Senior Security Threat Engineer

HCA Healthcare, Inc.; Nashville (TN); Presencial; USD 120.000 - 170.000; Jornada completa

Descripción de la vacante

HCA Healthcare is seeking a Senior Threat Response Engineer in Nashville to investigate and respond to security events, leading complex investigations from triage through containment and remediation across endpoint, identity, network, web, email, and cloud telemetry.

The role requires strong judgment with incomplete information and the ability to develop clear, supportable conclusions. You will own forensic tooling, help operate and improve tooling, coordinate with vendors, and mentor teammates.

Formación

• Five or more years of relevant experience in cyber incident response, digital forensics, threat response, insider threat, or security operations.
• Experience with Endpoint Detection and Response (EDR) platforms such as Microsoft Defender for Endpoint or comparable tools.
• Experience with SIEM technologies; Splunk and SPL experience are preferred.
• Experience deploying, tuning, or operating security tools and working directly with vendors to improve investigative capabilities.

Responsabilidades

• Triage security detections and provide containment and remediation recommendations.
• Perform Windows artifact and forensic analysis; familiarity with Linux/macOS investigations is helpful.
• Conduct digital forensics and incident response across endpoint, identity, network, web, email, and cloud telemetry; build timelines and document conclusions.
• Maintain evidence handling, case documentation, confidentiality, and ethical use of security tools.
• Communicate findings, risk, and recommendations to technical and non-technical stakeholders, including leadership and Legal.
• Partner with Security Engineering, IAM, Networking, Endpoint, and other teams to investigate and remediate threats.
• Improve detection and investigation procedures through threat hunting and runbook development.
• Mentor and onboard analysts, lead knowledge-sharing sessions, support interviewing.

Conocimientos

Threat detection

Incident response

Digital forensics

Security tooling

Vendor coordination

Stakeholder communication

Mentoring

Educación

Bachelor’s Degree Preferred

Herramientas

Microsoft Defender for Endpoint

Splunk

Descripción del empleo

Experience the HCA Healthcare difference where colleagues are trusted, valued members of our healthcare team. Grow your career with an organization committed to delivering respectful, compassionate care, and where the unique and intrinsic worth of each individual is recognized. Senior Security Threat Engineer

Job Summary and Qualifications

JOB SUMMARY

The Senior Threat Response Engineer is an individual contributor responsible for investigating and responding to security events. The engineer leads complex investigations from initial triage through scoping, evidence collection, containment, remediation, documentation, and stakeholder communication. The role requires strong judgment when information is incomplete and the ability to develop clear, supportable conclusions from endpoint, identity, network, web, email, cloud, and other security telemetry.

This role also serves as a technical owner and subject matter expert for forensic tooling and endpoint agents. The engineer will help operate and improve tooling, support deployments and vendor coordination, develop investigative workflows, and transfer knowledge across the team. Successful candidates can take an ambiguous problem, determine what evidence is needed, and drive the work to a defensible conclusion.

GENERAL RESPONSIBILITIES

Major Responsibilities:

• Triage security detections and reports, distinguish expected activity from credible threats, and provide clear containment and remediation recommendations.
• Perform Windows artifact and forensic analysis, including program execution, file and account activity, persistence, memory, and other endpoint evidence; familiarity with Linux and macOS investigation is helpful.
• Perform digital forensics and incident response across endpoint, identity, network, web, email, and cloud telemetry; build timelines, correlate evidence, determine root cause, and document supportable conclusions.
• Maintain appropriate evidence handling, case documentation, confidentiality, and ethical use of security tools and sensitive data.
• Communicate findings, uncertainty, risk, and recommendations to technical and non-technical stakeholders, including leadership, Legal, Risk/Governance, Human Resources, Ethics & Compliance, and other partners as appropriate.
• Partner with Security Engineering, Identity and Access Management, Networking, Endpoint, Vulnerability/Patching, Threat Intelligence, and other teams to investigate and remediate threats.
• Improve detection and investigation procedures through threat hunting, runbook development, post-incident lessons learned, and feedback to security tooling and engineering teams.
• Mentor and onboard analysts, lead knowledge-sharing sessions, and support technical evaluation and interviewing as requested.

Desired Experience:

• Five or more years of relevant experience in any of the following domains: cyber incident response, digital forensics, threat response, insider threat, security operations.
• Experience with Endpoint Detection and Response (EDR) platforms such as Microsoft Defender for Endpoint or comparable tools.
• Experience performing security analysis with Security Information and Event Management (SIEM) technologies; Splunk and SPL experience are preferred.
• Experience deploying, tuning, or operating security tools and working directly with vendors to improve investigative capabilities.

RELEVANT WORK EXPERIENCE

• 5+ years

EDUCATION

• Bachelor’s Degree Preferred

OTHER/SPECIAL QUALIFICATIONS

The successful candidate will possess the following aptitudes and skillsets:

• Sound investigative judgment and the discipline to separate established facts, reasonable inference, and unresolved questions.
• Ability to lead incident response and investigative work calmly and professionally under time pressure.
• Strong written and verbal communication skills, including the ability to explain technical findings and risk to non-technical stakeholders.
• Ability to maintain confidentiality, handle sensitive data appropriately, and follow ethical practices when using investigative tools and accessing data.
• Ability to prioritize work based on business impact, criticality, and threat level while maintaining clear case documentation.
• Ability to mentor teammates, share technical knowledge, and contribute to the development of team capabilities.

Helpful certifications and courses (not required):

• GIAC GCIH, GCFA, GNFA, GCIA, GMON, CISSP, or comparable credentials.

Benefits

HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:

• Comprehensive benefitsfor medical, prescription drug, dental, vision, behavioral health and telemedicine services
• Wellbeing support,including free counseling and referral services
• Time away from workprograms for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence
• Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling
• Education supportthrough tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing
• Additional benefitsfor fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts

Learn more about Employee Benefits

Note: Eligibility for benefits may vary by location.

HCA Healthcare has been recognized as one of the World's Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

\"There is so much good to do in the world and so many different ways to do it.\" - Dr. Thomas Frist, Sr. HCA Healthcare Co-Founder

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.