Security Engineer: Cloud, IaC & Vulnerability Management

Mayo Career Site US; Rochester (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

The Mayo Clinic Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data.

Responsibilities include configuring vulnerability scanning tools, enabling automated workflows through tool integrations, coordinating vulnerability exception management, and

Qualifications

• Experience implementing and operating vulnerability scanning tools.
• Ability to implement and maintain integrations between multiple security tools.
• Experience coordinating vulnerability exception management workflows.
• Experience with Attack Surface Management activities and digital asset discovery.
• Collaboration with cloud engineering teams to secure containers and cloud hosting platforms.
• Experience implementing software supply chain security.

Responsibilities

• Configure and operate vulnerability scanning tools and troubleshoot anomalies.
• Implement and maintain tool integrations to enable automated workflows and reporting.
• Coordinate exception management workflows for vulnerability and application protection policies.
• Oversee Attack Surface Management activities including asset discovery and protection.
• Partner with cloud engineering teams to embed security in the container lifecycle and cloud hosting.
• Support IaC and PaC tooling to enforce policy decisions.

Skills

Vulnerability scanning

Tool integrations

Attack Surface Management

Container security

Software supply chain security

IaC/PaC tooling

Tools

IaC/PaC tools

Job description

The Mayo Clinic Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data.

Responsibilities include configuring vulnerability scanning tools, enabling automated workflows through tool integrations, coordinating vulnerability exception management, and