Information Security Engineer
Porto
Applications have closed
SWORD Health
Sword Health’s solutions combine AI and clinical expertise to deliver pain-fighting care without the need for opioids or unnecessary surgeries.What will you do:
- Continuous Vulnerability & Patch Management:
- Maintain vulnerability scanner fully operational;
- Build automated procedures using vulnerability scanner’s REST API;
- Collaborate to maintain and improve the continuous Vulnerability Management Process;
- Regularly run vulnerability assessments;
- Assess Security tools against CIS Benchmarks;
- Regularly produce vulnerability reports, prioritize the vulnerabilities to fix, and plan the response;
- Track the on going [risk responses] related to vulnerabilities classified as High or Critical;
- Ingest data from HR system and Google Workspace to keep vulnerability scanner inventory updated;
- Configure patch management software and verify that policies are deployed to all endpoints;
- Verify that patches are applied according to SLAs.
- Detection & Response:
- Maintain EDR fully operational;
- Build automated procedures using EDR’s REST API;
- Ingest data from the HR system and Google Workspace to keep the EDR database updated;
- Participate in the Response of Security Incidents and propose Incident Response Playbooks;
- Support MDR in investigations and incident response;
- Continuously track emerging threats and TTPs.
Required skills and experience:
- Degree in an IT field or similar experience in Information Security;
- Background in security and systems administration;
- Previous experience implementing managing workstation controls
- Good understanding of network protocols, design, and operations;
- Working knowledge of Security principles, techniques, and technologies;
- Experience with CarbonBlack, Crowdstrike, or SentinelOne;
- Experience with scanning tools such as Qualys, Tenable;
- Experience with Anti-Malware tools;
- Experience with defining and enforcing security best practices in a corporate environment;
- Preferably, holder of at least one of the following certifications: Security+, CISSP.
To ensure you feel good solving a big Human problem, we offer:
- A stimulating, fast-paced environment with lots of room for creativity;
- A bright future at a promising high-tech startup company;
- Career development and growth, with a competitive salary;
- The opportunity to work with a talented team and to add real value to an innovative solution with the potential to change the future of healthcare;
- A stimulating environment with room for creativity;
- A flexible environment where you can control your hours (remotely) with unlimited vacation;
- Access to our health and well-being program (digital therapist sessions);
- To get to know more about our Tech Stack, check here.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: APIs CISSP CrowdStrike EDR Incident response Malware Qualys REST API SLAs TTPs Vulnerabilities Vulnerability management
Perks/benefits: Career development Competitive pay Flex hours Flex vacation Startup environment Unlimited paid time off
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Cyber Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Product Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Cyber Security Specialist jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Senior Penetration Tester jobs
- Open Security Researcher jobs
- Open Cybersecurity Specialist jobs
- Open Senior Security Architect jobs
- Open Sr. Security Engineer jobs
- Open IT Security Engineer jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open ISO 27001-related jobs
- Open Pentesting-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open SaaS-related jobs
- Open CISA-related jobs
- Open Analytics-related jobs
- Open Threat intelligence-related jobs
- Open IAM-related jobs
- Open APIs-related jobs
- Open Java-related jobs
- Open Security assessment-related jobs
- Open Malware-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open IDS-related jobs
- Open EDR-related jobs
- Open Forensics-related jobs
- Open CEH-related jobs
- Open Kubernetes-related jobs