Cyber Defense Optimization Engineer II

HCA Healthcare; Nashville (TN); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Comprehensive benefits

401(k) with match

Tuition assistance

Job summary

HCA Healthcare is seeking a Security Threat Engineer II to advance Cyber Defense & Response maturation by building structured learning paths, workshops, and hands-on labs. You will enable technical teams, refine processes, and track metrics to demonstrate impact across the enterprise.

The role emphasizes collaboration with cross-functional teams, automation opportunities, and continuous improvement in onboarding and training processes within a high-tempo environment.

Qualifications

• Bachelor's degree required.
• 3+ years experience in Cyber Incident Response or similar.
• Experience consuming and generating cybersecurity threat intelligence.
• Experience across technology stack and OSI layers.

Responsibilities

• Support onboarding of new CDR use cases through enablement programs and documentation.
• Develop and maintain upskilling resources including training materials and labs.
• Collaborate with cross-functional teams to implement process improvements.
• Assist in developing performance metrics to measure maturity and impact of cyber defense initiatives.
• Coordinate Security Telemetry Onboarding Requests (STOR) across CDR.
• Participate in tool adoption and workflow optimization initiatives.
• Identify opportunities for automation and AI integration in onboarding and training.
• Maintain alignment with CDR goals and ensure feedback loops between teams.
• Collaborate with Security Engineering, Vulnerability, Networking, and other teams.

Skills

Cybersecurity enablement

Process optimization

Cross-functional collaboration

Mentorship/Training

Strong communication

Education

Bachelor's Degree

Tools

SIEM

EDR

SOAR

Netflow analysis

Firewalls

Threat Intelligence

Job description

Are you passionate about the patient experience? At HCA Healthcare, we are committed to caring for patients with purpose and integrity. We care like family! Jump-start your career as a(an) Security Threat Engineer II today with HCA Healthcare.

Job Summary and Qualifications

The Cyber Defense Optimization Engineer II plays a critical role in enhancing the operational maturity of Cyber Defense & Response (CDR) by supporting onboarding, upskilling, and continuous improvement initiatives. This role focuses on enabling technical teams through structured learning paths, process refinement, and metrics-driven performance tracking. The ideal candidate will be passionate about cybersecurity enablement, process optimization, and fostering a culture of continuous learning and innovation.

Major Responsibilities:

• Support onboarding of new CDR use cases through structured enablement programs and documentation.

• Develop and maintain upskilling resources, including technical training materials, workshops, and hands-on labs.

• Collaborate with cross-functional teams to identify and implement process improvements that enhance operational efficiency.

• Assist in the development and tracking of performance metrics to measure maturity, effectiveness, and impact of cyber defense initiatives.

• Contribute to the coordination and prioritization of Security Telemetry Onboarding Requests (STOR) across CDR.

• Participate in technical enablement efforts, including tool adoption, workflow optimization, and knowledge sharing.

• Help drive innovation by identifying opportunities for automation and AI integration in onboarding and training processes.

• Maintain alignment with broader CDR goals and ensure continuous feedback loops between teams.

• Routinely collaborate with individuals and teams from across the enterprise. Desired Experience:

• Experience (3+ years) as a member of a Cyber Incident Response

Desired Experience:

• Experience (3+ years) as a member of a Cyber Incident Response Team (CIRT) or comparable team.

• Experience (1+ years) with an event/information analysis framework such as Analysis of Competing Hypotheses (ACH).

• Experience (1+ years) consuming and generating cybersecurity threat intelligence.

• Experience (3+ years) across the technology stack. Familiarity with all OSI layers and expertise in some.

• Experience (3+ years) using the following types of security tools: oSIEM oFirewalls oWeb Proxy oAnti-Virus (AV) oNext Gen Anti-Virus (NGAV) oEndpoint Detection and Response (EDR) oSandboxing oVirtual Machines oNetflow analysis oMalware Repositories oThreat Intelligence oDeception Stack oIntrusion Detection/Prevention System (IDS/IPS) oSecurity Orchestration Automation Response (SOAR) oPhishing Triage oUser Behavior Analytics (UBA) oEmail Hygiene and Filtering

• Experience (3+ years) interfacing with peer support teams (Security Engineering, Vulnerability and Patching Teams, Networking, Access Management, Legal, Risk/Governance, etc.)

• Experience (3+ years) working in a high-tempo, dynamic environment with a high-performance team.

• Experience (3+ years) with work ticketing systems (e.g. – ServiceNow, JIRA).

What qualifications you will need:

• Bachelor's Degree required

• Three or more years of relevant work experience

Special Qualifications

• The successful candidate will possess the following aptitudes and skillsets:

• Experience as Security Operations Center lead/senior analyst role for 1+ years.

• Able to maintain a superior knowledge of the cyber security capabilities of operating systems, networking devices, control systems, and vendor offerings via self-directed learning and formal training.

• Excellent critical thinking skills to understand available data and use it to support or refute potential hypothesis that explain the data. Use available data to develop and communicate conclusions and recommendations.

• An ability to work and thrive in stressful situations. A demeanor that conveys calm professionalism in stressful situations.

• An ability to maintain confidentiality of sensitive data and to follow proper ethical practices for using tools and accessing data.

• A strong desire to determine root cause of events. A willingness to fully investigate all alternatives exhaustively until a conclusion can be supported.

• Ability to self-prioritize tasks based on criticality and threat level.

• Advanced written and oral communication skills.

The following certifications and courses are helpful, but not required:

• Certified Ethical Hacker (CEH)

• GIAC: GSEC, GCIH, GCIA, GCED, GMON, GCDA, GDAT, GCFE or comparable

• CompTIA Security Benefits

HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:

• Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services

• Wellbeing support, including free counseling and referral services

• Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence

• Savings and retirement resources , including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling

• Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing

• Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts

Learn more about Employee Benefits (https://careers.hcahealthcare.com/pages/employee-benefits-and-rewards)

Note: Eligibility for benefits may vary by location.

HCA Healthcare has been recognized as one of the World's Most Ethical Companies by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

"The great hospitals will always put the patient and the patient's family first, and the really great institutions will provide care with warmth, compassion, and dignity for the individual."- Dr. Thomas Frist, Sr.

HCA Healthcare Co-Founder

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.