Senior Cybersecurity Engineer

MaineHealth Accountable Care Organization; Westbrook (ME); Hybrid; USD 113,000 - 153,000; Full time

Job summary

MaineHealth Accountable Care Organization is seeking a Senior Cybersecurity Engineer to design, implement, and maintain security across infrastructure, applications, and cloud environments. You will mentor others and support security program SLAs while collaborating with cross-functional teams.

The ideal candidate brings five years of IT experience in complex environments, strong networking knowledge, and a bachelor’s degree with a professional security certification.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• Five years of IT experience in complex environments.
• Experience with security controls such as firewalls, IAM, VPN, and IDS/IPS.
• Professional certification in security or networking required.

Responsibilities

• Design, implement, and maintain security architecture.
• Lead end-to-end security across on‑premise, cloud, and hybrid.
• Manage risk frameworks (NIST, CIS, HIPAA).
• Conduct vulnerability assessments and remediation.
• Lead incident detection and response and mentor staff.
• Participate in on‑call rotations and policy compliance.

Skills

Security architecture

Threat analysis

Incident response

Cloud security

Vulnerability management

Education

Bachelor’s degree

Security certification

Tools

SIEM

EDR

Firewalls

Job description

The Senior Cybersecurity Engineer is responsible for designing, implementing, and maintaining robust security solutions across infrastructure, applications, and cloud environments. This role plays a key role in protecting the organization against evolving cyber threats while ensuring compliance with industry standards and internal security policies. The Senior Cybersecurity Engineer collaborates closely with cross functional teams, supports defined security program service levels, and provides mentorship and technical guidance to other Security Engineers.

This is a senior level role requiring a combination of demonstrated technical expertise, hands‑on experience, and professional maturity. The ideal candidate has five years of IT experience in complex environments with a strong working knowledge of computer networking and platforms.

Key Responsibilities

• Design, implement, manage, and direct monitoring for the organization’s technical security architecture, processes, and systems
• Implement and manage end‑to‑end security solutions across on premise, cloud, and hybrid infrastructures and applications
• Plan, execute, and manage risk management and compliance frameworks, including NIST, CIS, STIGs, and HIPAA
• Perform vulnerability assessments, manage remediation workflows, and document associated risk
• Monitor security alerts and logs; lead incident detection and response and liaise with external service providers as needed
• Conduct threat modeling, threat hunting, and log analysis to identify anomalies and emerging risks
• Mentor junior engineers and provide technical leadership on security best practices
• Participate in an on‑call rotation, including after‑hours support, issue analysis, documentation, and escalation as required
• Maintain compliance with security policies, procedures, standards, and service level expectations

Technical Skills & Capabilities

• Demonstrated understanding of security controls, including firewalls, IDS/IPS, SIEM, EDR, IAM, and VPN technologies
• Cloud security strategy and configuration experience (e.g., AWS, Azure)
• Proven experience with vulnerability management, patching workflows, and compliance adherence
• Strong background in threat analysis, incident response, and log monitoring

Professional & Leadership Skills

• Strong leadership and mentoring capabilities for junior staff
• Excellent verbal and written communication skills for advisory, reporting, and documentation functions
• Analytical problem‑solving skills with a detail oriented mindset
• Flexibility to work non‑business hours during deployments, incident response, or field maintenance activities

Required Minimum Knowledge, Skills, and Abilities (KSAs):

• Education: Bachelor’s degree in a related field of study or equivalent work experience required.
• License/Certifications: Professional certification in either technical security or within a relevant networking or platform technology required.
• Experience: Five years of IT experience in complex environments and a working knowledge of computer networking and platforms required.

Additional Information

MaineHealth is committed to fostering a supportive, inclusive environment where care team members can thrive while making a meaningful impact in the communities we serve across Maine and New Hampshire. We offer competitive benefits including paid parental leave, flexible work options, student loan assistance, professional development opportunities, and well‑being resources—so you can grow your career while feeling supported both personally and professionally.

We recognize the value each team member brings to our organization.Any offer of employmentwill depend onqualificationssuch as skills, relevant experience, education, certifications,and otherjob‑relatedfactors. Thebase rangeis an estimate and does notreflect the full valueofourtotal compensationpackage.

The pay range for this position is $113,360.00to $153,379.20per year.

Compensation for part‑time positions is determined on a prorated basis consistent with the scheduled hours and applicable full‑time equivalent (FTE).

In addition to base pay, MaineHealth offerscomprehensivebenefits, recognition programs, career growth opportunities, and,where applicable,shiftdifferentials or other incentives.

MaineHealth will never request financial information during the interview or pre‑hiring process. All legitimate communications will come from an email address ending in @mainehealth.org. If you suspect fraudulent activity, please report it immediately to [email protected] .

Notice Regarding Maine Employer Surveillance Statute:Pursuant to Maine's Employer Surveillance Statute, prospective care team members are notified that MaineHealth may monitor, collect, record, review, or retain information related to the use of its systems, networks, applications, files, data, communications platforms (including notified recordings), smart badges, building access, company vehicle GPS data, business calls, and workplace security cameras.

Information collected may be used for legitimate business purposes, including security, safety, compliance, investigations, training, quality assurance, and operational management.

MaineHealth policy requires all care team members to be vaccinated, including for influenza, subject to eligibility for medical or religious exemptions which can only be granted in compliance with applicable law.

Notice Regarding Maine Employer Surveillance Statute: Pursuant to Maine's Employer Surveillance Statute, prospective care team members are notified that MaineHealth may monitor, collect, record, review, or retain information related to the use of its systems, networks, applications, files, data, communications platforms (including notified recordings), smart badges, building access, company vehicle GPS data, business calls, and workplace security cameras.

Information collected may be used for legitimate business purposes, including security, safety, compliance, investigations, training, quality assurance, and operational management.

Join our Talent Network so we can keep you updated about upcoming events, system updates, and jobs that match what you're looking for