Cybersecurity Engineer II - Information Security
Erym Cx · South Carolina, United States · hybrid
Responsibilities:
- Demonstrates commitment to McLeod Health’s mission, vision, and values while maintaining service excellence standards that support quality care and operational excellence.
- Independently investigates and analyzes security incidents and events; determines root cause, severity, and remediation approach; documents findings and resolution.
- Manages response to non-critical and moderate security incidents; escalates to Level III or CISO for critical or enterprise-wide incidents.
- Designs and oversees implementation of secure architectures for systems, networks, and applications in coordination with IT teams.
- Leads vulnerability assessments and coordinates remediation efforts; prioritizes findings based on risk and organizational impact.
- Develops and maintains technical documentation for security controls, architecture, and operational procedures.
- Provides architectural guidance for the implementation and enforcement of security policies, standards, and procedures across assigned domains.
- Leads security compliance initiatives and assessments related to HIPAA, NIST CSF, CIS Critical Security Controls, ISO 27001, and other regulatory or industry requirements; provides subject matter expertise to compliance and audit functions.
- Identifies and recommends emerging security technologies, tools, and frameworks to enhance organizational security posture.
- Mentors Level I engineers; provides technical guidance, design reviews, and coaching on security principles and operational procedures.
- Participates in security design reviews and architecture decisions; contribute to enterprise security strategy.
- Performs additional duties as assigned to support departmental and organizational goals.
Qualifications:
Education & Experience
Required:
- Associate’s Degree in Computer Science, Information Technology or related field from an accredited college is required.
Minimum 5 years combined experience in the following areas:
- Advanced hands-on experience with SIEM, IDS/IPS, firewalls, endpoint security solutions, and related enterprise security tools.
- Expertise in cybersecurity operations, incident response, threat analysis, and investigation techniques.
- Deep knowledge of security frameworks such as NIST CSF, ISO 27001, CIS Critical Security Controls, COBIT, or similar.
- Proficiency in secure architecture principles and enterprise security design.
- Experience with vulnerability assessments, penetration testing, or security risk assessment methodologies.
Knowledge, Skills & Abilities
- Extensive Knowledge of cybersecurity principles, secure architecture, and enterprise security design.
- Advanced analytical and problem-solving skills; ability to diagnose complex technical and security issues independently.
- Excellent written and verbal communication skills; ability to explain technical concepts to non-technical stakeholders.
- Strong leadership and mentoring abilities.
- Project management and process improvement skills.
- Proficiency with multiple security platforms, tools, and log analysis frameworks.
- Independent judgment and decision-making authority within assigned scope.