Security Engineer II - Cyber Operations

NorthShore University HealthSystem; Arlington Heights (IL); Hybrid; USD 66,000 - 102,000; Full time

Benefits offered by this job

Incentive pay

Annual raises based on performance

Career growth opportunities

Medical, dental, vision options

Tuition reimbursement

Free parking

Wellness program

Job summary

Endeavor Health is seeking a Security Engineer II, Cyber Operations, to advance the organization’s DLP program and data protection across email, cloud, and endpoints. You will administer DLP tools, coordinate investigations, and align controls with HIPAA and PCI requirements.

This hybrid role includes on-call rotation and collaboration with clinical partners and external teams. The ideal candidate brings 3+ years of cybersecurity experience, strong DLP and incident-response skills, and

Qualifications

• Bachelor's Degree or equivalent in a technical discipline.
• Minimum 3 years of mid-level cybersecurity experience.
• Experience leading and administering at least one security application.
• Healthcare IT security experience is preferred.

Responsibilities

• Administer, monitor, and improve DLP technologies and workflows.
• Triage and investigate DLP and data-protection alerts.
• Conduct investigations involving HIPAA, PCI, and other requirments.
• Coordinate incident response with stakeholders; track cases to resolution.
• Develop and refine DLP policies, runbooks, and workflows.
• Analyze alerts and recommend improvements to policies and tooling.
• Develop DLP metrics and automated workflows.
• Support broader Cyber Operations tasks and security projects.
• Participate in on-call rotation and audits.

Skills

Cybersecurity experience

Security engineering

HIPAA/PCI knowledge

SOAR automation

DLP expertise

Incident response

Project management

Communication skills

Healthcare IT experience

Education

Bachelor's Degree

Security certifications

Tools

Microsoft Purview

Endpoint DLP

SOAR

ServiceNow

Job description

Hourly Pay Range:

$47.57 - $73.74 - The hourly pay rate offered is determined by a candidate's expertise and years of experience, among other factors.

Position Highlights:

• Position: Security Engineer II - Cyber Operations
• Location: Skokie, IL or Warrenville, IL or Arlington Heights, IL
• Full Time
• Hours: Monday-Friday, 8:00am- 4:30pm
• Hybrid Position
• Local travel to other corporate sites will be required as necessary.

Job Summary:

As a Security Engineer II, Cyber Operations, at Endeavor Health, you will primarily support the organization's Data Loss Prevention (DLP) program and strengthen the protection of sensitive information across email, cloud, and endpoint environments. You will operationalize and support DLP capabilities, including Microsoft Purview and endpoint DLP, through alert monitoring and investigation, policy administration and tuning, user and business-unit coordination, documentation, and follow-up. The role also supports Insider Risk and related data-protection monitoring, including work involving HIPAA, PCI, and other sensitive-data requirements.

You will develop and improve DLP procedures, case-management workflows, automation, and metrics to support timely, consistent investigations and demonstrate the effectiveness of DLP controls. DLP is the primary focus of this position though you will also support broader Cyber Operations responsibilities as assigned, including security incident response, administration of other security technologies, compliance activities, and cybersecurity projects. This hybrid role will include a 24/7 on-call support rotation and requires sound judgment, technical expertise, project management, and clear communication with technical and business partners.

Individuals should be proficient in using advanced security tooling and ensuring alignment with HIPAA, PCI, and other applicable laws, regulations, and standards. To be successful in this role, you will be expected to stay up to date on the latest solutions and technologies and advocate for the adoption of security and architecture best practices for the enterprise.

What you will do:

• Administer, monitor, maintain, and continuously improve DLP technologies and workflows, including Microsoft Purview and endpoint DLP, as capabilities are implemented and expanded.
• Triage and investigate DLP, Insider Risk, and other data-protection alerts across email, cloud, endpoint, and related environments; assess context, determine disposition, and coordinate appropriate user and business-unit follow-up.
• Conduct and support investigations and scans involving sensitive data and applicable requirements, including HIPAA, PCI, and other regulatory or organizational obligations; collect and preserve relevant evidence and document findings.
• Coordinate DLP incident response, containment, escalation, and remediation with Cyber Operations, the MSSP, business and clinical partners, and other stakeholders; track cases through resolution and capture lessons learned.
• Develop, maintain, and refine DLP policies, detection rules, runbooks, playbooks, investigation procedures, escalation criteria, and ServiceNow or other case-management workflows.
• Analyze alert outcomes and false positives and recommend improvements to DLP policies, detections, processes, and supporting tools.
• Develop DLP metrics and reports covering alert volume and disposition, investigation aging and workload, response performance, policy effectiveness, and workflow automation.
• Identify and implement appropriate automation for repeatable DLP tasks, including alert enrichment, evidence collection, case creation, notifications, and escalation; use SOAR or workflow tools where appropriate.
• Support broader Cyber Operations activities as assigned, including complex security incident investigations and response, recovery coordination, cybersecurity projects, and collaboration with peers and operational teams.
• Manage, administer, monitor, and support other assigned security applications; troubleshoot and resolve issues related to cybersecurity technologies.
• Participate in system and project security reviews, risk and impact assessments, control development, audits, and compliance activities, including support for HIPAA, PCI, and other applicable requirements.
• Participate in an on-call rotation with peers to address assigned incidents and execute other duties as assigned.

What you will need:

• Education: Bachelor's Degree, or equivalent, in a technical discipline, or a corresponding educational background with professional-level security certifications relevant to the role.
• Experience:
• Minimum three (3) years of mid-level Cybersecurity experience at an analyst or engineer level.
• Previous experience leading, supporting, managing, and administering at least one application.
• Previous experience leading security projects and initiatives.
• Previous healthcare experience in an IT or Security capacity.
• Industry-recognized technical or professional security certification.
• Unique or Preferred Skills:
• Ability to work independently with minimal oversight on a broad range of security projects and initiatives.
• Demonstrated in-depth knowledge of information security principles, practices, solutions, and capabilities.
• Demonstrated understanding of advanced security incident investigation techniques.
• Intermediate understanding of threats and risks.
• Intermediate-level knowledge of network, application, and systems security architecture.
• Experience with desktop, server, network, database, and application security controls.
• Experience with common security testing methods and tool sets such as email security, vulnerability management, IDS/IPS, EDR, anti-malware, and proxy tools.
• Leadership and project management skills.
• Proven communication, customer service, and organization skills.
• Previous experience with HIPAA, NIST, and project management.

Benefits (For full time or part time positions):

• Incentive pay for select positions
• Opportunity for annual increases based on performance
• Career Pathways to Promote Professional Growth and Development
• Various Medical, Dental, Pet and Vision options
• Tuition Reimbursement
• Free Parking
• Wellness Program Savings Plan
• Health Savings Account Options
• Retirement Options with Company Match
• Paid Time Off and Holiday Pay
• Community Involvement Opportunities

Endeavor Health is a fully integrated healthcare delivery system committed to providing access to quality, vibrant, community-connected care, serving an area of more than 4.2 million residents across six northeast Illinois counties. Our more than 25,000 team members and more than 6,000 physicians aim to deliver transformative patient experiences and expert care close to home across more than 300 ambulatory locations and eight acute care hospitals - Edward (Naperville), Elmhurst, Evanston, Glenbrook (Glenview), Highland Park, Northwest Community (Arlington Heights) Skokie and Swedish (Chicago) - all recognized as Magnet hospitals for nursing excellence. For more information, visit www.endeavorhealth.org.

When you work for Endeavor Health, you will be part of an organization that encourages its employees to achieve career goals and maximize their professional potential.

Please explore our website (www.endeavorhealth.org) to better understand how Endeavor Health delivers on its mission to "help everyone in our communities be their best".

Endeavor Health is committed to working with and providing reasonable accommodation to individuals with disabilities. Please refer to the main career page for more information.

At Endeavor Health, we are united by a shared commitment to working together to create a culture of connection and belonging-each of us bringing different skills and experiences as we deliver safe, seamless, and personal care. Every person, every time. We are committed to fostering an environment where all team members can be their best, learn, and pursue excellence together.

EOE: Race/Color/Sex/Sexual Orientation/ Gender Identity/Religion/National Origin/Disability/Vets, VEVRRA Federal Contractor.