Cybersecurity Engineer

Accountabilities

• Lead enterprise vulnerability and exposure management across endpoints, servers, cloud platforms, applications, databases, networks, and medical devices.
• Develop risk-based approaches for vulnerability prioritization, remediation tracking, validation, reporting, and overall exposure reduction.
• Conduct application, API, network, cloud, Active Directory, wireless, and infrastructure security assessments.
• Design, implement, integrate, and optimize security technologies including EDR/XDR, SIEM, SOAR, CSPM, identity security, email security, network security, and data protection platforms.
• Engineer and automate security controls across cloud, on-premises, SaaS, and hybrid environments.
• Develop scripts, APIs, workflows, dashboards, and automation solutions that improve detection, remediation, reporting, threat intelligence processing, and operational efficiency.
• Integrate security throughout the software development lifecycle through secure development practices, threat modeling, security testing, and DevSecOps automation.
• Partner with development teams to strengthen secure coding practices and remediate application security findings.
• Evaluate and optimize AI-enabled security capabilities for threat detection, phishing analysis, vulnerability prioritization, investigations, threat hunting, and incident response.
• Assess security risks associated with emerging technologies, AI platforms, large language models, autonomous agents, and automation solutions.
• Participate in security architecture reviews, technology evaluations, enterprise transformation programs, and strategic technical initiatives.
• Collaborate with Security Operations, Incident Response, Infrastructure, Cloud, Architecture, and Application teams to strengthen controls and reduce organizational risk.
• Support regulatory, audit, compliance, and third-party risk management activities within a highly regulated healthcare environment.
• Develop and maintain technical standards, policies, playbooks, runbooks, security baselines, and engineering documentation.
• Provide technical leadership, mentoring, and subject matter expertise to engineers, analysts, and project teams.
• Create executive and operational metrics demonstrating risk reduction, vulnerability remediation progress, program maturity, and security effectiveness.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline; equivalent relevant education and experience may be considered.
• 8+ years of progressive cybersecurity experience, including at least 5 years of hands-on cybersecurity engineering experience.
• Demonstrated experience operating in large, complex enterprise environments and leading technical initiatives across multiple teams.
• Experience in healthcare, financial services, or another highly regulated industry is preferred.
• Advanced knowledge of vulnerability management, exposure management, remediation lifecycle processes, and security validation.
• Hands-on offensive security experience, including penetration testing, adversary emulation, attack simulation, exploitation techniques, and security assessments.
• Strong application security and DevSecOps knowledge, including OWASP Top 10, secure coding, SAST, DAST, SCA, threat modeling, and CI/CD security integration.
• Experience securing Microsoft Azure, AWS, and hybrid cloud environments.
• Expertise in identity and access management, authentication, secrets management, encryption, network segmentation, and zero-trust principles.
• Experience implementing and supporting EDR/XDR, SIEM, SOAR, email security, DLP, CSPM, vulnerability management, identity security, and data protection technologies.
• Strong programming and scripting capabilities in Python, PowerShell, JavaScript, Go, C#, Bash, or similar languages.
• Experience developing APIs, integrations, automation solutions, and infrastructure-as-code security controls.
• Knowledge of container and Kubernetes security, cloud-native architectures, and modern application environments.
• Experience with AI-enabled security solutions, generative AI, security copilots, machine learning concepts, prompt engineering, and intelligent automation.
• Knowledge of threat intelligence, threat hunting, digital forensics, and incident response methodologies.
• Familiarity with healthcare security and compliance frameworks such as HIPAA, HITECH, NIST, HITRUST, and CIS Controls.
• Strong technical writing, risk communication, presentation, analytical, and problem-solving abilities.
• Ability to communicate effectively with both technical and executive audiences and influence outcomes across cross-functional teams.
• Relevant certifications such as CISSP, OSCP, OSWE, GIAC GPEN, GWAPT, GXPN, GCIH, GCFA, CCSP, CSSLP, Azure Security Engineer Associate, AWS Security Specialty, or CISSP-ISSAP are preferred.
• High integrity, accountability, professionalism, adaptability, and commitment to continuous learning.

Benefits

• Annual compensation range of $140,000–$150,000.
• Opportunity to work on enterprise-scale cybersecurity initiatives within a highly regulated healthcare environment.
• Broad technical scope spanning cloud security, vulnerability management, offensive security, DevSecOps, AI-enabled security, and security engineering.
• Opportunity to influence security architecture, engineering standards, automation, and emerging technology adoption.
• Strong opportunities for technical leadership, mentoring, and professional development.
• Collaborative environment with exposure to infrastructure, cloud, application development, architecture, data, and security operations teams.