Senior Information Security Engineer - Risk

Mayo Clinic Healthcare; Rochester (MN); Remote; USD 131,000 - 191,000; Full time

Job summary

Mayo Clinic seeks an Information Security Senior Incident Response Engineer to play a vital role in cybersecurity operations. This position involves leading incident response efforts, collaborating with IT departments, and ensuring the protection of sensitive information. Ideal candidates hold relevant degrees and certifications, bringing deep knowledge of security tools and managing risks.

Benefits

Comprehensive medical coverage

Dental and vision plans

Retirement package

Continuing education opportunities

Qualifications

• Requires 1 year experience with Master’s or 2 years with Bachelor’s in info security.
• Ability to handle complex technical tasks and security tool setups.
• Must be knowledgeable about IT laws and organization security procedures.

Responsibilities

• Lead efforts to analyze and respond to security incidents.
• Develop incident response plans to mitigate damage.
• Monitor network for potential security threats.

Skills

Information security tools

Network security

Incident response

Cybersecurity

Risk management

Education

Master’s degree

Bachelor’s degree in Computer Science

Tools

CISSP

GSEC

CISM

OSCP

HCISPP

Job description

Why Mayo Clinic

Mayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans – to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.

Benefits Highlights

• Medical: Multiple plan options.
• Dental: Delta Dental or reimbursement account for flexible coverage.
• Vision: Affordable plan with national network.
• Pre-Tax Savings: HSA and FSAs for eligible expenses.
• Retirement: Competitive retirement package to secure your future.
  
  

Responsibilities

The Information Security Senior Incident Response Engineer plays a crucial role in the organization's cybersecurity operations by leading efforts to identify, analyze, and respond to security incidents. This position requires a highly skilled professional who can quickly address complex security challenges, minimize risks, and ensure the integrity and confidentiality of sensitive information. Monitors network traffic and system logs to identify potential security incidents. Utilizes advanced tools and techniques to analyze and determine the scope and impact of incidents. Leads and coordinates response efforts to contain, eradicate, and recover from security incidents. Develops and implements response plans to mitigate damage and restore operations. Conducts thorough investigations to gather evidence, support legal actions, and improve security postures. Documents findings and creates detailed reports. Stays updated on the latest security threats and vulnerabilities. Integrates threat intelligence into incident response processes to enhance detection and prevention capabilities. Works closely with other cybersecurity team members, IT departments, and external partners to ensure a coordinated and effective response to incidents. Provides guidance and training to junior team members. Develops and delivers incident response training programs to enhance the team's skills and readiness.

The Information Security Senior Engineer is results oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments and acts as an information security liaison to various business units and the information technology department to assist with the security design, consultation, and technology implementation for various Mayo Clinic projects and initiatives.

The Incumbent Also Assists System Users Relative To Information Systems Security Matters And Undertakes Complex Projects Requiring Additional Specialized Technical Knowledge. Specifically, The Information Security Senior Engineer Is Knowledgeable, Proficient, And Experienced In

• Working with business partners within the department to achieve organizational and OIS goals
• Developing required competencies by mastering fundamental tasks
• Independently analyzing technology security posture and appropriate use of security defenses
• Matching technical solutions with business requirements and then designing and implementing them;
• Self-directed software development, testing, support/problem solving, and overall technology administration;
• Organizational procedures such as the system development life-cycle;
• Use of defensive measures and information to identify, analyze and report security events;
• Researching and understanding pertinent information technology laws, policies and procedures
• Establishing timelines and delivery of requirements
• Applying IT-related laws and policies, and providing IT-related guidance throughout the software acquisition lifecycle
• Collecting and analyzing information to identify vulnerabilities and potential for exploitation
• Managing and administering processes and tools that enable the organization to identify, document, and access intellectual capital and information content
• Executing duties governing hardware, software, and information system acquisition programs and other program management policies with minimal support
• This position is a 100% remote work. Individual may live anywhere in the US.
• This vacancy is not eligible for sponsorship / we will not sponsor or transfer visas for this position. During the selection process, you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.
  
  

Qualifications

Master’s degree with one (1) year experience or Bachelor’s degree in Computer Science, Information Systems, Engineering or related major and a minimum two (2) years’ experience in the information security field required.

The Information Security Senior Engineer also requires the following skills/abilities:

• Understands the use and efficacy of information security tools, server configurations and controls with the ability to install, configure, test and operate them.
• Able to test, implement, deploy, maintain, review and administer the infrastructure hardware and software required to effectively secure the enterprise, protect data, identify and mitigate risks
• Ability to collect, process, preserve, analyze and present computer related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence or law enforcement investigations.
• Provides advanced technical opinions/conclusions re. security tools, trends, and controls which are supported by documented evidence, based on multiple perspectives and leverage of a variety of resources
• Demonstrates a deep and broad knowledge of standard operating procedures, workflows and supporting technology across numerous critical user areas and an in-depth knowledge of multiple computing technologies either being actively used or of significant interest to Mayo; understands how systems fit into larger picture of technology at Mayo.
• Capacity to work independently and willingness to seek advice/assistance.
  
  

Licensure Or Certification

Must have one of the following certifications (or equivalent) at time of hire. In lieu of certification at time of hire, candidate must pass the exam within two years and complete the certification process once years of service requirements of the certifying body have been met.

• CISSP
• GSEC
• CISM
• OSCP
• HCISPP
  
  

Exemption Status

Exempt

Compensation Detail

$131,705.60 - $190.923.20 / year. Education, experience and tenure may be considered along with internal equity when job offers are extended.

Benefits Eligible

Yes

Schedule

Full Time

Hours/Pay Period

80

Schedule Details

Monday - Friday, business hours of 8:00 am - 5:00 pm CST; Nights and weekends required based on business needs; On-call responsibilities

Weekend Schedule

Nights and weekends required based on business needs

International Assignment

No

Site Description

Just as our reputation has spread beyond our Minnesota roots, so have our locations. Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations. Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives. Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the "EOE is the Law". Mayo Clinic participates in E-Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.

Recruiter

Oneida Her