Information Security Engineer - IS-Mod - 80651

Mayo Career Site US; Rochester (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

The Mayo Clinic Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data.

Responsibilities include configuring vulnerability scanning tools, enabling automated workflows through tool integrations, coordinating vulnerability exception management, and

Qualifications

• Experience implementing and operating vulnerability scanning tools.
• Ability to implement and maintain integrations between multiple security tools.
• Experience coordinating vulnerability exception management workflows.
• Experience with Attack Surface Management activities and digital asset discovery.
• Collaboration with cloud engineering teams to secure containers and cloud hosting platforms.
• Experience implementing software supply chain security.

Responsibilities

• Configure and operate vulnerability scanning tools and troubleshoot anomalies.
• Implement and maintain tool integrations to enable automated workflows and reporting.
• Coordinate exception management workflows for vulnerability and application protection policies.
• Oversee Attack Surface Management activities including asset discovery and protection.
• Partner with cloud engineering teams to embed security in the container lifecycle and cloud hosting.
• Support IaC and PaC tooling to enforce policy decisions.

Skills

Vulnerability scanning

Tool integrations

Attack Surface Management

Container security

Software supply chain security

IaC/PaC tooling

Tools

IaC/PaC tools

Job description

The Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data.

Depending on the area of focus, the Information Security Engineer may support a variety of application protection initiatives and operations related to Vulnerability and Exposure Management and Secure Cloud & Software Delivery. Examples of such activities include the following:

• Configure and operate vulnerability scanning tools; troubleshooting anomalies.
• Implement and maintain integrations between tools supported within and outside the department to enable automated workflows and reporting.
• Coordinate exception management workflows related to vulnerability and application protection policies.
• Coordinate and oversee Attack Surface Management activities, including the use of advanced tooling for digital asset discovery and protection.
• Partner with cloud engineering teams to embed security within the container lifecycle, support container vulnerability management, and integrate security controls into cloud hosting platforms.
• Implement and support software supply chain security capabilities.
• Administer Infrastructure as Code (IaC) and Policy as Code (PaC) tools, which enforce logic-based policy decisions.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.