Cybersecurity Engineer II: Threat & Incident Response Lead

GBMC HealthCare; Baltimore (MD); On-site; USD 80,000 - 143,000; Full time

Job summary

GBMC HealthCare is seeking a Cyber Security Engineer in Baltimore to design, implement, and monitor enterprise security. You will lead threat mitigation, incident response, and security architecture projects while maintaining compliance with FISMA, NIST, and HIPAA standards.

Requirements include a Bachelor's in CS or related field or an IT security certification, plus 2–5 years of security engineering experience. Proficiency with Tenable, AD, and security monitoring is preferred.

Qualifications

• Bachelor's degree or relevant IT security certification.
• 2+ years in security engineering or IT security design.
• Experience with vulnerability analysis, penetration testing, forensics.
• Familiar with NIST FISMA, FIPS 199/200, HIPAA policies.
• Proficient with Active Directory and security monitoring tools.

Responsibilities

• SIEM analysis and configuration: build policies, dashboards, alerts.
• Incident Response: investigate and mitigate threats, document RCA.
• Systems Access: manage authentication, password policies, auditing.
• Digital Forensics: collect/process evidence for investigations.
• Vulnerability Assessment and Remediation: analyze and fix vulnerabilities.
• Policy Administration: draft and audit IT security policies.
• Patch Management: coordinate remediation of vulnerabilities.
• Cybersecurity Education: deliver security briefings and training.
• Knowledge of Cyber Threats/Global Trends: stay current and adapt defenses.

Skills

Cybersecurity fundamentals

Communication skills

Independent work

Forensics knowledge

Security incident response

Threat awareness

Education

Bachelor's degree in CS or related field

IT security certification (high level)

Associate's degree with 2 years experience

Tools

Tenable

KnowBe4

Citrix NetScaler

Active Directory

Microsoft 365 Admin

Forcepoint Web Filter

Mobile Device Management

Job description

GBMC HealthCare is seeking a Cyber Security Engineer in Baltimore to design, implement, and monitor enterprise security. You will lead threat mitigation, incident response, and security architecture projects while maintaining compliance with FISMA, NIST, and HIPAA standards.

Requirements include a Bachelor's in CS or related field or an IT security certification, plus 2–5 years of security engineering experience. Proficiency with Tenable, AD, and security monitoring is preferred.