Cybersecurity Engineer I

Support Atlantic Health System’s cybersecurity operations through hands-on scanning, alert triage, remediation coordination, and incident response support within a hybrid environment in Morristown, NJ.

Responsibilities

• Run scheduled and ad hoc vulnerability scans by following established runbooks and procedures under senior engineer mentorship; examples include Rapid7 InsightVM and Tenable Nessus.
• Validate scan coverage and credentialed scan success; package scan findings for senior review and risk-based prioritization.
• Manage vulnerability, audit, and assessment remediation to closure by maintaining tickets with IT, infrastructure, application, and vendor owners; confirm fixes and escalate stalled items.
• Provide first-level triage of security alerts, user-reported phishing, and findings escalated by the managed security services provider; collect context, document observations, and escalate per defined criteria.
• Support data protection and identity operations including initial triage of Data Loss Prevention (DLP) alerts using Microsoft Purview and Varonis.
• Conduct periodic access and privileged access reviews; help clean up stale accounts and entitlements.
• Own intake and coordination of cybersecurity request queues, including exception requests, security reviews, vendor questionnaires, and application requests; verify completeness and prepare submissions for senior review.
• Maintain health and coverage of security tooling such as EDR, device management, and logging agents; produce recurring metrics, dashboards, and runbooks.
• Support the security awareness and phishing simulation program.
• Participate in cybersecurity incident response with evidence and log collection, documentation, and directed containment tasks; collaborate with ISS, Privacy, and Compliance.
• Join a shared on-call rotation after a ramp-up period of about three months with senior engineer support; the rotation comes around about once every two months.
• Pursue certification and cross-training to build technical depth and progressively expand ownership of cybersecurity responsibilities.

Requirements

• Ability to work from established runbooks and procedures under direction and mentorship from senior engineers.
• Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, or a related field is preferred; equivalent professional experience, military experience, or certifications will be considered.
• A foundational security certification such as CompTIA Security+, (ISC)² SSCP, or CompTIA CySA+ is strongly preferred; if hired without one, obtain within twelve months.
• Progress toward Microsoft SC-900, SC-200, or AZ-500 supported through the team’s training program.
• One to three years of experience in IT, service desk, systems or network administration, or cybersecurity with hands-on security exposure; relevant internship, military, or substantive home lab experience will be considered.
• Foundational cybersecurity knowledge: defense in depth, least privilege, risk-based prioritization, CVSS, and common attack types like phishing, ransomware, and credential theft.
• Conceptual familiarity with MITRE ATT&CK and the NIST Cybersecurity Framework, plus awareness of HIPAA requirements for protecting ePHI.
• Working knowledge of Windows and Linux, Active Directory and Microsoft Entra ID, and networking fundamentals including TCP/IP, DNS, firewalls, VPN, and proxy services.
• PowerShell or Python exposure and ITSM experience with ServiceNow are a plus.
• Familiarity with enterprise security tooling categories such as EDR, SIEM, vulnerability scanning, email security, DLP, and cloud security, with hands-on experience in at least one.
• Genuine passion for cybersecurity, with curiosity and self-directed learning for unfamiliar problems.
• Comfort working in a fast-paced environment with shifting priorities and multiple concurrent assignments.
• Strong follow-through and ownership to drive work to closure; good judgment on when to escalate.
• Clear written communication, disciplined documentation habits, and discretion handling confidential information.

Technologies

• Rapid7 InsightVM
• Tenable Nessus
• Microsoft Purview
• Varonis
• Microsoft Entra ID
• Active Directory
• Windows
• Linux
• PowerShell
• Python
• ServiceNow
• EDR
• SIEM
• DLP
• MITRE ATT&CK
• NIST Cybersecurity Framework
• CVSS
• TCP/IP
• DNS
• Firewalls
• VPN
• Proxy services
• CompTIA Security+
• (ISC)² SSCP
• CompTIA CySA+
• Microsoft SC-900
• Microsoft SC-200
• AZ-500

Benefits

• Medical, Dental, Vision, Prescription Coverage
• Life & AD&D Insurance
• Short-Term and Long-Term Disability (with options to supplement)
• 403(b) Retirement Plan: Employer match, additional non-elective contribution
• PTO & Paid Sick Leave
• Tuition Assistance, Advancement & Academic Advising
• Parental, Adoption, Surrogacy Leave
• Backup and On-Site Childcare
• Well-Being Rewards
• Employee Assistance Program (EAP)
• Fertility Benefits, Healthy Pregnancy Program
• Flexible Spending & Commuter Accounts
• Pet, Home & Auto, Identity Theft and Legal Insurance