Job Title: RIT Co-op: Information Security - Identity Access Management Department: Information Security - Identity Access Management Location: Remote SUMMARY: As a participant in the RIT paid Co-Op you will gain exposure and experience in the healthcare field, covering a multitude of areas within Information Security & Identity Access Management. RESPONSIBILITIES: - Provides work experience directly related to student’s course of study and career interests. - Student is given specific responsibilities related to the field of study and department in which he/she is a co-op. - Allows student to learn through active engagement and meaningful activities. - Performs other duties as assigned. REQUIRED QUALIFICATIONS: - Student of RIT. - Background in the field of study which coincides with the department utilizing the co-op. PREFERRED QUALIFICATIONS: - Dependent upon the department utilizing the co-op, specific skills or qualifications may be preferred EDUCATION: LICENSES / CERTIFICATIONS: PHYSICAL REQUIREMENTS: S - Sedentary Work - Exerting up to 10 pounds of force occasionally Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met. For disease specific care programs refer to the program specific requirements of the department for further specifications on experience and educational expectations, including continuing education requirements. Any physical requirements reported by a prospective employee and/or employee’s physician or delegate will be considered for accommodations. PAY RANGE: $20.00 - $20.00 CITY: Rochester POSTAL CODE: 14617 The listed base pay range is a good faith representation of current potential base pay for a successful full time applicant. It may be modified in the future and eligible for additional pay components. Pay is determined by factors including experience, relevant qualifications, specialty, internal equity, location, and contracts. Rochester Regional Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, predisposing genetic characteristics, marital or familial status, military or veteran status, citizenship or immigration status, or any other characteristic protected by federal, state, or local law.

• Design and implement security and defense-in-depth controls to prevent and limit vulnerabilities. • Conduct advanced security research on Solana and other Rust-based smart contract platforms. • Work closely with core contributors to perform in-depth internal security audits. • Work with external security audits in collaboration with top-tier third-party firms. • Effectively communicate security risks and solutions to both technical and non-technical stakeholders. • Uphold the highest standards of integrity, trust, and professionalism in all security practices.

• Design and implement secure cloud architecture patterns • Establish guardrails for AWS accounts and services • Strengthen multi-account strategy and segmentation • Improve IAM design, permission boundaries, and least-privilege models • Review major infrastructure changes for security impact • Implement and tune cloud-native detection capabilities • Integrate AWS security services into centralized monitoring • Identify misconfigurations and excessive permissions • Improve signal-to-noise ratio in cloud alerts • Embed security controls into Terraform or other IaC workflows • Enforce policy-as-code guardrails • Ensure IaC scanning is integrated into CI/CD pipelines • Reduce configuration drift across environments • Oversee cloud misconfiguration detection and remediation • Track infrastructure vulnerability exposure • Reduce critical vulnerability exposure window • Partner with Platform teams to automate remediation • Ensure proper encryption standards across storage and databases • Manage KMS usage and key lifecycle best practices • Strengthen logging and monitoring coverage • Lead cloud-focused investigations during security incidents • Improve forensic readiness in AWS • Harden logging and evidence retention practices • Automate guardrails and enforcement mechanisms • Improve developer experience with secure cloud defaults • Reduce manual cloud security reviews • Optimizing tooling cost and effectiveness • Define KPIs for cloud security posture • Report on misconfiguration trends and exposure windows • Provide executive-level reporting on infrastructure risk • Support audit and compliance evidence collection

• Engaging in mitigation techniques to prevent vector attacks • Analysing customer traffic, applications and systems to tailor our security solutions and answer customers security needs • Managing and documenting technical issues, responses and requests to ensure information is recorded and updated • Providing support to customers to remedy and resolve network and connectivity issues • Communicating with customers regarding challenges and providing updates and results on your mitigation and analysis