Sr Cybersecurity Engineer

ReviveRX is the premier licensed pharmacy specializing in health, wellness, and restorative medicine. We focus on treating the source, not just the symptoms, utilizing industry-leading technology. Collaborating with innovative pharmacists, healthcare providers, and pharmaceutical manufacturers, we provide personalized care. Our mission is to optimize treatment, revolutionize healthcare, and empower individuals to live vibrant lives. We welcome you to join us in our commitment to holistic wellness and personalized medicine. 

Position Summary
The Senior Cybersecurity Engineer is responsible for the management and maintenance of our cybersecurity infrastructure and operations and owns the technical execution and day-to-day maturity of our security tooling and processes, doing their due diligence to protect our IT systems and data. This role involves identifying vulnerabilities, leading incident response, and owning digital forensics and e-discovery work. This position will collaborate with IT leadership and various departments to support cybersecurity-related projects and provide technical guidance. Additionally, the role requires maintaining detailed documentation of cybersecurity systems and processes.

Key Responsibilities
Identify, implement, and manage a solid cybersecurity infrastructure to protect IT systems and data
Monitor security systems and identify vulnerabilities to ensure high security and compliance; assist with tuning platform settings to reduce false positives and improve escalation quality
Lead digital forensics, incident response, and e-discovery requests
Administer and maintain the data classification, sensitivity labeling, and DLP program, adapting policies as business needs evolve
Lead third-party vendor security evaluations, prioritizing and tracking remediation
Lead cross-team collaboration on cybersecurity projects and initiatives
Provide technical support and guidance to end-users and other IT staff
Own and maintain documentation of cybersecurity systems, processes, and procedures
Lead regular IT Security reports and audits of access controls
Own and ensure proper data encryption and security in all stages of data storage and transit
Own and ensure compliance standards are in place in systems, networks, and endpoint management
Travel to company locations quarterly, as needed
Perform other related duties as required and assigned

Required Qualifications
6+ years of experience in IT engineering or cybersecurity
Certified Information Systems Security Professional (CISSP) certification
Strong knowledge and practice of cybersecurity principles, technologies, and best practices applied to IT infrastructure and network systems
Proven experience leading incident response, digital forensics, and e-discovery
Hands-on experience administering and maintaining data classification and DLP programs (e.g., Microsoft 365 compliance suite or equivalent)
Excellent problem-solving and troubleshooting skills
Ability to work independently and as part of a team
Excellent communication and interpersonal skills

Preferred Qualifications
Certified Information Systems Auditor (CISA) certification

Work Environment & Physical Requirements
Primarily in a professional office or home office environment, with regular use of computer systems, security monitoring platforms, and forensic analysis tools throughout the workday
Regularly required to sit for extended periods while using a computer, keyboard, and mouse to monitor security systems, investigate incidents, and maintain documentation
Must be able to concentrate for extended periods while analyzing complex security data, often under pressure during active incident response situations that require quick, accurate decision-making
Specific vision abilities required include close vision and the ability to adjust focus for extended periods of screen-based work, including reviewing logs, audit reports, and forensic data
Must be able to communicate clearly and effectively via phone, video conference, and email with IT staff, department leaders, and third-party vendors, including the ability to explain technical security concepts to non-technical audiences
Requires quarterly travel to company locations as needed, which may include time-sensitive travel in response to a security incident requiring on-site presence
Fast-paced environment requiring adaptability and the ability to shift quickly from planned project work to urgent incident response when a security event occurs, sometimes outside of standard business hours

Featured Benefits  
Competitive salary
Comprehensive health, dental, and vision insurance
401k with employer match
Paid Time Off
Employee Perks & Discounts
#ReviveRx