Sr. Cyber Security Engineer

Job Summary

Reporting to the Chief Information Officer (CIO), The Sr. Cyber Security Engineer is responsible for safeguarding critical healthcare systems, electronic protected health information (ePHI), and clinical operations. Responsible for designing and maintaining a robust security program that ensures compliance with healthcare regulations while protecting against evolving cyber threats. Expertise in healthcare security frameworks, understanding the sensitivity of patient data, and balancing security with system availability in clinical environments.

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field required or extensive years of experience in lieu of degree.

• Minimum of five to eight (5-8) years of experience in cybersecurity, with at least 2+ years in healthcare or regulated environments.
• Strong understanding of healthcare data protection requirements (ePHI handling, privacy, and security rules).
• Experience securing healthcare systems, including EHR platforms and clinical networks.
• Hands‑on experience with security tools (SIEM, EDR, DLP, vulnerability management platforms).
• Knowledge of network segmentation and Zero Trust strategies in hospital environments.
• Experience with cloud security in regulated environments.
• Proficiency in scripting/automation (Python, Power Shell, or Bash).
• Proven incident response experience involving sensitive data.
• Experience with HITRUST CSF certification processes preferred.
• Familiarity with medical device security standards (e.g., FDA guidance, IEC 80001) preferred.
• Experience with security tools such as Splunk, Crowd Strike, Aruba, and Microsoft Sentinel preferred.
• Knowledge of data loss prevention (DLP) and encryption strategies for patient data.
• Experience implementing Zero Trust or SASE in healthcare environments preferred.
• Understanding and expertise in cybersecurity frameworks (e.g., NIST 2.0 or SANS Security Controls).

CISSP, CISM, HCISPP (Healthcare Information Security and Privacy Practitioner), or GIAC preferred.

Pay Range: $54.63 - $84.67