Cybersecurity Engineering Manager

2000 Montefiore Health System, Inc.; Town of Greenburgh (NY); On-site; USD 136,000 - 170,000; Full time

Job summary

2000 Montefiore Health System, Inc. is looking for a Cybersecurity Engineering Manager to lead a team responsible for implementing security controls within a complex healthcare environment. This role involves managing daily cybersecurity operations and team development while ensuring compliance with regulations.

The ideal candidate will have extensive experience in cybersecurity engineering, strong leadership skills, and the ability to communicate effectively with both technical and non-technical stakeholders.

Qualifications

• 4–6 years of progressive cybersecurity engineering experience focused on team development.
• Proficient in cybersecurity threats and mitigation strategies.
• Strong decision-making skills with the ability to manage multiple tools and priorities.

Responsibilities

• Manage day-to-day cybersecurity engineering operations.
• Oversee secure configuration and maintenance of cybersecurity tools.
• Develop and maintain security engineering standards and runbooks.

Skills

Leadership

Cybersecurity Engineering

Communication Skills

Analytical Skills

Team Development

Regulatory Compliance

Education

Bachelor's degree or equivalent work experience

Tools

EDR Tools

Internet Proxies

Cloud Security Controls

Jira

Confluence

Job description

Position Details

City/State: Elmsford, New York

Department: IT - Security Operations

Work Shift: Day (Mon-Fri 8:30 AM-5 PM)

Scheduled Daily Hours: 7.5 hours

Pay Range: $136,000.02 - $170,000.03

Job Summary

The Cybersecurity Engineering Manager leads a team of cybersecurity engineers responsible for designing, implementing, operating and maintaining technical security controls that protect clinical systems, patient data, and enterprise infrastructure across a large, complex healthcare environment. This role balances hands‑on technical leadership, personnel development, and strategic cybersecurity engineering management, ensuring alignment with regulatory requirements (e.g., HIPAA, HITECH, NYSDOH), enterprise risk management goals, and NIST‑based frameworks.

Responsibilities

• Manage day‑to‑day cybersecurity engineering operations.
• Oversee secure configuration and maintenance of endpoint, network, cloud, and email security tools.
• Develop and maintain security engineering standards and runbooks.
• Manage vendor relationships and contract performance.
• Lead outage response and customer communication during security tool failures that significantly impact business operations.
• Support audits, risk assessments, and regulatory inquiries.
• Ensure high availability and resilience of security controls.
• Continuously mature security engineering capabilities.
• Partner with Attack Surface Management personnel to participate in verification and validation testing of security controls across cloud and on‑premise environments.
• Ensure security engineering participation in enterprise change management processes.
• Define and improve security engineering metrics for resiliency, availability, and operational efficiency.
• Lead engineering efforts to support third‑party risk reduction and secure vendor integrations.
• Ensure security tooling supports both legacy and emerging technologies.
• Drive automation and orchestration to reduce manual engineering effort.
• Champion secure‑by‑design principles across infrastructure and application teams.
• Ensure security solutions are stress‑tested to validate performance under peak clinical load.

Qualifications

• Bachelor’s degree or equivalent work experience.
• 4‑6 years progressive cybersecurity engineering experience, with a focus on team development.
• 4‑6 years of hands‑on experience implementing and managing security technologies to protect against contemporary threats.
• 4‑6 years of experience in leadership: proven experience leading a team of cybersecurity engineering professionals and coordinating engineering efforts across a large healthcare organization.
• Experience leading and managing a team of cybersecurity professionals in a 7x24 on‑call operating model.
• Ability to motivate and inspire team members, foster a positive and productive work environment.
• Strong decision‑making skills, with the ability to manage multiple tools and competing priorities simultaneously.
• Advanced knowledge of cybersecurity engineering principles.
• Strong understanding of cybersecurity threats, attack vectors, and mitigation strategies including Zero Trust and defense‑in‑depth strategies.
• Proficiency in using and managing contemporary on‑premise and cloud‑based cybersecurity tools such as internet proxies, employee and vendor remote access technologies, endpoint agents for EDR and internet client connectors, support of unique anti‑phishing platforms and secure file transfer solutions.
• Strong analytical skills to assess issues with the use of these tools, determine root causes, open support tickets with vendors and implement effective solutions.
• Experience in handling outages and complications associated with these tools and being the face of customer service when handling events that impact the business.
• Excellent communication skills, with the ability to articulate technical issues to both technical and non‑technical stakeholders.
• Familiarity with healthcare regulatory requirements (HIPAA, HITECH, NYSDOH).
• Knowledge of email security and anti‑phishing technologies.
• Ability to design and implement cloud‑native security controls across IaaS, PaaS, and SaaS platforms.
• Familiarity with secure connectivity between on‑premises and cloud environments.
• Familiarity with Agile methodologies and the use of tools like Confluence and Jira to advance the program.

Certifications Required

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• GIAC Security Essentials (GSEC)

EEO Statement

Montefiore Health System, Inc. is an equal employment opportunity employer. Montefiore Health System, Inc. will recruit, hire, train, transfer, promote, layoff and discharge associates in all job classifications without regard to their race, color, religion, creed, national origin, alienage or citizenship status, age, gender, actual or presumed disability, history of disability, sexual orientation, gender identity, gender expression, genetic predisposition or carrier status, pregnancy, military status, marital status, or partnership status, or any other characteristic protected by law.

AEDT Notice

Automated Employment Decision Tools Notice (AEDT)