INFORMATION SECURITY ENGINEER

The-Center-For-Health-Care-Services; San Antonio (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

The Center for Health Care Services in San Antonio, TX seeks an Information Security Engineer to design, implement, and continuously improve the organization’s cybersecurity architecture, security operations, and controls.

You will provide technical leadership for Microsoft 365 E5 security services, endpoint protection, email security, vulnerability management, incident response, and HIPAA compliance initiatives, guiding security awareness and secure AI adoption.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• 3+ years or more of related IT/Security experience.
• Familiarity with security frameworks (NIST, CIS Controls, ISO 27001).
• Exposure to cloud environments (AWS, Azure, or GCP) and their native security controls.

Responsibilities

• Design, implement, and maintain enterprise security controls across cloud and on‑premises environments.
• Develop and maintain security architecture standards aligned with industry frameworks including NIST Cybersecurity Framework, CIS Controls, and HIPAA Security Rule requirements.
• Evaluate and recommend security technologies, tools, and controls to strengthen organizational cybersecurity posture.
• Lead technical security projects from planning through implementation and operational support.
• Serve as the technical lead for Microsoft 365 and other Cloud Security applications.
• Act as technical owner of the vulnerability management program by leading efforts to reduce risk through proactive remediation.
• Support cybersecurity incident investigations and response activities, including advanced threat hunting, security analysis, and root cause analysis.
• Develop and maintain incident response procedures and playbooks.
• Support security awareness initiatives, providing threat expertise, analyzing phishing campaigns, and recommending improvements.
• Support HIPAA, HITECH, and regulatory compliance by participating in risk assessments and audits, assisting with policy and technical standards development, and maintaining required security controls, evidence, procedures, and documentation.
• Mentor analysts, collaborate on secure infrastructure solutions, and present recommendations to leadership.

Skills

Security architecture

Threat hunting

Incident response

HIPAA compliance

Vulnerability management

Microsoft 365 E5 security

Cloud security (AWS/Azure/GCP)

Education

Bachelor’s degree in Computer Science/Information Systems/related field

4+ years IT/Security experience

Tools

Microsoft 365 E5 security suite

Endpoint protection solutions

SIEM tools

Job description

GENERAL SUMMARY

The Information Security Engineer serves as the senior technical cybersecurity resource responsible for designing, implementing, maintaining, and continuously improving the organization's cybersecurity architecture, security operations, and security controls. This role provides technical leadership for Microsoft 365 E5 security services, end point protection, email security, security awareness, vulnerability management, incident response, HIPAA compliance initiatives, and secure AI adoption.

ESSENTIAL DUTIES & RESPONSIBILITIES

Essential functions are the basic job duties that an employee must be able to perform, with or without reasonable accommodation. The list of essential functions, as outlined herein, is intended to be representative of the tasks performed within this classification. The omission of a function does not preclude management from assigning essential duties not listed herein if such duties relate to the position.

• Design, implement, and maintain enterprise security controls across cloud and on-premises environments.
• Develop and maintain security architecture standards aligned with industry frameworks including NIST Cybersecurity Framework, CIS Controls, and HIPAA Security Rule requirements.
• Evaluate and recommend security technologies, tools, and controls to strengthen organizational cybersecurity posture.
• Lead technical security projects from planning through implementation and operational support.
• Serve as the technical lead for Microsoft 365 and other Cloud Security applications.
• Act as technical owner of the vulnerability management program by leading efforts to reduce the organizational risk exposure through proactive remediation initiatives.
• Support cybersecurity incident investigations and response activities, including but not limited to performing advanced threat hunting, security analysis, and root cause analysis.
• Develop and maintain incident response procedures and playbooks.
• Support security awareness initiatives, providing threat expertise, analyzing phishing campaigns, and recommending improvements to strengthen organizational security culture.
• Support HIPAA, HITECH, and regulatory compliance by participating in risk assessments and audits, assisting with policy and technical standards development, and maintaining required security controls, evidence, procedures, and documentation.
• Serve as the senior cybersecurity technical resource by mentoring analysts, collaborating on secure infrastructure solutions, supporting strategic cybersecurity planning, presenting business-friendly recommendations to leadership, and escalating complex security issues.
• Performs other related duties as required.

MINIMUM ENTRANCE QUALIFICATIONS

Education and Experience

• Bachelor’s degree in Computer Science, Business Administration, Information Systems, or related field or 4 years of experience in the Information Technology field in roles such as System/Network Administration, IT Analyst, Software Development, Risk Analyst, or Security Intelligence.
• Three (3) years or more of related work experience in an IT/Security role.
• Familiarity with security frameworks and standards (NIST, CIS Controls, ISO 27001).
• Exposure to cloud environments (AWS, Azure, or GCP) and their native security controls.

Licenses or Certifications

• Any one of the following: CompTIA Security+, ISC2 Security Certified Practitioner (SSCP), GIAC Security Essentials

Other Requirements

• Must maintain a valid driver’s license and automobile insurance coverage, be able to travel as needed, and be able to meet on a consistent basis the driving record requirements of the Company’s auto insurance carrier if you drive your vehicle during company business.
• Must maintain required credentials and mandatory training requirements to ensure compliance with all State regulations and CHCS policies.

PREFERRED QUALIFICATIONS

• CompTIA CySA+, Certified Information Auditor (CISA), Certified Information Systems Security Professional (CISSP)

SUPERVISION

• None

COMPETENCIES FOR SUCCESSFUL PERFORMANCE OF JOB DUTIES

Knowledge of

• Applicable software applications
• Information technology processes
• Modern office procedures, methods and computer equipment
• Project management principles and practices
• Critical thinking
• Organization and time management

Skill in

• Organization and time management
• Performing a variety of duties, often changing from one task to another of a different nature
• Performing basic mathematical functions such as addition, subtraction, multiplication, division, percentages, and ratios
• Troubleshooting

Ability to

• Accurately organize and maintain paper documents and electronic files
• Conduct research on new and emerging technologies
• Effectively communicate, both verbally and in writing
• Establish and maintain effective working relationships
• Maintain accurate and complete records
• Maintain the confidentiality of information and professional boundaries
• Meet schedules and deadlines of the work
• Understand and carry out oral and written directions
• Work collaboratively with minimal supervision
• Work effectively under pressure with critical thinking, clear reasoning, and attention to detail.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Must be able to meet the physical requirements to complete SAMA and CPR training including lifting up to 12 lbs. and supporting up to 55 lbs.; bending, stooping and getting on and off the floor without assistance.
• Must have adequate mobility that requires frequent walking, standing, bending, stooping, kneeling, reaching (vertical and horizontal), using fingers, hands, feet, legs and torso in various care

Monday - Friday 8:30am - 5:30pm 6800 Park Ten - South