Cybersecurity Engineer- Attack Surface Management

CommonSpirit Health; Englewood (CO); On-site; Full time

Job summary

CommonSpirit Health is seeking a Cybersecurity Engineer for Attack Surface Management. This position involves performing attack surface discovery, assessing vulnerabilities, and developing security tools for the organization. Ideal candidates possess a Bachelor's degree in Computer Science and relevant experience in vulnerability scanning.

Qualifications

• 2-3 years experience in vulnerability scanning or related activities.
• Experience with Windows and UNIX/Linux OS.
• Relevant security certifications preferred.

Responsibilities

• Perform attack surface discovery to identify accessible systems and applications.
• Assess vulnerabilities and misconfigurations in technologies.
• Design and implement security solutions for the organization.

Skills

Vulnerability scanning

Security best practices

Threat identification

Education

Bachelor’s Degree in Computer Science

Equivalent experience

Job description

Cybersecurity Engineer- Attack Surface Management

Join to apply for the Cybersecurity Engineer- Attack Surface Management role at CommonSpirit Health.

Job Summary

The Cybersecurity Engineer External Attack Surface Management (EASM) position supports the Attack Surface Management (ASM) program for CommonSpirit Health. This program provides attack surface discovery, performs technical security assessment services, maintains ASM security systems and workflows, and offers engagement and reporting on security vulnerabilities and configuration issues across the enterprise.

The Cybersecurity Engineer reports to the Manager, EASM and OffSec, within the Cyber Vigilance and Defence group, focusing on threat identification, protection, response, and containment for the organization.

Responsibilities

• Perform attack surface discovery to identify systems, applications, services, and repositories accessible on the Internet.
• Assess vulnerabilities, misconfigurations, and flaws in operating systems, network devices, web applications, and other technologies.
• Monitor threat landscapes and business requirements to identify solutions.
• Develop, integrate, and maintain EASM tools and platforms.
• Lead or support projects, act as SME for discovery or scanning methods, and assist in remediation efforts.
• Design and implement security solutions, review technology security, and support multiple functions of moderate to high complexity.
• Manage workload, document activities, and pursue ongoing education in security best practices.
• Communicate security findings and support knowledge sharing within the team.

Qualifications

• Bachelor’s Degree in Computer Science, Information Security, or related field, or equivalent experience.
• Relevant security certifications (e.g., Security+, CISSP, GIAC) preferred.
• 2-3 years experience in vulnerability scanning or related activities.
• Experience with Windows and UNIX/Linux OS.
• Understanding of regulatory frameworks (HIPAA, PCI, NIST, etc.) preferred.
• Healthcare environment experience is a plus.

Overview

CommonSpirit Health is committed to building a healthier future through integrated health services, serving over 20 million patients annually across numerous locations, with a focus on community and innovation.

Pay Range

$45.95 - $66.63/hour