Cyber Security Engineer

Kaleida Health; Buffalo (NY); Hybrid; USD 94,000 - 130,000; Full time

Job summary

Kaleida Health is seeking a Cyber Security Engineer to design, implement, and optimize security tooling across endpoints, email, identity, cloud, and network controls.

You will collaborate with application owners, project managers, infrastructure teams, and vendors to deliver secure, compliant solutions across a multi-site healthcare enterprise.

Qualifications

• BA/BS in Computer Sciences, Information, Cybersecurity, or related field; 5-7+ years of hands-on IT/cybersecurity experience required.
• Master’s degree in computer science, information technology, cybersecurity, or related field preferred.
• 3+ years in cybersecurity roles including security engineering, operations, and analyst responsibilities.
• Experience with zero-trust controls, cloud security initiatives, and HIPAA/NIST CSF alignment.

Responsibilities

• Engineer, optimize, and evolve security platform stack across endpoint, email, identity, cloud, and network controls.
• Develop and tune detection logic, correlation rules, and alerting to improve signal fidelity.
• Automate security workflows with scripting and SOAR playbooks to streamline responses.
• Maintain documentation and ensure compliance with HIPAA and NIST CSF 2.0.

Skills

Security engineering

Security operations

Analyst responsibilities

Firewall management

Zero-trust

Cloud security

Scripting/automation

On-call rotations

HIPAA compliance

Education

BA/BS in Computer Sciences, Information, Cybersecurity, or related field

Master’s degree preferred

Tools

SIEM

EDR

DLP

MDM

Job description

Job Description

The Cyber Security Engineer is responsible for engineering, optimizing, and evolving the organization's security platform stack across endpoint, email, identity, cloud, and network security controls. This role focuses on building and tuning security tooling, implementing best-practice configurations, advancing zero trust enforcement, and integrating security capabilities across a multi-site healthcare enterprise. The engineer works closely with application owners, project managers, infrastructure teams, and vendors to deliver secure, reliable, and compliant solutions.

Location: Larkin Bldg @ Exchange Street

Location of Job: US:NY:Buffalo

Work Type: Full-Time

Shift 1

Education And Credentials

BA/BS in Computer Sciences, Information, Cybersecurity, or a related field, or equivalent practical experience (typically 5-7 plus years of hands-on experience in IT, cybersecurity, or related technical roles.) required. Master’s degree in computer science, information technology, cybersecurity, or a related field preferred.

Experience

3 plus years of experience in cybersecurity roles that include a combination of security engineering, security operations, and analyst responsibilities, including experience in several of the following areas required. 3 years of experience in managed firewall and network-security workflows-including rule creation, application onboarding, access provisioning, and posture enforcement-across Firewall, VPN, proxy, IAM, and NIPS/WIPS platforms while partnering with PMs, application owners, and infrastructure teams to support secure builds and updates required. 3 years of experience in implemented and enforced zero-trust controls, including NAC, endpoint firewall policies, network segmentation, and secure remote access, with continuous refinement as organizational needs evolved required. 3 years of experience in engineered and optimized SIEM, EDR, DLP, MDM, and endpoint-hardening platforms, applying best-practice configurations to maintain a strong enterprise security posture required. 3 years of experience in developed and tuned detection logic, correlation rules, and alerting to improve signal fidelity and reduce noise across large, modern network environments required. 3 years of experience in built automation using scripting languages and developed SOAR playbooks to streamline response workflows and reduce manual effort required. 3 years of experience in secured Windows and Linux platforms through hardening, monitoring, and alignment with HIPAA, NIST CSF 2.0, and internal compliance requirements required. 3 years of experience in advanced cloud-security initiatives and evaluated emerging technologies to ensure secure adoption and integration into existing controls required. 3 years of experience in participated in on-call rotations for security incidents and fulfilled security-centric service requests including access reviews, secure remote access setup, and network share provisioning required. 3 years of experience in maintained documentation of security controls, configurations, and procedures; identified opportunities to enhance the organization's overall security posture.

Working Conditions

• Weight Requirement - Light (up to 20 lbs)

Department: KH Cyber Security

Standard Hours Bi-Weekly: 75.00

Weekend/Holiday Requirement: Yes

On Call Required: Yes

Scheduled Work Hours: 8a-5p

Work Arrangement: Hybrid

Union Code: N00 - Non Union KH

Requisition ID#: 21307

Grade: EX216

Pay Frequency: Bi-Weekly

Salary Range: $94,490.57 - $129,926.94

• Wage will be determined based on factors such as candidate's experience, qualifications, internal equity, and any applicable collective bargaining agreement.

Kaleida Health's mission is to advance the health of our community, and we believe our diversity, equity, and inclusion (DEI) strategic work is mission- critical for the good of our workforce and the community who need and depend on our care and services. We understand that racism and health inequities stand firmly in the way of advancing the health of our community, and Kaleida Health envisions DEI as the pursuit of equity and restorative justice for every person. We will exemplify courage and accountability through both the professing and practice of our core values for our friends, colleagues, and community. Kaleida Health is committed to creating a culture of equity and inclusion where diversity is valued and celebrated!