Sr Cybersecurity Engineer

Job description

**ReviveRX**is the premier licensed pharmacy specializing in health, wellness, and restorative medicine. We focus on treating the source, not just the symptoms, utilizing industry-leading technology. Collaborating with innovative pharmacists, healthcare providers, and pharmaceutical manufacturers, we provide personalized care. Our mission is to optimize treatment, revolutionize healthcare, and empower individuals to live vibrant lives. We welcome you to join us in our commitment to holistic wellness and personalized medicine. **Position Summary** The Senior Cybersecurity Engineer is responsible for the management and maintenance of our cybersecurity infrastructure and operations and owns the technical execution and day-to-day maturity of our security tooling and processes, doing their due diligence to protect our IT systems and data. This role involves identifying vulnerabilities, leading incident response, and owning digital forensics and e-discovery work. This position will collaborate with IT leadership and various departments to support cybersecurity-related projects and provide technical guidance. Additionally, the role requires maintaining detailed documentation of cybersecurity systems and processes. --- **Key Responsibilities** - Identify, implement, and manage a solid cybersecurity infrastructure to protect IT systems and data - Monitor security systems and identify vulnerabilities to ensure high security and compliance; assist with tuning platform settings to reduce false positives and improve escalation quality - Lead digital forensics, incident response, and e-discovery requests - Administer and maintain the data classification, sensitivity labeling, and DLP program, adapting policies as business needs evolve - Lead third-party vendor security evaluations, prioritizing and tracking remediation - Lead cross-team collaboration on cybersecurity projects and initiatives - Provide technical support and guidance to end-users and other IT staff - Own and maintain documentation of cybersecurity systems, processes, and procedures - Lead regular IT Security reports and audits of access controls - Own and ensure proper data encryption and security in all stages of data storage and transit - Own and ensure compliance standards are in place in systems, networks, and endpoint management - Travel to company locations quarterly, as needed - Perform other related duties as required and assigned --- **Required Qualifications** - 6+ years of experience in IT engineering or cybersecurity - Certified Information Systems Security Professional (CISSP) certification - Strong knowledge and practice of cybersecurity principles, technologies, and best practices applied to IT infrastructure and network systems - Proven experience leading incident response, digital forensics, and e-discovery - Hands-on experience administering and maintaining data classification and DLP programs (e.g., Microsoft 365 compliance suite or equivalent) - Excellent problem-solving and troubleshooting skills - Ability to work independently and as part of a team - Excellent communication and interpersonal skills --- **Preferred Qualifications** - Certified Information Systems Auditor (CISA) certification --- **Work Environment & Physical Requirements** - Primarily in a professional office or home office environment, with regular use of computer systems, security monitoring platforms, and forensic analysis tools throughout the workday - Regularly required to sit for extended periods while using a computer, keyboard, and mouse to monitor security systems, investigate incidents, and maintain documentation - Must be able to concentrate for extended periods while analyzing complex security data, often under pressure during active incident response situations that require quick, accurate decision-making - Specific vision abilities required include close vision and the ability to adjust focus for extended periods of screen-based work, including reviewing logs, audit reports, and forensic data - Must be able to communicate clearly and effectively via phone, video conference, and email with IT staff, department leaders, and third-party vendors, including the ability to explain technical security concepts to non-technical audiences - Requires quarterly travel to company locations as needed, which may include time-sensitive travel in response to a security incident requiring on-site presence - Fast-paced environment requiring adaptability and the ability to shift quickly from planned project work to urgent incident response when a security event occurs, sometimes outside of standard business hours --- **Featured Benefits** - Competitive salary - Comprehensive health, dental, and vision insurance - 401k with employer match - Paid Time Off - Employee Perks & Discounts #ReviveRx