Cybersecurity Engineer I

Atlantic Health System; Morristown (NJ); Hybrid; USD 85,000 - 110,000; Full time

Job summary

Atlantic Health System in Morristown, NJ, seeks a Cybersecurity Engineer I to bolster our healthcare security program. You will work under mentorship of senior engineers, perform vulnerability scans, triage alerts, and support remediation with system and application owners in a fast-paced environment.

This hybrid role offers hands-on exposure, access to security tooling, and opportunities to pursue certifications while developing depth in incident response, data protection, and governance across

Qualifications

• Working knowledge of cybersecurity concepts, operating systems, and networking.
• Willingness to grow through mentorship and training.

Responsibilities

• Run scheduled and ad hoc vulnerability scans and prepare findings for review.
• Triage security alerts, phishing findings, and incidents with documented observations.
• Coordinate remediation with IT, infrastructure, and application owners.
• Maintain health of security tooling and generate metrics and runbooks.
• Support incident response activities including evidence collection and containment.

Skills

Vulnerability scanning

Incident response

Security monitoring

Threat intel basics

Tools

Rapid7 InsightVM

Tenable Nessus

Microsoft Purview

Varonis

Job description

The Cybersecurity Engineer I provides hands-on operational support across the cybersecurity program while building the technical depth to grow a career in the field. Working under the direction and mentorship of senior engineers, the Engineer I focuses on execution and follow-through—running vulnerability scans, triaging alerts and data protection events, driving remediation to closure with system and application owners, managing security request and exception queues, maintaining security tool coverage, and producing recurring metrics and documentation. This is not a purely entry-level position; the successful candidate arrives with a working foundation in cybersecurity concepts, operating systems, and networking, and—just as important—a genuine passion for cybersecurity and a real desire to expand that knowledge. The role offers exceptional exposure across a healthcare security program alongside experienced engineers who invest in developing the people around them and is an outstanding learning opportunity for someone who enjoys working on a great team in a fast-paced environment. The position is hybrid, pairing remote flexibility with regular on-site presence, because much of the mentoring and knowledge sharing that makes this such a strong learning opportunity happens through in-person collaboration. As with every member of this team, the Engineer I supports incident

Duties and Responsibilities

• Working from established runbooks and procedures under the direction and mentorship of senior engineers, run scheduled and ad hoc vulnerability scans using platforms such as Rapid7 InsightVM and Tenable Nessus, validate scan coverage and credentialed scan success, and prepare findings for senior review and risk-based prioritization.
• Track vulnerability, audit, and assessment remediation to closure—maintaining tickets with IT, infrastructure, application, and vendor owners, validating completed fixes, and escalating stalled findings.
• Perform first-level triage of security alerts, user-reported phishing, and findings escalated by the managed security services provider; gather context, document observations, and escalation according to defined criteria.
• Support data protection and identity operations, including initial triage of Data Loss Prevention alerts in platforms such as Microsoft Purview and Varonis, periodic access and privileged access reviews, and cleanup of stale accounts and entitlements.
• Own the intake and coordination of cybersecurity request queues—exception requests, security reviews, vendor questionnaires, and application requests—verifying completeness and preparing submissions for senior review.
• Maintain the health and coverage of security tooling such as EDR, device management, and logging agents; produce recurring metrics, dashboards, and runbooks; and support the security awareness and phishing simulation program.
• Serve as part of a dynamic team responsible for cybersecurity incident response, supporting evidence and log collection, documentation, and directed containment tasks, and collaborating with ISS, Privacy, and Compliance.
• Share in the team’s on-call rotation, joining after a ramp-up period of roughly three months and with senior engineer support throughout; because the rotation is shared across the full team, it comes around about once every two months.
• Pursue certification, cross-training, and progressive ownership that build technical depth and advance the individual’s cybersecurity career.