Cybersecurity Engineer

Position Summary

The Senior Cybersecurity Engineer is a senior technical contributor responsible for designing, implementing, automating, and continuously improving cybersecurity capabilities across the enterprise. This role reduces organizational risk by combining expertise in vulnerability management, offensive security, security engineering, cloud security, secure software development, and AI-enabled security technologies.

Operating within a highly regulated healthcare environment, this position partners closely with Infrastructure, Cloud, Enterprise Architecture, Application Development, Data, Clinical Technology, Security Operations, and Third-Party Risk Management teams to protect critical systems, patient data, and business operations. The ideal candidate possesses strong technical skills, a security-first mindset, advanced coding and automation capabilities, and experience leveraging artificial intelligence to improve cyber defense outcomes.

Essential Duties and Responsibilities

• Lead enterprise vulnerability management activities across endpoints, servers, cloud platforms, applications, databases, network infrastructure, and medical devices.
• Develop and maintain risk-based processes for vulnerability prioritization, remediation tracking, validation, reporting, and exposure reduction.
• Perform application, API, network, cloud, Active Directory, wireless, and infrastructure security assessments.
• Design, implement, and support security technologies including EDR/XDR, SIEM, SOAR, CSPM, identity security, email security, network security, and data protection platforms.
• Engineer, automate, and integrate security controls across cloud, on-premises, SaaS, and hybrid environments.
• Develop custom scripts, APIs, workflows, dashboards, and automation capabilities to improve detection, remediation, reporting, threat intelligence processing, and operational efficiency.
• Integrate security throughout the software development lifecycle through secure development practices, threat modeling, security testing, and DevSecOps automation.
• Collaborate with development teams to improve secure coding practices and remediate security findings.
• Evaluate, implement, and optimize AI-enabled security capabilities that improve threat detection, phishing analysis, vulnerability prioritization, investigations, threat hunting, and incident response.
• Assess security risks associated with emerging technologies, AI platforms, large language models, agents, and automation solutions.
• Participate in security architecture reviews, technology evaluations, project initiatives, and enterprise transformation programs.
• Partner with Security Operations, Incident Response, Infrastructure, Cloud, Architecture, and Application teams to improve security controls and reduce organizational risk.
• Support regulatory, audit, compliance, and third-party risk management activities in alignment with healthcare security requirements.
• Develop technical standards, policies, playbooks, runbooks, baselines, and engineering documentation.
• Provide technical leadership, mentoring, and subject matter expertise to engineers, analysts, and project teams.
• Create executive and operational metrics that demonstrate risk reduction, program maturity, vulnerability remediation progress, and security effectiveness.

Required Qualifications

Education

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical discipline.
• An equivalent combination of education and relevant experience may be considered.

Experience

• 8+ years of progressive cybersecurity experience.
• 5+ years of hands-on cybersecurity engineering experience.
• Demonstrated success operating in large, complex enterprise environments.
• Experience within healthcare, financial services, or other highly regulated industries preferred.
• Experience leading complex technical initiatives, influencing cross-functional execution, and delivering measurable security outcomes.

Technical Skills & Expertise

• Advanced knowledge of vulnerability management programs, exposure management methodologies, and remediation lifecycle processes.
• Demonstrated offensive security experience including penetration testing, adversary emulation, attack simulation, exploitation techniques, and security validation.
• Strong understanding of application security, DevSecOps, secure coding practices, OWASP Top 10, SAST, DAST, SCA, threat modeling, and CI/CD security integration.
• Experience securing Microsoft Azure, AWS, and hybrid cloud environments.
• Expertise in identity and access management, authentication technologies, secrets management, encryption, network segmentation, and zero trust principles.
• Experience designing, implementing, and supporting EDR/XDR, SIEM, SOAR, email security, DLP, CSPM, vulnerability management, identity security, and data protection platforms.
• Strong proficiency in Python, PowerShell, JavaScript, Go, Bash, C#, or similar programming languages.
• Experience developing APIs, integrations, automation solutions, and infrastructure-as-code security controls.
• Knowledge of container security, Kubernetes security, cloud-native security architectures, and modern application environments.
• Experience leveraging AI-enabled security solutions, GenAI technologies, security copilots, machine learning concepts, prompt engineering, and intelligent automation capabilities.
• Knowledge of threat intelligence, threat hunting, digital forensics, and incident response methodologies.
• Familiarity with healthcare regulatory requirements including HIPAA, HITECH, NIST, HITRUST, CIS Controls, and related frameworks.
• Strong technical writing, risk communication, and executive presentation capabilities.
• Ability to evaluate emerging technologies and rapidly adapt to evolving cybersecurity threats and defensive capabilities.

Preferred Certifications

• CISSP
• GIAC GPEN
• GIAC GWAPT
• GIAC GXPN
• OSCP
• OSWE
• GCIH
• GCFA
• CCSP
• Azure Security Engineer Associate
• AWS Security Specialty
• CISSP-ISSAP
• CSSLP

Core Competencies

• Technical leadership and sound engineering judgment
• Strategic thinking with hands-on execution capability
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to communicate effectively with technical and executive audiences
• High degree of integrity, accountability, and professionalism
• Strong collaboration and relationship-building skills
• Continuous learning mindset and adaptability
• Ability to influence outcomes across cross-functional teams
• Results-driven focus on measurable risk reduction