Cyber Security Engineer II - Threat & Incident Response

Boston Medical Center; Towson, Northern (MD, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

GBMC is seeking a Cyber Security Engineer II to advance enterprise IT security and threat mitigation within a hospital environment. The role focuses on building and integrating security solutions, monitoring threats, and coordinating incident response with forensics documentation.

The candidate will work under limited supervision, collaborate with Cyber leadership, and support EPIC EMR security, vulnerability management, and patch workflows while maintaining current best practices.

Qualifications

• Degree in Computer Science or related field (Engineering/IT).
• Experience in computer or information systems security domains.
• Must have knowledge of FISMA, NIST, HIPAA frameworks.

Responsibilities

• SIEM analysis and configuration.
• Incident response and RCA documentation.
• Vulnerability detection and remediation.
• Security monitoring and patch management support.
• Cybersecurity education and awareness briefings.
• Policy creation and maintenance for IT security.
• Lead and participate in special projects.

Skills

Cybersecurity principles

Independent work

Written & verbal communication

Problem solving

Security governance

Education

Bachelor's degree in CS or related field

2 years security-related experience (associates degree path)

Tools

Tenable

KnowBe4

Citrix NetScaler

Forcepoint Web Filtering

MDM

Active Directory

Job description

GBMC is seeking a Cyber Security Engineer II to advance enterprise IT security and threat mitigation within a hospital environment. The role focuses on building and integrating security solutions, monitoring threats, and coordinating incident response with forensics documentation.

The candidate will work under limited supervision, collaborate with Cyber leadership, and support EPIC EMR security, vulnerability management, and patch workflows while maintaining current best practices.