Cybersecurity Engineer

About the role

Located in Elmsford, New York, within the IT - Security Engineering department (grant funded), the Cybersecurity Engineer designs, implements, operates, and maintains technical security controls protecting clinical systems, patient data, and enterprise infrastructure across a large, complex healthcare environment. The role emphasizes hands‑on engineering, operational excellence, and collaboration with architecture, SOC, cloud, infrastructure, and compliance teams to ensure security controls are effective, resilient, and aligned with regulatory requirements (HIPAA, HITECH, NYSDOH, etc.).

Responsibilities

• Perform assigned security engineering tasks under guidance.
• Escalate complex issues appropriately.
• Maintain security technologies across network, endpoint, identity, cloud, and logging domains.
• Perform hands‑on troubleshooting of security tooling, integrations, and agent deployments.
• Maintain security controls in alignment with enterprise architecture standards and engineering best practices.
• Develop and maintain technical documentation, runbooks, and standard operating procedures.
• Automate security tasks using scripting and infrastructure‑as‑code where appropriate.

Requirements

• Bachelor's degree or equivalent work experience.
• Experience administering policy in Zscaler and CrowdStrike.
• Minimum of 3 years of experience working with Zscaler and CrowdStrike.
• 1‑3 years fundamental understanding of cloud, network, email, and endpoint security.
• 1‑3 years foundational understanding of cybersecurity threats, attack vectors, and mitigation strategies.
• 1‑3 years strong analytical and problem‑solving skills.
• Experience with endpoint and workload protection (EDR/XDR, server and container security).
• Experience with cloud and hybrid security engineering (AWS, Azure, GCP).
• Experience with data protection technologies.
• Experience maintaining secure third‑party and vendor integrations.
• Experience maintaining secure connectivity between on‑prem and cloud environments.
• Experience supporting regulatory compliance requirements in cloud environments.
• Experience with change management and operational reliability.

Qualifications

• Preferred certifications (to be obtained within the indicated timeframes):
  • CompTIA Security+ (or equivalent) – within 1 year
  • Cloud Security Certification (e.g., CCSP, AWS Security Specialty, or Azure Security Engineer Associate) – within 18 months
  • GIAC Certifications (GSEC, GCED, GCIH, or GCIA) – within 18 months
  • Zscaler and/or CrowdStrike certification – preferred

Skills

• Ability to interpret logs and alerts (1‑3 years).
• Ability to perform scripting (Python, PowerShell, Bash) (1‑3 years).
• Excellent technical documentation skills (1‑3 years).
• Strong verbal and written communication skills (1‑3 years).
• Knowledge of NIST CSF and NIST 800‑series standards (1‑3 years).

Pay

$105,760.00 – $132,200.00

Schedule

• Work shift: Day
• Work days: MON‑FRI
• Scheduled hours: 8:30 AM – 5:00 PM
• Scheduled daily hours: 7.5 hours