Cybersecurity Engineer II - Information Security

Job description

Responsibilities:
• Demonstrates commitment to McLeod Health’s mission, vision, and values while maintaining service excellence standards that support quality care and operational excellence.
• Independently investigates and analyzes security incidents and events; determines root cause, severity, and remediation approach; documents findings and resolution.
• Manages response to non-critical and moderate security incidents; escalates to Level III or CISO for critical or enterprise-wide incidents.
• Designs and oversees implementation of secure architectures for systems, networks, and applications in coordination with IT teams.
• Leads vulnerability assessments and coordinates remediation efforts; prioritizes findings based on risk and organizational impact.
• Develops and maintains technical documentation for security controls, architecture, and operational procedures.
• Provides architectural guidance for the implementation and enforcement of security policies, standards, and procedures across assigned domains.
• Leads security compliance initiatives and assessments related to HIPAA, NIST CSF, CIS Critical Security Controls, ISO 27001, and other regulatory or industry requirements; provides subject matter expertise to compliance and audit functions.
• Identifies and recommends emerging security technologies, tools, and frameworks to enhance organizational security posture.
• Mentors Level I engineers; provides technical guidance, design reviews, and coaching on security principles and operational procedures.
• Participates in security design reviews and architecture decisions; contribute to enterprise security strategy.
• Performs additional duties as assigned to support departmental and organizational goals.

Qualifications:
Education & Experience
Required:
• Associate’s Degree in Computer Science, Information Technology or related field from an accredited college is required. Minimum 5 years combined experience in the following areas:
• Advanced hands-on experience with SIEM, IDS/IPS, firewalls, endpoint security solutions, and related enterprise security tools.
• Expertise in cybersecurity operations, incident response, threat analysis, and investigation techniques.
• Deep knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Critical Security Controls, COBIT, or similar.
• Proficiency in secure architecture principles and enterprise security design.
• Experience with vulnerability assessments, penetration testing, or security risk assessment methodologies.

Knowledge, Skills & Abilities
• Extensive Knowledge of cybersecurity principles, secure architecture, and enterprise security design.
• Advanced analytical and problem-solving skills; ability to diagnose complex technical and security issues independently.
• Excellent written and verbal communication skills; ability to explain technical concepts to non-technical stakeholders.
• Strong leadership and mentoring abilities.
• Project management and process improvement skills.
• Proficiency with multiple security platforms, tools, and log analysis frameworks.
• Independent judgment and decision-making authority within assigned scope.