Cybersecurity Engineer

Accountabilities

• • Lead enterprise vulnerability and exposure management across endpoints, servers, cloud platforms, applications, databases, networks, and medical devices.
  • Develop risk-based approaches for vulnerability prioritization, remediation tracking, validation, reporting, and overall exposure reduction.
  • Conduct application, API, network, cloud, Active Directory, wireless, and infrastructure security assessments.
  • Design, implement, integrate, and optimize security technologies including EDR/XDR, SIEM, SOAR, CSPM, identity security, email security, network security, and data protection platforms.
  • Engineer and automate security controls across cloud, on-premises, SaaS, and hybrid environments.
  • Develop scripts, APIs, workflows, dashboards, and automation solutions that improve detection, remediation, reporting, threat intelligence processing, and operational efficiency.
  • Integrate security throughout the software development lifecycle through secure development practices, threat modeling, security testing, and DevSecOps automation.
  • Partner with development teams to strengthen secure coding practices and remediate application security findings.
  • Evaluate and optimize AI-enabled security capabilities for threat detection, phishing analysis, vulnerability prioritization, investigations, threat hunting, and incident response.
  • Assess security risks associated with emerging technologies, AI platforms, large language models, autonomous agents, and automation solutions.
  • Participate in security architecture reviews, technology evaluations, enterprise transformation programs, and strategic technical initiatives.
  • Collaborate with Security Operations, Incident Response, Infrastructure, Cloud, Architecture, and Application teams to strengthen controls and reduce organizational risk.
  • Support regulatory, audit, compliance, and third-party risk management activities within a highly regulated healthcare environment.
  • Develop and maintain technical standards, policies, playbooks, runbooks, security baselines, and engineering documentation.
  • Provide technical leadership, mentoring, and subject matter expertise to engineers, analysts, and project teams.
  • Create executive and operational metrics demonstrating risk reduction, vulnerability remediation progress, program maturity, and security effectiveness.

  Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline; equivalent relevant education and experience may be considered.
  • 8+ years of progressive cybersecurity experience, including at least 5 years of hands-on cybersecurity engineering experience.
  • Demonstrated experience operating in large, complex enterprise environments and leading technical initiatives across multiple teams.
  • Experience in healthcare, financial services, or another highly regulated industry is preferred.
  • Advanced knowledge of vulnerability management, exposure management, remediation lifecycle processes, and security validation.
  • Hands-on offensive security experience, including penetration testing, adversary emulation, attack simulation, exploitation techniques, and security assessments.
  • Strong application security and DevSecOps knowledge, including OWASP Top 10, secure coding, SAST, DAST, SCA, threat modeling, and CI/CD security integration.
  • Experience securing Microsoft Azure, AWS, and hybrid cloud environments.
  • Expertise in identity and access management, authentication, secrets management, encryption, network segmentation, and zero-trust principles.
  • Experience implementing and supporting EDR/XDR, SIEM, SOAR, email security, DLP, CSPM, vulnerability management, identity security, and data protection technologies.
  • Strong programming and scripting capabilities in Python, PowerShell, JavaScript, Go, C#, Bash, or similar languages.
  • Experience developing APIs, integrations, automation solutions, and infrastructure-as-code security controls.
  • Knowledge of container and Kubernetes security, cloud-native architectures, and modern application environments.
  • Experience with AI-enabled security solutions, generative AI, security copilots, machine learning concepts, prompt engineering, and intelligent automation.
  • Knowledge of threat intelligence, threat hunting, digital forensics, and incident response methodologies.
  • Familiarity with healthcare security and compliance frameworks such as HIPAA, HITECH, NIST, HITRUST, and CIS Controls.
  • Strong technical writing, risk communication, presentation, analytical, and problem-solving abilities.
  • Ability to communicate effectively with both technical and executive audiences and influence outcomes across cross-functional teams.
  • Relevant certifications such as CISSP, OSCP, OSWE, GIAC GPEN, GWAPT, GXPN, GCIH, GCFA, CCSP, CSSLP, Azure Security Engineer Associate, AWS Security Specialty, or CISSP-ISSAP are preferred.
  • High integrity, accountability, professionalism, adaptability, and commitment to continuous learning.

  Benefits

  • Annual compensation range of $140,000–$150,000.
  • Opportunity to work on enterprise-scale cybersecurity initiatives within a highly regulated healthcare environment.
  • Broad technical scope spanning cloud security, vulnerability management, offensive security, DevSecOps, AI-enabled security, and security engineering.
  • Opportunity to influence security architecture, engineering standards, automation, and emerging technology adoption.
  • Strong opportunities for technical leadership, mentoring, and professional development.
  • Collaborative environment with exposure to infrastructure, cloud, application development, architecture, data, and security operations teams.