Information Security Engineer - IS-Mod - 80651

Mayo Foundation for Medical Education and Research; Rochester (MN); Hybrid; USD 102,000 - 143,000; Full time

Benefits offered by this job

Medical plans

Dental coverage

Vision plan

HSA and FSAs

Retirement package

Job summary

Mayo Clinic in Rochester, MN, is seeking an Information Security Engineer to independently implement, administer, and support security solutions across enterprise systems. You will analyze security posture, design controls, and help protect organizational data.

This role may involve vulnerability management, cloud security, and secure software delivery, with on-site requirements and a hybrid work model within 100 miles of Mayo Clinic campuses.

Qualifications

• Bachelor's degree and four (4) years experience in the information security field required, OR Associates degree and 6 years' experience in the information security field.
• Master's Degree in applicable field and two (2) years experience preferred.
• One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP, CISM, GSEC, OSCP.
• Pertinent fields of study include Computer Science, Information Systems, Engineering or related field.

Responsibilities

• Implement, administer, and support security solutions across enterprise systems.
• Analyze security posture and design controls aligned with business requirements.
• Support vulnerability and application protection initiatives including cloud & software delivery.
• Coordinate vulnerability scanning, exception management, and Attack Surface Management activities.

Skills

Security engineering

Vulnerability management

Cloud security

Container security

CI/CD security

Scripting

Education

Bachelor's degree in Computer Science/Info Sec/Engineering

Associate degree in related field

Master's Degree in related field

Tools

Vulnerability scanners

IaC

PaC

CI/CD tools

Cloud platforms

Job description

Why Mayo Clinic

Mayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans– to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.

Benefits Highlights

• Medical:Multiple plan options.
• Dental:Delta Dental or reimbursement account for flexible coverage.
• Vision:Affordable plan with national network.
• Pre-Tax Savings:HSA and FSAs for eligible expenses.
• Retirement: Competitive retirement package to secure your future.

Responsibilities

The Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data.

Depending on the area of focus, the Information Security Engineer may support a variety of application protection initiatives and operations related to Vulnerability and Exposure Management and Secure Cloud & Software Delivery. Examples of such activities include the following:

• Configure and operate vulnerability scanning tools; troubleshooting anomalies.
• Implement and maintain integrations between tools supported within and outside the department to enable automated workflows and reporting.
• Coordinate exception management workflows related to vulnerability and application protection policies.
• Coordinate and oversee Attack Surface Management activities, including the use of advanced tooling for digital asset discovery and protection.
• Partner with cloud engineering teams to embed security within the container lifecycle, support container vulnerability management, and integrate security controls into cloud hosting platforms.
• Implement and support software supply chain security capabilities.
• Administer Infrastructure as Code (IaC) and Policy as Code (PaC) tools, which enforce logic-based policy decisions.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Qualifications

Bachelor's degree and four (4) years experience in the information security field required, OR Associates degree and 6 years' experience in the information security field. Pertinent fields of study include Computer Science, Information Systems, Engineering or related field.

Master's Degree in applicable field and two (2) years experience preferred. Pertinent fields of study include Computer Science, Information Systems, Engineering or related field.

One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP, CISM, GSEC, OSCP.

Preferred Qualifications

• Systems administration, systems engineering, or security experience across Windows, Linux, network, cloud, endpoint, or containerized environments.
• Experience supporting or troubleshooting security or technology platforms, including vulnerability management or application security tools.
• Familiarity with vulnerability and exposure management, containers, CI/CD, software supply chain security, and cloud security concepts.
• Familiarity with scripting or automation using PowerShell, Python, Bash, or similar technologies, with strong troubleshooting and collaboration skills.

Exemption Status

Exempt

Compensation Detail

$102,336 - $143,270 / year

Benefits Eligible

Yes

Schedule

Full Time

Hours/Pay Period

80

Schedule Details

Monday - Friday Days This is a hybrid position and must be located within 100 miles of a Mayo Clinic campus for occasional on-site expectations based on business needs.

Weekend Schedule

Limited nights and weekends based on work load.

International Assignment

No

Site Description

Just as our reputation has spread beyond our Minnesota roots, so have our locations. Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations. Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives. Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the'EOE is the Law'. Mayo Clinic participates inE-Verifyand may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.