Information Security Specialist/Engineer III (Cyber Defense) - Information Solutions

The Information Security Specialist/Engineer III reports to the Cybersecurity Operations Manager and supports the organization’s business, technology, clinical, and cybersecurity missions by strengthening enterprise cyber defense capabilities. With general supervision, this role leads and continuously improves threat intelligence and analysis, vulnerability management, adversary emulation, incident response readiness, cybersecurity technology operations, detection engineering, and security awareness activities.

The position analyzes relevant government, industry, vendor, healthcare-sector, open-source, and internal intelligence; assesses organizational exposure using threat activity, vulnerability data, asset criticality, control effectiveness, and business impact; and partners with technical, clinical, operational, and business stakeholders to prioritize practical mitigation and risk reduction actions. The role designs, maintains, tunes, integrates, and improves cybersecurity tools, detections, dashboards, workflows, automation, reporting, and documentation that support reliable asset visibility, vulnerability prioritization, alert fidelity, response coordination, and operational efficiency. It also plans and supports authorized adversary emulation and purple team validation activities, coordinates incident triage and response activities, communicates cybersecurity risk and recommended actions to technical and non-technical audiences, develops awareness and education materials, mentors peers, leads projects, recommends process improvements, maintains high professional standards, and provides excellent customer service.

Information/Data Security (InfoSec), Internet Security, Internet Security, Operations Management, Information/Data Security (InfoSec), Operational Support, MCP - Microsoft Certified Professional, Incident Response, Technical Operations, Continuous Improvement, * Bachelor’s degree, or associate’s degree and equivalent work experience, required.

• Eight (8) or more years of experience in cybersecurity, security operations, threat intelligence, vulnerability management, incident response, or related technical functions required.

• Role-relevant certification required, such as CISSP, CASP+/SecurityX, CCSP, CISM, GCIA, GCIH, GCFA, GCFE, GPEN, or an equivalent cybersecurity certification. Excellent interpersonal, analytical, written, and verbal communication skills required.

• Demonstrated ability to lead complex analysis and engineering work, improve security tools and workflows, validate detections, influence remediation decisions, mentor peers, and communicate risk to technical and business stakeholders required.

If you like working with energetic enthusiastic individuals, you will enjoy your career with us!