Cybersecurity Engineer II

Job Description

Atlantic Health System is seeking a Cybersecurity Engineer. This position requires a seasoned information security professional who is a self‑starter, results oriented, multi-disciplined, and comfortable in leading the implementation of system security solutions in a multi‑vendor complex healthcare environment. The individual in this role will serve as a mid‑level engineer supporting Cyber Security Operations and Engineering efforts from a technical perspective in conjunction with the team.

This position is responsible for leading efforts in security research, technical analysis, recommendations, configuration, and administration of systems. This position ensures that security design, consultation, and technology governance oversight is provided for various projects and initiatives in an effective and timely manner. The incumbent also assists system users relative to information security matters and undertakes complex projects requiring additional specialized technical knowledge.

This position acts as an information security liaison to various business units, other corporate entities, and the Information Services & Support department.

In depth knowledge of industry standard security technologies, protocols, and best practices. Should have experience in developing and maintaining working relationships both within an organization and with external partners. Demonstrated conceptual, analytical, and innovative problem‑solving and evaluative skills, demonstrated ability to understand and apply security controls broadly, including for system, application, and network resources. Strong knowledge and work experience with logical access controls to ensure confidentiality, integrity, and assurance of proprietary information.

Knowledge and understanding of business processes and information systems of a healthcare institution a plus. Excellent interpersonal skills: including the ability to work effectively in a team environment as a participant as well as team leader. Capacity to work independently along with a willingness to follow and/or seek advice/assistance as needed. Excellent time management, organizational and motivational skills.

• Active Industry certifications (SANS, ISACA, ISC2) preferred
• Expertise in either AWS or GCP
• Advanced knowledge of data loss prevention (DLP) tools and practices
• Experience in Zero‑trust networking concepts and practices
• Vulnerability management and network vulnerability scanning and remediation
• Knowledge and experience with cyber incident response from both a theoretical and "hands on" technical perspective
• Maintain a working relationship with a 24x7 external cybersecurity operations center monitoring service (MSSP)

Assist in responding to and managing security events. Lead efforts to implement and manage solutions in the areas of virtualization, cloud technologies, data protection, threat protection, and security event monitoring.

Qualifications

Competencies/Security Technologies

• Cloud Security (AWS, GCP, Azure)
• Security Incident Handling/Response
• Strong DLP competencies, from both a theoretical and engineering perspective
• Security Information and Event Management (SIEM)
• Security Architecture and Design – Development and Review
• Data Protection solutions and technologies
• Computer, Network, and Policy Auditing
• Network Security
• Experience with Endpoint Security and Endpoint Detection and Response (EDR) Tools

Educational/Technical Requirements

• Active certifications from SANS, ISACA, and/or ISC2 preferred
• Bachelor's degree in computer information systems, Computer Science, MIS, Engineering, or related technical discipline desired. Active Cyber Security Certifications will be considered in lieu of a formal degree
• Minimum 3 years of direct cyber or information security experience preferred
• Experience in a healthcare organization a plus but not required
• Will be able to illustrate a consistent and logical pattern of strategic career investments and professional development that have helped them develop the skills and experience required to be an effective Information Security leader. This can include advanced education, industry certifications, professional development,…