Information Security Engineer

Information Security Engineer PMO / OPERATIONS - 100.8732 (Billings Clinic Main Campus) req
12419

Shift: Day

Employment Status:
Full-Time (.75 or greater)

Hours per Pay Period: 1.00 = 80 hours every two weeks (Exempt)

Starting Wage DOE: $45.11 - $56.38

The Information Security Engineer is a hands-on technical role within the Information Security team responsible for implementing, operating, and maintaining security controls that protect the organization's enterprise and cloud environments. Working under the direction of the Information Security leadership and architecture teams, this role focuses on the day-to-day engineering, configuration, monitoring, and optimization of security technologies across assigned domains. Assignments may span one or more areas including - but not limited to - detection engineering, cloud security, privileged access management, endpoint security, application control, vulnerability management, identity and access management, or network security.

The Information Security Engineer works collaboratively with IT operations, infrastructure, clinical applications, and security operations teams to reduce cyber risk and support the organization's security strategy across a complex, multi-site healthcare environment.

• Implement, configure, and maintain security technologies and controls as directed by the security architecture and leadership teams.
• Perform ongoing administration, tuning, and optimization of assigned security platforms and tools to ensure effective operation and alignment with organizational security standards.
• Develop and maintain documentation of security configurations, standard operating procedures, and operational runbooks.
• Support security incident response activities by providing technical analysis, containment support, and post-incident remediation within assigned areas of responsibility.
• Execute changes to security systems following established change management processes, including testing, validation, and rollback planning.
• Collaborate with IT operations, infrastructure, and application teams to integrate security controls into existing and new systems.
• Assist in the evaluation, testing, and deployment of new security tools and technologies.
• Contribute to the development and maintenance of security policies, standards, and procedures as directed.
• Participate in vulnerability management activities including scanning, analysis, and coordination of remediation efforts.
• Provide technical support and knowledge sharing to IT staff and other stakeholders on security tools and processes.
• Research emerging threats, vulnerabilities, and security technologies to recommend improvements within assigned areas.
• Supports and models behaviors consistent with Billings Clinic's mission, vision, values, code of business conduct and service expectations. Meets all mandatory organizational and departmental requirements. Maintains competency in all organizational, departmental and outside agency standards as it relates to the environment, employee, patient safety or job performance.
• Performs all other duties as assigned or as needed to meet the needs of the department/organization.

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, or a related field required.

Minimum three (3) years of experience in information security, cybersecurity, or a related technical role.

• Hands-on experience implementing, configuring, or administering security tools and technologies.
• Experience working in a healthcare or similarly regulated environment preferred.

One or more information security, cybersecurity, cloud security, or vendor-specific certifications preferred.

• Preferred certifications may include, but are not limited to:
• CompTIA Security+ or equivalent foundational cybersecurity certification.
• GIAC certification relevant to assigned responsibilities, such as GSEC, GCIH, GCIA, or similar.
• Microsoft security certification, such as Microsoft Certified:
  Security, Compliance, and Identity Fundamentals, Security Operations Analyst Associate, or similar.
• Cloud or vendor-specific certification relevant to assigned technologies, such as Cyber Ark, Oracle Cloud, Microsoft Azure, Palo Alto Networks, or similar.
• CISSP, CCSP, or equivalent advanced cybersecurity certification preferred for advanced assignments or progression.
• A valid driver's license may be required for positions that require travel between…