Ortho Clinical Diagnostics is committed to improving and saving lives with diagnostics. To do this we hire people who share this dream and are ready for new adventures. As a valued team member, you will carve your own career path and be part of building this company stronger and better than ever before. There is no limit to the experiences, opportunities and new directions you will have access to here at Ortho Clinical Diagnostics. More importantly, you will be driving the surge of a whole new direction in important medicine. That's something we can all take pride in as we take this journey together.

Ortho is known in the industry as a leader in customer service and support. Deeply understanding and exceeding the needs of our clinical lab, hospital and blood bank customers is what we do. It's who we are. If you join Ortho, no matter what your role, you will be expected to keep that Customer Excellence focus in your work.

As Ortho continues to grow, we are seeking an Information Security Engineer for our technical Information Security team. Reporting into the Senior Manager of Information Security, this resource will have global responsibility to solution architect, analyze, support and respond to a wide range of security technologies and must have the ability to communicate with all levels within the company. The position will assist the Senior Manager to support, assess, design, implement and provide ongoing relevant information security services as well as communicating risks, exposures, or threats to relevant stakeholders.The Information Security Engineer also serves as a strong consultant to the enterprise business units and solution architect as part of projects. The position can be located in Rochester, NY, Raritan, NJ or Remote.

• Support security engineering of Office365, AWS, firewalls, WAF, email, antivirus, IPS, DLP, IAM, Endpoint and Server security

• Establish technical standards and process that ensure industry best practices for Information Security are applied to all systems

• Engage with projects and one-off requests for security engineering and solution architecting

• Monitor, evaluate and provide threat and vulnerability analysis as well as security advisory services

• Ensures that all information security deployments are properly implemented and supported.

• Investigate, document, and report on information security issues and emerging trends.Remain current, identify new functionality to meet business needs and foster knowledge sharing.

• Integrate and share information with other analysts and teams.

• Assist with policy, standards, process, and procedural updates as part of comprehensive remediation solutions.

• Validate remediation by reviewing application updates or deployed mitigations to verify resolution.

• Provide security engineering and architecture consulting services as needed on projects and ensure information security requirements are met.

• Bachelor's Degree required, with a preference in Computer Science, Business, or related discipline.

• 4 years of information security or infrastructure engineering experience

• Demonstrated passion and drive for Information Security

• Strong troubleshooting skills to help solve complex problems

• Good time management skills with the ability to jump between multiple projects and tasks daily and still get deliverables completed on time.

• Basic project management experience

• Good time management skills and the ability to work on multiple concurrent projects

• Possesses and displays excellent verbal and written communication skills with ability to convey information to internal and external customers in a clear, focused, and concise manner. Ability to work with all levels of the organization, both technical and non-technical

• High level of personal integrity, ability to professionally handle confidential matters, and reflect appropriate level of judgment and maturity is required.

• High degree of initiative, dependability, and ability to work with little supervision

• Must have the ability to analyze, document and assess complex environments.

A plus to have technical knowledge in information security in combination of the following areas:

• Networking technology (VPN, firewall/Palo Alto-Cisco, TCP/IP, routing, Wireshark)

• Windows and Linux servers

• Windows 10/11

• Office 365/Azure AD

• AWS or Azure Cloud

• Email and Web applications

• Virtual server

• Working knowledge of TCP/IP, VLANs and subnets

• Professional certification such as Certified Information Systems Security Professional (CISSP) or other industry recognized information security credential

EOE/AA Disability/Veteran

#LI-SC1