Cybersecurity Engineer

About the role

The Cybersecurity Engineer will design, implement, and maintain cybersecurity controls that protect enterprise, clinical, medical device, IoT, and IoMT environments within a complex healthcare organization. This role will focus heavily on Cisco ISE/TrustSec policy design and enforcement, Cisco Secure Workload segmentation, and Ordr-based asset discovery, classification, and security visibility. The engineer will collaborate closely with Clinical Engineering, Network, Infrastructure, Security Operations, Facilities, Risk Management, and other stakeholders to identify risks, implement practical security solutions, and maintain safe and reliable clinical operations. The ideal candidate brings strong healthcare cybersecurity experience, advanced knowledge of medical device and IoT security, and the ability to balance cybersecurity requirements with patient-care and operational priorities.

Responsibilities

• Design, implement, and maintain cybersecurity controls protecting enterprise, clinical, medical device, IoT, and IoMT environments.
• Develop and enforce Cisco ISE/TrustSec policies, including SGTs, SGACLs, and SXP, and support Cisco Secure Workload segmentation and dependency validation.
• Use Ordr and similar platforms for asset discovery, classification, tagging, monitoring, risk identification, and segmentation support.
• Support medical device lifecycle management, vulnerability remediation, risk prioritization, exception management, and compensating controls using tools such as Nuvolo/CMMS.
• Troubleshoot complex security, network, endpoint, device visibility, segmentation, and integration issues while minimizing impact to clinical operations.
• Collaborate with Clinical Engineering, Facilities, Network, Infrastructure, Security Operations, and Risk Management teams on cybersecurity initiatives.
• Develop security documentation, procedures, workflows, project requirements, and implementation plans.
• Apply risk-based decision-making to balance cybersecurity, operational, regulatory, and patient-care requirements.

Qualifications

• 7+ years of IT or cybersecurity experience in complex enterprise environments.
• 5+ years of healthcare, medical device, IoMT, IoT, clinical technology, or OT security experience.
• Hands-on experience with Cisco ISE/TrustSec, SGTs, SGACLs, SXP, and Cisco Secure Workload.
• Experience with Ordr or similar medical device/IoT asset discovery and security platforms.
• Experience with Nuvolo, CMMS, or clinical asset management platforms.
• Strong knowledge of medical device security, asset discovery, vulnerability management, network segmentation, and endpoint protection.
• Experience with EDR/XDR, SIEM, NAC, identity security, or secure remote access technologies.
• Experience supporting vulnerability remediation, risk assessments, compensating controls, and vendor security reviews.
• Strong troubleshooting, analytical, documentation, project management, and communication skills.
• Knowledge of NIST, HIPAA, HITRUST, HICP, and FDA medical device cybersecurity guidance.
• Bachelor's degree in a related technical field or equivalent combination of education, certifications, and experience.