will be expected to contribute to measurable improvement across:

• Security engineering initiatives completed and properly documented.
• Reduction of repetitive manual security processes through controlled automation.
• Increased monitoring and detection coverage.
• Improved quality and reliability of security telemetry.
• Effective identification, prioritization, remediation, and validation of vulnerabilities.
• Maintenance of established security configuration baselines.
• Quality and completeness of technical security documentation.
• Reduction of recurring control failures and configuration deficiencies.
• Timely implementation of security remediation.
• Successful integration of security requirements into new systems and applications.
• Improved repeatability of security engineering and investigation processes.

About Priority Ambulance

As part of the Priority Ambulance Family of Companies, you will join one of the nation's leading providers of medical transportation and mobile healthcare services. Our work supports the teams, technologies, and services that connect patients and communities to high-quality care.

Equal Employment Opportunity

Priority Ambulance Family of Companies is an equal opportunity employer. Employment decisions are made in accordance with applicable federal, state, and local equal employment opportunity laws.

General Statement

This job description describes the general nature and level of work performed and is not intended to be an exhaustive list of all duties, responsibilities, or qualifications. Duties may be modified or additional duties assigned in response to organizational, operational, security, or regulatory needs. Essential functions may be performed with or without reasonable accommodation, consistent with applicable law and company policy. This description does not create a contract of employment.