Cybersecurity Engineer (JR229560)

ViziRecruiter,LLC.; Village of Elmsford (NY); On-site; USD 80,000 - 100,000; Full time

Job summary

ViziRecruiter,LLC. is seeking a Cybersecurity Engineer in Elmsford, NY. In this role, you will design and implement security controls for clinical systems while collaborating with various teams to ensure compliance and operational reliability. The ideal candidate has a BS degree and 1-3 years of experience in cybersecurity, cloud security, and endpoint protection. Strong analytical skills and the ability to automate security tasks are necessary. This position emphasizes hands-on engineering in a mission-driven environment.

Qualifications

• 1-3 years of fundamental understanding of cloud, network, email, and endpoint security.
• 1-3 years of foundational understanding of cybersecurity threats, attack vectors, and mitigation strategies.
• 1-3 years of strong analytical and problem-solving skills.

Responsibilities

• Perform assigned security engineering tasks under guidance.
• Maintain security technologies across network, endpoint, identity, cloud, and logging domains.
• Develop and maintain technical documentation, runbooks, and standard operating procedures.

Skills

Cloud security engineering (AWS, Azure, GCP)

Scripting (Python, PowerShell, Bash)

Knowledge of NIST CSF and NIST 800-series standards

Analytical and problem-solving skills

Education

BS Required

Tools

EDR/XDR, server and container security

Data protection technologies

Job description

Introduction

To heal, to teach, to discover and to advance the health of the communities we serve.

To learn more about the “Montefiore Difference” – who we are at Montefiore and all that we have to offer our associates, please click here.

Overview

The Cybersecurity Engineer is an individual contributor responsible for designing, implementing, operating, and maintaining technical security controls that protect clinical systems, patient data, and enterprise infrastructure across a large, complex healthcare environment. This role emphasizes hands‑on engineering, operational excellence, and close collaboration with architecture, SOC, cloud, infrastructure, and compliance teams to ensure security controls are effective, resilient, and aligned with regulatory requirements (HIPAA, HITECH, NYSDOH, etc.).

As a Cybersecurity Engineer in a large healthcare system, you directly support patient safety, clinical operations, and the protection of sensitive health information. This role provides the opportunity to work deeply with modern security technologies while contributing to a mission‑driven organization where cybersecurity is essential to care delivery.

Responsibilities

• Perform assigned security engineering tasks under guidance.
• Escalate complex issues appropriately.
• Maintain security technologies across network, endpoint, identity, cloud, and logging domains.
• Perform hands‑on troubleshooting of security tooling, integrations, and agent deployments.
• Maintain security controls in alignment with enterprise architecture standards and engineering best practices.
• Develop and maintain technical documentation, runbooks, and standard operating procedures.
• Automate security tasks using scripting and infrastructure‑as‑code where appropriate.

Requirements

• BS Required
• 1-3 years Fundamental understanding of cloud, network, email, and endpoint security. Required.
• 1-3 years Foundational understanding of cybersecurity threats, attack vectors, and mitigation strategies. Required.
• 1-3 years Strong analytical and problem‑solving skills. Required.
• 1-3 years Ability to interpret logs and alerts. Preferred.
• 1-3 years Ability to perform scripting (Python, PowerShell, Bash). Preferred.
• 1-3 years Excellent technical documentation skills. Preferred.
• 1-3 years Strong verbal and written communication skills. Preferred.
• 1-3 years Knowledge of NIST CSF and NIST 800-series standards. Preferred.
• Endpoint and workload protection (EDR/XDR, server and container security). (Medium proficiency)
• Cloud and hybrid security engineering (AWS, Azure, GCP). (Medium proficiency)
• Data protection technologies. (Medium proficiency)
• Secure third‑party and vendor integrations. (Medium proficiency)
• Change management and operational reliability. (Low proficiency)
• Maintain secure connectivity between on‑prem and cloud environments. (Medium proficiency)
• Support regulatory compliance requirements in cloud environments. (Medium proficiency)
• CompTIA Security+ or equivalent foundational certification, within 1 year Preferred or
• Cloud security certifications (CCSP, AWS or Azure Security Specialty) within 1‑1/2 Yrs Preferred or
• GIAC certifications (GSEC, GCED, GCIH, GCIA) within 1‑1/2 Yrs Preferred