Cybersecurity Engineer II - Information Security

Responsibilities:

1. Demonstrates commitment to McLeod Health’s mission, vision, and values while maintaining service excellence standards that support quality care and operational excellence.

2. Independently investigates and analyzes security incidents and events; determines root cause, severity, and remediation approach; documents findings and resolution.

3. Manages response to non-critical and moderate security incidents; escalates to Level III or CISO for critical or enterprise-wide incidents.

4. Designs and oversees implementation of secure architectures for systems, networks, and applications in coordination with IT teams.

5. Leads vulnerability assessments and coordinates remediation efforts; prioritizes findings based on risk and organizational impact.

6. Develops and maintains technical documentation for security controls, architecture, and operational procedures.

7. Provides architectural guidance for the implementation and enforcement of security policies, standards, and procedures across assigned domains.

8. Leads security compliance initiatives and assessments related to HIPAA, NIST CSF, CIS Critical Security Controls, ISO 27001, and other regulatory or industry requirements; provides subject matter expertise to compliance and audit functions.

9. Identifies and recommends emerging security technologies, tools, and frameworks to enhance organizational security posture.

10. Mentors Level I engineers; provides technical guidance, design reviews, and coaching on security principles and operational procedures.

11. Participates in security design reviews and architecture decisions; contribute to enterprise security strategy.

12. Performs additional duties as assigned to support departmental and organizational goals.

Qualifications:

Education & Experience

Required:

• Associate’s Degree in Computer Science, Information Technology or related field from an accredited college is required.
  

  Minimum 5 years combined experience in the following areas:

  • Advanced hands-on experience with SIEM, IDS/IPS, firewalls, endpoint security solutions, and related enterprise security tools.

  • Expertise in cybersecurity operations, incident response, threat analysis, and investigation techniques.

  • Deep knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Critical Security Controls, COBIT, or similar.

  • Proficiency in secure architecture principles and enterprise security design.

  • Experience with vulnerability assessments, penetration testing, or security risk assessment methodologies.

Knowledge, Skills & Abilities

• Extensive Knowledge of cybersecurity principles, secure architecture, and enterprise security design.

• Advanced analytical and problem-solving skills; ability to diagnose complex technical and security issues independently.

• Excellent written and verbal communication skills; ability to explain technical concepts to non-technical stakeholders.

• Strong leadership and mentoring abilities.

• Project management and process improvement skills.

• Proficiency with multiple security platforms, tools, and log analysis frameworks.

• Independent judgment and decision-making authority within assigned scope.