Cybersecurity Engineer

Piedmont HealthCare PA is focused on building a strategic, comprehensive enterprise cyber security program that protects sensitive information. This onsite role in Statesville, NC supports an environment where privacy and security of patient data matter, aligned with HIPAA expectations. The Cybersecurity Engineer helps strengthen incident response, monitoring, threat assessment, and cyber system design across the organization.

Responsibilities

• Understand and support core security technology disciplines including endpoint security, data loss protection, firewalls, intrusion detection and intrusion prevention, application and system scanning tools, and log collection and monitoring.
• Investigate and respond to all security alerts generated by configured alert systems.
• Support multiple systems and applications of medium to high complexity with multiple concurrent users, maintaining control, integrity, security, and accessibility.
• Participate in short- and long-term planning with stakeholders and IT groups, including attending business requirement meetings as needed.
• Integrate security solutions with other applications and platforms based on engineering requirements.
• Develop new alerts and monitoring techniques aligned to engineering requirements.
• Coordinate changes across multiple systems.
• Forecast utilization patterns and identify modifications and upgrades.
• Review security reports and perform periodic system reviews with users and vendors.
• Coordinate problem resolution across functional areas and provide subject matter expertise for diagnosing and resolving issues.
• Report security issues when appropriate and gather required information to support investigations.
• Recommend improvements to security and participate in investigations as needed, while ensuring adherence to security requirements.
• Assist in developing documentation for new cybersecurity solutions and maintain existing documentation.
• May communicate, consult, and coordinate across multiple stakeholder groups.
• Respond to and manage tickets assigned in the trouble ticketing/request system.
• Other duties/responsibilities as assigned.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Computer Business Systems, or a Healthcare related field with a significant technical component.
• Significant and relevant work experience and/or technical certification may substitute for education on a year-for-year basis.
• 5+ years of relevant experience deploying and/or administering cybersecurity solutions, preferably in a clinical setting and preferably in a large ambulatory physician practice.
• Relevant technical certifications are preferred.
• Strong knowledge and experience with multiple enterprise security solutions including SIEM, E-mail Gateways, Firewall, Multi-Factor authentication, IDS, and IPS.
• Commitment to handling sensitive data responsibly, including corporate financial and business data and patient protected health information (PHI).
• Working knowledge of HIPAA Privacy and Security Rules (HIPAA of 1996).
• Exemplary alignment with all PHC policies related to privacy and cybersecurity, and a willingness to support other team members with best-practice guidance.
• Excellent customer service skills, ability to work independently and as part of a team, and strong written and verbal communication.
• Good project management skills and ability to build relationships and trust with internal customers.

Technologies

• SIEM
• E-mail Gateways
• Firewall
• Multi-Factor authentication
• IDS
• IPS

Work Location and Conditions

• Location: Statesville, NC (onsite)
• Work setting: Office setting, computer facility, and clinical offices
• Travel: Local travel required
• Exposure: Minimal exposure to communicable diseases is possible

Physical and Mental Demands

• Standing and sitting for long periods while doing computer input and responding to phone questions
• Ability to bend, stoop, twist, and work with computer equipment
• Occasional stress when working with tense users and handling multiple tasks

Supervision received: Reports to the Cybersecurity Manager
Supervision exercised: None