Cyber Security Engineer

This role designs, implements, and maintains cybersecurity architecture, controls, and defenses for hospital IT and connected environments. As the senior security engineering resource, you will lead key security engineering initiatives and provide technical escalation support for complex incidents.

Location

Redlands, CA 92373 (onsite)

Salary

USD 103,854 - 150,592 per year

Key Responsibilities

• Design, implement, and maintain the organization’s cybersecurity architecture, controls, and defenses across servers, workstations, networks, web applications, cloud environments, medical devices (IoMT), and IT processes.
• Lead the hospital’s security engineering program, including:
  • Zero Trust architecture
  • Identity and access management
  • Security tool ownership across SIEM, EDR/XDR, DLP, CSPM, email security, and PAM
  • Incident response leadership
  • Penetration testing
  • Regulatory compliance with HIPAA, HITECH, NIST CSF, 405(d) HICP, and applicable state and federal requirements
• Serve as the senior technical cybersecurity resource for the organization.
• Act as the primary technical escalation point for complex incidents.
• Translate security risks into actionable strategies for leadership.

Required Qualifications

• Ability to meet all job physical requirements as outlined in the job description or as agreed through a workplace accommodation.
• Availability for on-call, weekends, evenings, and holidays as required.
• Bachelor’s degree in computer science, Information Security, or a related field.
• Minimum of 2 years of experience as a Cyber Security Engineer or similar role, with strong understanding of security principles, practices, and technologies.
• In-depth knowledge of network protocols, operating systems, and common security vulnerabilities, plus familiarity with security tools and software.
• Proficiency in risk assessments, vulnerability assessments, and penetration testing.
• Experience with security incident response, including analysis, containment, eradication, and recovery.
• Strong analytical and problem-solving skills to identify and address security issues effectively.
• Excellent communication and interpersonal skills to collaborate with stakeholders at all levels and to convey complex security concepts to non-technical individuals.
• Ability to work independently, prioritize tasks in a fast-paced environment, and maintain attention to detail while meeting deadlines.

Relevant Technologies & Frameworks

• Zero Trust architecture
• Identity and access management
• SIEM
• EDR/XDR
• DLP
• CSPM
• Email security
• PAM
• HIPAA
• HITECH
• NIST CSF
• 405(d) HICP

Certifications (Preferred)

• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.