Cybersecurity Engineer II - Information Security

Responsibilities:

• Demonstrates commitment to McLeod Health’s mission, vision, and values while maintaining service excellence standards that support quality care and operational excellence.

• Independently investigates and analyzes security incidents and events; determines root cause, severity, and remediation approach; documents findings and resolution.

• Manages response to non-critical and moderate security incidents; escalates to Level III or CISO for critical or enterprise-wide incidents.

• Designs and oversees implementation of secure architectures for systems, networks, and applications in coordination with IT teams.

• Leads vulnerability assessments and coordinates remediation efforts; prioritizes findings based on risk and organizational impact.

• Develops and maintains technical documentation for security controls, architecture, and operational procedures.

• Provides architectural guidance for the implementation and enforcement of security policies, standards, and procedures across assigned domains.

• Leads security compliance initiatives and assessments related to HIPAA, NIST CSF, CIS Critical Security Controls, ISO 27001, and other regulatory or industry requirements; provides subject matter expertise to compliance and audit functions.

• Identifies and recommends emerging security technologies, tools, and frameworks to enhance organizational security posture.

• Mentors Level I engineers; provides technical guidance, design reviews, and coaching on security principles and operational procedures.

• Participates in security design reviews and architecture decisions; contribute to enterprise security strategy.

• Performs additional duties as assigned to support departmental and organizational goals.

Qualifications:

Education & Experience

Required:

• Associate’s Degree in Computer Science, Information Technology or related field from an accredited college is required.

  Minimum 5 years combined experience in the following areas:

  • Advanced hands-on experience with SIEM, IDS/IPS, firewalls, endpoint security solutions, and related enterprise security tools.

  • Expertise in cybersecurity operations, incident response, threat analysis, and investigation techniques.

  • Deep knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Critical Security Controls, COBIT, or similar.

  • Proficiency in secure architecture principles and enterprise security design.

  • Experience with vulnerability assessments, penetration testing, or security risk assessment methodologies.

Knowledge, Skills & Abilities

• Extensive Knowledge of cybersecurity principles, secure architecture, and enterprise security design.

• Advanced analytical and problem-solving skills; ability to diagnose complex technical and security issues independently.

• Excellent written and verbal communication skills; ability to explain technical concepts to non-technical stakeholders.

• Strong leadership and mentoring abilities.

• Project management and process improvement skills.

• Proficiency with multiple security platforms, tools, and log analysis frameworks.

• Independent judgment and decision-making authority within assigned scope.