Principle Information Security Engineer



City
Rochester
State
Minnesota
Telecommute
Yes
Department
Information Security
Why Mayo Clinic
As a leading healthcare organization, Mayo Clinic sees securing our patients' data as one of our highest priorities. We seek a motivated professional to join our team as a Principal Information Engineer. The Principal Security Engineer acts as an information security liaison to various business units and the Information Technology Department to provide direction, training, and guidance for OIS staff.
Position description
The Principal Information Security Engineer is considered an expert, leader and mentor; identifying and resolving technology related information security gaps based on the organization’s risk posture. Specifically, the Principal Information Security Engineer is knowledgeable, proficient and experienced in:
•Working with business partners across the organization to achieve organizational and OIS goals
•Working collaboratively with team members and other leaders to develop and implement cybersecurity strategy based on industry best practice
•Developing secure network and systems architecture
•Analyzing technology security posture and appropriate use of security defenses
•Matching technical solutions with business requirements and then designing and implementing them;
•Software development, testing, support/problem solving, and overall technology administration;
•Organizational procedures such as the system development lifecycle;
•Use of defensive measures and information to identify, analyze and report security events;
•Researching and understanding pertinent information technology laws, policies and procedures
•Providing direct support for acquiring information security technology and applications
•Applying IT-related laws and policies, and providing IT-related guidance throughout the software acquisition lifecycle
•Collecting and analyzing information to identify vulnerabilities and potential for exploitation
•Managing and administering processes and tools that enable the organization to identify, document, and access intellectual capital and information content
•Executing duties governing hardware, software, and information system acquisition programs and other program management policies
Qualifications
Master’s degree with three (3) years’ experience OR Bachelor’s degree in Computer Science, Information Systems, Engineering or related major and a minimum five (5) years’ experience in the information security field required.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position.
Additional qualifications
Previous experience with Incident Response 5+ years
Previous experience as IR Incident Handler
Experience Leading a team of SOC analysts

The Principal Information Security Engineer also requires the following skills/abilities.
•Understands the use and efficacy of information security tools, server configurations and controls with the ability to install, configure, test and operate them.
•Able to test, implement, deploy, maintain, review and administer the infrastructure hardware and software required to effectively secure the enterprise, protect data, identify and mitigate risks
•Ability to collect, process, preserve, analyze and present computer related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence or law enforcement investigations.
•Provides advanced technical opinions/conclusions re. security tools, trends, and controls which are supported by documented evidence, based on multiple perspectives and leverage of a variety of resources
•Demonstrates a deep and broad knowledge of standard operating procedures, workflows and supporting technology across numerous critical user areas and an in-depth knowledge of multiple computing technologies either being actively used or of significant interest to Mayo; understands how systems fit into larger picture of technology at Mayo.
•Capacity to work independently and willingness to seek advice/assistance.
License or certification
Must have one of the following certifications (or equivalent) at time of hire.
• CISSP
• GIAC
• CISM
• HCISPP
• OSCP
Exemption status
Exempt
Compensation Detail
Education, experience and tenure may be considered along with internal equity when job offers are extended.  The minimum salary every 2 weeks is approx $4,776 based on a full-time position.
Benefits eligible
Yes
Schedule
Full Time
Hours / Pay period
Full Time
Schedule details
Monday through Friday 8:00am to 5:00pm
Weekend schedule
On call rotation
Site description
This vacancy may be open to full time telework candidates within the U.S./ reasonable travel to a Mayo facility if ever a business need/ meeting or client-facing. While this position is mostly a full time telework position, there may be times where some onsite work may be needed.

Category
IT and Engineering
Career profile
Information Security
Job posting number
140741BR
Recruiter
Ted Keefe
Equal opportunity employer
As an Affirmative Action and Equal Opportunity Employer Mayo Clinic is committed to creating an inclusive environment that values the diversity of its employees and does not discriminate against any employee or candidate. Women, minorities, veterans, people from the LGBTQ communities and people with disabilities are strongly encouraged to apply to join our teams. Reasonable accommodations to access job openings or to apply for a job are available.