SR Information Security Engineer

Why Mayo Clinic

Mayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans– to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.

• Medical:
  
  Multiple plan options.
• Dental:
  
  Delta Dental or reimbursement account for flexible coverage.
• Vision:
  
  Affordable plan with national network.
• Pre-Tax Savings:
  
  HSA and FSAs for eligible expenses.
• Retirement:
  Competitive retirement package to secure your future.

The Senior Information Security Engineer is a senior-level technical position responsible for leading complex security engineering initiatives and providing advanced expertise across multiple information security domains. The position operates with significant autonomy, serves as a technical authority, and is accountable for designing, implementing, and optimizing security solutions that address enterprise risk, regulatory requirements, and business objectives.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Bachelor’s degree in applicable field plus five (5) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.

Master’s degree in applicable field plus four (4) years of relevant experience preferred. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.

One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP.

Experience securing web applications, APIs, and internet-facing technologies.

Experience with Akamai solutions such as WAAP, Property Manager, Edge DNS, CDN, or similar web security platforms.

Strong understanding of web application security, API security, DNS, TLS/SSL, and threat mitigation techniques.

Experience with scripting, automation, or Infrastructure-as-Code technologies.

Strong analytical, communication, and problem-solving skills.

One or more of the following certifications (or equivalent) are required at the time of hire: CISSP, CISM, GSEC, OSCP.

Preferred Qualifications

Experience with Akamai Bot Manager, API Security, Account Protector, or Site Shield.

Experience with Azure, AWS, or Google Cloud security services.

Knowledge of OWASP Top 10, DDoS protection, and modern application security practices.

Exempt

$134,347 - $194,750 / year

Yes

Full Time

80

Monday - Friday, 8:00 a.m.

- 5:00 p.m. May be required to provide 24/7 on-call support. This is a hybrid position and must be located within 100 miles of a Mayo Clinic campus for occasional on-site expectations based on business needs.

May be required to provide 24/7 on-call support.

No

Just as our reputation has spread beyond our Minnesota roots, so have our locations. Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations. Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives.

Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the 'EOE is the Law'. Mayo Clinic participates in E-Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.