Hybrid Cloud Security Engineer | Risk & Access

Medical Information Technology, Inc; Town of Canton (NY); Hybrid; USD 66,000 - 105,000; Full time

Benefits offered by this job

Health, dental, & vision insurance

Profit sharing trust

401(k)

Tuition reimbursement

Generous paid time off & holidays

Job summary

MEDITECH is seeking Information Security Engineers to guard system resources with a focus on confidentiality, integrity, and availability. The role collaborates with multiple teams in a hybrid work setting and emphasizes remediation, risk assessment, and secure configurations.

Responsibilities include evaluating monitoring outputs, prioritizing actions, and maintaining security knowledge across standards like ISO/NIST, while communicating clearly with stakeholders and ensuring access controls

Qualifications

• Bachelor's or associate degree preferred; 2–3 years relevant experience.
• Security certifications are preferred but not required.
• Knowledge of ISO 27001/27002/27017, NIST and SOC standards.

Responsibilities

• Ensure corporate data privacy and security across resources.
• Evaluate outputs from security monitoring tools and prioritize actions.
• Plan and implement remediation and mitigating controls.
• Conduct security risk assessments and advise on risk acceptance.
• Design, implement, and maintain secure system configurations.
• Collaborate with security and IT groups to guard assets.

Skills

Scripting experience (IT operations)

Information security tools & methods

Analytical problem solving

Strong written and verbal comms

Stakeholder collaboration

Education

Bachelor's or associate degree preferred

2-3 years applicable work or military experience

Tools

CISSP

CISA

GISF/GCED/GNFA

CCSP/CCSK/CCSS

Job description

MEDITECH is seeking Information Security Engineers to guard system resources with a focus on confidentiality, integrity, and availability. The role collaborates with multiple teams in a hybrid work setting and emphasizes remediation, risk assessment, and secure configurations.

Responsibilities include evaluating monitoring outputs, prioritizing actions, and maintaining security knowledge across standards like ISO/NIST, while communicating clearly with stakeholders and ensuring access controls