Cybersecurity Engineer I

The Cybersecurity Engineer I provides hands-on operational support across the cybersecurity program while building the technical depth to grow a career in the field. Working under the direction and mentorship of senior engineers, the Engineer I focuses on execution and follow-through—running vulnerability scans, triaging alerts and data protection events, driving remediation to closure with system and application owners, managing security request and exception queues, maintaining security tool coverage, and producing recurring metrics and documentation. This is not a purely entry-level position; the successful candidate arrives with a working foundation in cybersecurity concepts, operating systems, and networking, and—just as important—a genuine passion for cybersecurity and a real desire to expand that knowledge. The role offers exceptional exposure across a healthcare security program alongside experienced engineers who invest in developing the people around them and is an outstanding learning opportunity for someone who enjoys working on a great team in a fast-paced environment. The position is hybrid, pairing remote flexibility with regular on-site presence, because much of the mentoring and knowledge sharing that makes this such a strong learning opportunity happens through in-person collaboration. As with every member of this team, the Engineer I supports incident

Duties and Responsibilities
•
Working from established runbooks and procedures under the direction and mentorship of senior engineers, run scheduled and ad hoc vulnerability scans using platforms such as Rapid7 InsightVM and Tenable Nessus, validate scan coverage and credentialed scan success, and prepare findings for senior review and risk-based prioritization.
•
Track vulnerability, audit, and assessment remediation to closure—maintaining tickets with IT, infrastructure, application, and vendor owners, validating completed fixes, and escalating stalled findings.
•
Perform first-level triage of security alerts, user-reported phishing, and findings escalated by the managed security services provider; gather context, document observations, and escalate according to defined criteria.
•
Support data protection and identity operations, including initial triage of Data Loss Prevention alerts in platforms such as Microsoft Purview and Varonis, periodic access and privileged access reviews, and cleanup of stale accounts and entitlements.
•
Own the intake and coordination of cybersecurity request queues—exception requests, security reviews, vendor questionnaires, and application requests—verifying completeness and preparing submissions for senior review.
•
Maintain the health and coverage of security tooling such as EDR, device management, and logging agents; produce recurring metrics, dashboards, and runbooks; and support the security awareness and phishing simulation program.
•
Serve as part of a dynamic team responsible for cybersecurity incident response, supporting evidence and log collection, documentation, and directed containment tasks, and collaborating with ISS, Privacy, and Compliance.
•
Share in the team’s on-call rotation, joining after a ramp-up period of roughly three months and with senior engineer support throughout; because the rotation is shared across the full team, it comes around about once every two months.
•
Pursue certification, cross-training, and progressive ownership that build technical depth and advance the individual’s cybersecurity career.