Cyber Defense Enablement Engineer II

HCA Healthcare; Nashville (TN); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, prescription, dental, vision

Wellbeing support

Paid time off & family leave

401(k) match

Tuition assistance

Fertility & family benefits

Job summary

HCA Healthcare is seeking a Security Threat Engineer II to enhance Cyber Defense & Response maturity. You will enable technical teams through structured training paths, workshops, and hands-on labs while coordinating with cross-functional partners to improve processes and metrics.

The role focuses on automation opportunities, threat intelligence consumption, and sustaining alignment with CDR goals in a fast-paced enterprise. Nashville-based with remote flexibility where applicable.

Qualifications

• Bachelor's degree required.
• 3+ years of relevant work experience.
• Experience in cybersecurity incident response and threat intelligence.

Responsibilities

• Onboard new CDR use cases with enablement programs and docs.
• Develop training materials, labs, and workshops for upskilling.
• Collaborate cross-functionally to drive process improvements.
• Track performance metrics to measure maturity and impact.
• Coordinate STOR requests across CDR teams.

Skills

CIRT experience

ACH framework

Threat intelligence

OSI layers knowledge

SIEM tools

EDR/NGAV

SOAR familiarity

Cross-team collaboration

High-tempo environment

Ticketing systems

Education

Bachelor's degree

Tools

SIEM

Firewalls

Web Proxy

EDR/NGAV

SOAR

Virtual Machines

Phishing Triage

UBA

Job description

HCA Healthcare is seeking a Security Threat Engineer II to enhance Cyber Defense & Response maturity. You will enable technical teams through structured training paths, workshops, and hands-on labs while coordinating with cross-functional partners to improve processes and metrics.

The role focuses on automation opportunities, threat intelligence consumption, and sustaining alignment with CDR goals in a fast-paced enterprise. Nashville-based with remote flexibility where applicable.