Senior Cyber Security Engineer – Full Time

Jobtailor; Covina (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor is seeking an experienced cybersecurity professional to safeguard healthcare systems, protect ePHI, and secure clinical operations. The role focuses on designing robust security programs, HIPAA/HITRUST-aligned controls, and Zero Trust in clinical environments.

You will work with ePHI protection, cloud security, incident response, and regulatory compliance, with a track record of implementing security frameworks in regulated healthcare settings.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field required or extensive years of experience in lieu of degree.

Responsibilities

• Responsible for safeguarding critical healthcare systems, electronic protected health information (ePHI), and clinical operations.
• Designing and maintaining a robust security program that ensures compliance with healthcare regulations while protecting against evolving cyber threats.

Skills

Cybersecurity

Healthcare Data Protection

Security Tools Proficiency

Incident Response Experience

Regulatory Compliance Knowledge

Education

Bachelor's degree or equivalent experience

Tools

SIEM

EDR

DLP

Vulnerability Management

Splunk

CrowdStrike

Aruba

Microsoft Sentinel

Job description

• Responsible for safeguarding critical healthcare systems, electronic protected health information (ePHI), and clinical operations.
• Responsible for designing and maintaining a robust security program that ensures compliance with healthcare regulations while protecting against evolving cyber threats.
• Expertise in healthcare security frameworks, understanding the sensitivity of patient data, and balancing security with system availability in clinical environments.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field required or extensive years of experience in lieu of degree.
• Minimum of five to eight (5-8) years of experience in cybersecurity, with at least 2+ years in healthcare or regulated environments.
• Strong understanding of healthcare data protection requirements (ePHI handling, privacy, and security rules).
• Experience securing healthcare systems, including EHR platforms and clinical networks.
• Hands-on experience with security tools (SIEM, EDR, DLP, vulnerability management platforms).
• Knowledge of network segmentation and Zero Trust strategies in hospital environments.
• Experience with cloud security in regulated environments.
• Proficiency in scripting/automation (Python, PowerShell, or Bash).
• Proven incident response experience involving sensitive data.
• Experience with HITRUST CSF certification processes preferred.
• Familiarity with medical device security standards (e.g., FDA guidance, IEC 80001) preferred.
• Experience with security tools such as Splunk, CrowdStrike, Aruba, and Microsoft Sentinel preferred.
• Knowledge of data loss prevention (DLP) and encryption strategies for patient data.
• Experience implementing Zero Trust or SASE in healthcare environments preferred.
• Understanding and expertise in cybersecurity frameworks. i.e. NIST 2.0 or SANS Security Controls.
• CISSP, CISM, HCISPP (Healthcare Information Security and Privacy Practitioner), or GIAC preferred.

Core Competencies

Demonstrates expertise in safeguarding healthcare systems and electronic protected health information (ePHI) while ensuring compliance with healthcare regulations. Proficient in implementing security frameworks and strategies, including Zero Trust, to protect sensitive patient data in clinical environments.

Highest-signal resume keywords

• Cybersecurity Expertise
• Healthcare Data Protection
• Security Tools Proficiency
• Incident Response Experience
• Regulatory Compliance Knowledge

ATS Optimization Keywords

Hard Skills

• Cybersecurity
• Healthcare Security Frameworks
• Data Loss Prevention
• Scripting/Automation (Python, PowerShell, Bash)
• Network Segmentation
• Zero Trust Strategies
• Cloud Security
• EHR Security
• Vulnerability Management
• Encryption Strategies

Certifications & Qualifications

• CISSP
• CISM
• HCISPP
• GIAC

Industry Keywords

• EPHI Handling
• Healthcare Regulations
• HITRUST CSF
• Medical Device Security Standards
• NIST 2.0
• SANS Security Controls

Tools & Technologies

• SIEM
• EDR
• DLP
• Splunk
• CrowdStrike
• Aruba
• Microsoft Sentinel