Enterprise Security Engineer

Are you passionate about the patient experience? At HCA Healthcare, we are committed to caring for patients with purpose and integrity. We care like family! Jump-start your career as an Enterprise Security Engineer today with HCA Healthcare.

The Enterprise Security Engineer I will support the analysis of applications, network, and security architectures for the enterprise to help ensure the security, integrity, and regulatory compliance of critical information transmitted over the network or in storage. This position will report to the Threat Informed Engineering Team Manager and, with guidance from more senior team members, will help ensure security requirements are addressed in enterprise architecture, solution designs, and systems that protect and support organizational mission and business processes.

The ideal candidate will have foundational cybersecurity knowledge with practical software development and/or automation skills and be interested in using engineering approaches to solve security problems at enterprise scale. This role will serve as a developing information security advisor to the business and the ITG (Information Technology Group), supporting balanced cyber risk management and the secure development and deployment of technology solutions.

The position will apply established security standards and patterns, participate in security reviews, document risks and recommendations, and assist with the evaluation, design, build, and implementation of information security technologies and processes.

• Security Posture Review:
  Assist with security posture reviews of applications, networks, and environments; gather relevant information, identify common security concerns, document findings, and track remediation activities with guidance from senior team members.
• Solution and Process Engineering:
  Work with senior team members to develop solutions and processes to expand and automate HCA’s security review capabilities at scale.
• Compliance:
  Apply HCA and NIST security standards and relevant regulatory requirements to assigned work, maintain current knowledge of applicable requirements, and elevate questions or exceptions when guidance is needed.
• Documentation:
  Produce clear and accurate documentation for security assessments, assigned projects, decisions, and recommendations so that technical and non-technical stakeholders can understand required actions.
• Collaboration:
  
  Work collaboratively with Information Security, ITG, business teams, and vendors to support the integration of appropriate security requirements and controls.
• Training and Development:
  Continuously build knowledge and skills in information security, participate in team knowledge-sharing, seek feedback and mentorship, and apply new learning to assigned responsibilities.
• Operational Execution:
  Plan, track, and complete assigned security tasks and work streams on time, manage day-to-day priorities, maintain organized records, and promptly elevate blockers or material risks.
• Research and Improvement:
  Research security technologies, patterns, and practices; summarize findings; and contribute ideas and recommendations that may improve HCA's security posture while supporting business objectives.
• Ethical Standards:
  Maintain and promote high ethical standards in all security-related activities, protecting the integrity and trustworthiness of the Information Security department.
• Communication:
  Communicate security risks, requirements, standards, and practices clearly to security and non-security personnel, and seek assistance when issues exceed the scope of assigned responsibility.
• Performance Metrics:
  Maintain accurate records and metrics for security design reviews, architecture review activities, remediation tracking, and compliance efforts, and contribute to team reporting and continuous improvement.
• Assist HCA business units with Information Security Agreements by reviewing required security information, documenting gaps, and escalating exceptions or complex issues for additional review.
• Translate established security standards and protocols into clear, actionable requirements for non-security personnel with guidance from senior security teammates as needed.
• Participate in peer reviews and team knowledge-sharing activities, incorporate feedback, and contribute to a collaborative learning environment.

• Bachelor's Degree preferred
• One year or less relevant work experience

• Relevant experience in information security, software development, systems engineering, cloud engineering, Dev Ops, or a related technical discipline in an enterprise or similarly complex technical environment is preferred.
• Foundational knowledge of information security principles, standards, practices, and technologies.
• Foundational understanding of risk assessment, risk management, security controls, and risk reduction concepts.
• Working knowledge of modern scripting, automation and/or software development…