Application Security Engineer Associate - UPMC GTOC Kilkenny

Location: MacDonagh Office
Job type: Permanent

Overview of role:

UPMC is hiring an Application Security Engineer Associate on a permanent, full-time contract. Under the general direction of the management team and senior staff, the Application Security engineer - Associate supports the Information Security Group's efforts to develop secure systems and networks through the identification and implementation of automated tools, development and execution of security processes, procedures, advanced security techniques, and reporting.

Primary Duties and Responsibilities:

Duties and Responsibilities:

Collaborate with application teams to integrate APIs and optimise application delivery through F5 products
Implement and configure Web Application Firewalls (WAF) to protect web applications
Collaborate with development and IT teams to ensure secure application deployments.
Provide recommendations for improving web application security posture
Review and revise security policies as identified through technology and risk analysis reviews.
Fulfil departmental requirements in terms of providing work coverage and administrative notification during periods of personal illness, vacation, or education.
On-call support may be required at designated times.
Ability to establish priorities and delegate tasks to the appropriate personnel or work independently as necessary.
Provide service to IT client community, patients, families and visitors, while protecting the integrity and confidentiality of all data and information through physical and electronic measures.
During professional activities, conducts themselves in accordance with the highest standards of moral, ethical and legal behaviour.
Assist Application and System Support representatives in the development and accreditation of Security Plans to ensure policy and best practice compliance of controls in place.
Resolve security issues in complex multi-disciplined environments.
Examine systems and applications to assess the current security posture.

The above Job Description is not intended to be a comprehensive list of all duties involved and consequently, the post holder may be required to perform other duties as appropriate to the post which may be assigned to him/her from time to time and to contribute to the development of the post while in office.

Qualifications & Experience:

Qualifications / Education/Experience:

Typically has a 2-year academic degree and familiarity with Information Security through education or practical work experience.
Basic knowledge of load balancing technologies, encryption methodologies and security principles
Experience working with Windows, Linux and/or other Unix-like variants.
Understanding of TCP, UDP, HTTP, IP and other network protocols.
Understanding of how to triage vulnerabilities and validate tool findings before reporting them or taking action.

Preferred Qualifications:

Experience with any of the following vulnerability scanners and tools is a plus (Tenable, Rapid7, Qualys, OpenVAS, Crowdstrike, Sophos and Splunk )
Experience with cloud environment (AWS or Azure).
Experience with any of the following equipment is a plus ( Citrix Netscaler , F5 and PaloAlto )

Licensure, Certifications, and Clearances:

Technical security certifications (e.g. OSCP, CEH, Security+, Network+ ) or academic background a plus

This job description is intended to be an outline of the areas of responsibility. As UPMC and the post holder develop, this job description may be subject to review in light of the changing needs of the business.

Equal Opportunity Statement and Benefits

UPMC is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

At UPMC we provide a total rewards program that is not only market competitive, but fair and provides growth opportunities for all our colleagues.

Benefits – Fully paid maternity and paternity leave for new parents. Competitive Pension Plan, company funded Death in Service Benefit x 3 times. Critical Illness cover for all employees up to the age of 66.

Performance and Recognition – Rewards for performance that supports the goals and mission of UPMC through our annual ACES programme.

Work-Life Balance – Enhanced annual leave up to a maximum of 27 days. Flexible working opportunities to support you to work around external family commitments.

Development and Career Opportunities – Opportunities for each employee to reach their career goals through continued learning and/or advancement.

About UPMC

UPMC is a renowned multinational academic medical centre committed to delivering people-focused care that’s close to home. Headquartered in Pittsburgh and affiliated with the University of Pittsburgh Schools of the Health Sciences, UPMC shapes the future of health through clinical and technological innovation, research and education. UPMC expands its expertise globally, bringing world-class care across continents through its UPMC International division — an owned and operated network of hospitals and ambulatory care centres in Italy, Ireland and Croatia. UPMC International brings new access to the signature specialty services of UPMC Hillman Cancer Centre, UPMC Sports Medicine and others to more people in more places around the world.

In Ireland UPMC has provided high-quality healthcare in the South East since 2006. UPMC’s operations in Ireland now include UPMC Whitfield Hospital in Waterford, UPMC Sports Surgery Clinic in Dublin, UPMC Kildare Hospital in Clane, and UPMC Aut Even Hospital in Kilkenny. Outpatient care is available at the UPMC Carlow Outreach Centre, UPMC Hillman Cancer Centre radiotherapy locations in Waterford and Cork, UPMC The 4th Practice in Mallow, and across UPMC Sports Medicine Clinics in Dublin, Waterford, Limerick, Tipperary, Cork, and Mayo. UPMC has also established a nationwide Concussion Network. UPMC's Global Technology Operation Centre is based in Kilkenny.