Breakthrough

The Information Security Engineer is a front-line defender in the organization’s cybersecurity operations responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents. Executes initial triage, containment, eradication, and recovery steps according to established playbooks and incident response policies. Maintains detailed records of security incidents, investigations, and remediation steps and prepares summary reports for technical and non-technical audiences. Works collaboratively with other departments, such as IT, compliance, and risk management to ensure integrated security measures are being addressed. Participates in post-incident reviews and lessons learned sessions to refine incident response processes and strengthen the organization’s security posture. Provides input to security awareness initiatives and contributes to a culture of security throughout the organization.   

This is a full time, remote position within the United States.  Mayo Clinic will not sponsor or transfer visas for this position including F1 OPT STEM.

Master’s Degree or a Bachelor’s degree in Computer Science, Information Systems, Engineering or related major and a minimum one (1) year experience in the information security field required, OR Associates degree and two (2) years’ experience in the information security field.The Information Security Engineer also requires the following skills/abilities.
• Understands the use and efficacy of information security tools, server configurations and controls with the ability to install, configure, test and operate them.
• Able to test, implement, deploy, maintain, review and administer the infrastructure hardware and software required to effectively secure the enterprise, protect data, identify and mitigate risks
• Ability to collect, process, preserve, analyze and present computer related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence or law enforcement investigations.
• Provides technical opinions/conclusions re. security tools, trends, and controls which are supported by documented evidence, based on multiple perspectives and leverage of a variety of resources
• Demonstrates knowledge of standard operating procedures, workflows and supporting technology across numerous critical user areas and an in-depth knowledge of multiple computing technologies either being actively used or of significant interest to Mayo; understands how systems fit into larger picture of technology at Mayo.
• Capacity to work independently and willingness to seek advice/assistance.
Must have one of the following certifications (or equivalent) at time of hire. In lieu of certification at time of hire, candidate must pass the exam within two years, and complete the certification process once years of service requirements of the certifying body have been met.
• CISSP
• GSEC
• CISM
• HCISPP
• OSCP