Cyber Security Engineer

Reporting to the Assistant Vice President of Information Systems, the Cyber Security Engineer is responsible for designing, implementing, and maintaining the organization’s cybersecurity architecture, controls, and defenses across servers, workstations, networks, web applications, cloud environments, medical devices (IoMT), and IT processes. This position leads the hospital’s security engineering program - including Zero Trust architecture, identity and access management, security tool ownership (SIEM, EDR/XDR, DLP, CSPM, email security, PAM), incident response leadership, penetration testing, and regulatory compliance with HIPAA, HITECH, NIST CSF, 405(d) HICP, and applicable state and federal requirements. The Engineer serves as the senior technical cybersecurity resource for the organization and acts as the primary technical escalation point for complex incidents. The role requires deep technical expertise, independent judgment, and the ability to translate security risks into actionable strategies for leadership. Availability for on-call, weekends, evenings, and holidays is required as necessary.

• Ability to meet all job physical requirements as outlined in job description or as agreed through a work place accommodation.

• Bachelor’s degree in computer science, Information Security, or a related field.
• Minimum of 2 years’ experience as a Cyber Security Engineer or similar role, with a strong understanding of security principles, practices, and technologies.
• In-depth knowledge of network protocols, operating systems, and common security vulnerabilities, as well as familiarity with security tools and software.
• Proficiency in conducting risk assessments, vulnerability assessments, and penetration testing.
• Experience with security incident response, including analysis, containment, eradication, and recovery.
• Strong analytical and problem-solving skills to identify and address security issues effectively.
• Excellent communication and interpersonal skills to collaborate with stakeholders at all levels and effectively convey complex security concepts to non-technical individuals.
• Ability to work independently and prioritize tasks in a fast-paced environment, while maintaining attention to detail and meeting deadlines.

CERTIFICATIONS/LICENSES:

• Relevant certifications such as CISSP, CISM, or CEH is highly desirable.