Senior Cybersecurity Engineer

Penn Medicine; Philadelphia (Philadelphia County); Remote; USD 120,000 - 160,000; Full time

Job summary

Penn Medicine is seeking a highly skilled cybersecurity engineer to design, implement, and manage advanced security controls across systems and networks. You will help prevent threats, detect incidents, and strengthen the security posture of Penn Medicine's information assets.

The role emphasizes engineering excellence, collaboration with cross-disciplinary teams, and ongoing evaluation of security technologies in a large academic medical center environment.

Qualifications

• Bachelor's degree in CS, CE or related field.
• 6+ years Information Technology experience (Preferred).
• Experience with security standards and frameworks such as HIPAA, HITRUST, NIST (Preferred).

Responsibilities

• Engineers, implements and manages technical cybersecurity controls and countermeasures with a goal of preventing, detecting and eliminating security threats and risk to the organization.
• Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats.
• Acts as a liaison with other engineering groups to ensure that security issues are addressed as systems are being designed and implemented.
• Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Independently develops long term results-driven relationships with external parties, vendors, and solution providers.
• Ability to interact with customers and exceed expectations of customer service, with timely responses and clear communications.
• Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures.

Skills

Security engineering

Threat detection

Incident response

Education

Bachelor of Arts or Science Computer Science, Computer Engineering or related field

Job description

Description

Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical and business professionals across all disciplines.

Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work?

• Entity: Corporate
• Department: CyberSecurity - Engineering
• Location: Remote based out of 3535 Market Street, Philadelphia, PA
• Hours: 8hr Days

Summary

Provides advanced planning, engineering, implementation, monitoring, enhancement and analysis capabilities for cybersecurity computer system(s) and applications that are the responsibility of the Information Services Cybersecurity Group, with the primary goal to keep Penn Medicine patients, employees and data secure while enabling the business to provide world class health care services. The role especially is responsible for the highly technical engineering aspect of the cybersecurity program, with a focus on establishing a skill and practical implementation of tools and technologies.

Responsibilities

• Engineers, implements and manages technical cybersecurity controls and countermeasures with a goal of preventing, detecting and eliminating security threats and risk to the organization. Identifies opportunistic improvements to the cybersecurity program through feature enhancement, process development/improvement, automation, technology improvements or other innovative means. Provides tier III complex engineering analysis and cybersecurity focused support for security hardware solutions, security applications, networks and operating systems.
• Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats.
• Acts as a liaison with other engineering groups to ensure that security issues are addressed as systems are being designed and implemented while fully considering enterprise impact to operations teams and obtain their buy-in and support for changes.
• Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Independently develops long term results-driven relationships with external parties, vendors, and solution providers.
• Ability to interact with customers and exceed expectations of customer service, with timely responses, clear communications, and consideration for the impact of cybersecurity activities to the enterprise operations.
• Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures.

Credentials

• Cert IS Security Professional (Preferred)

Education or Equivalent Experience

• Bachelor of Arts or Science Computer Science, Computer Engineering or related field (Required)
• And 6+ years Information Technology experience (Required)
• Demonstrated experience in security research, seminar/conference, writing or community leadership (Preferred)
• Experience with security standards and frameworks such as HIPAA, HITRUST, NIST, etc. (Preferred)

We believe that the best care for our patients starts with the best care for our employees. Our employee benefits programs help our employees get healthy and stay healthy. We offer a comprehensive compensation and benefits program that includes one of the finest prepaid tuition assistance programs in the region. Penn Medicine employees are actively engaged and committed to our mission. Together we will continue to make medical advances that help people live longer, healthier lives.

Live Your Life's Work

We are an Equal Opportunity employer. Candidates are considered for employment without regard to race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, familial status, genetic information, domestic or sexual violence victim status, citizenship status, military status, status as a protected veteran or any other status protected by applicable law.