Cybersecurity Engineer

We need to output HTML fragment with sections: About the role? The posting includes Position Summary, What You'll Do, Required, Preferred, Other Knowledge, What STERIS Offers, Pay range, etc. We need to use

for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title as heading. We must include sections only when posting has real specific content. We need to map content to these headings. We have: - Position Summary: could be "About the role". Provide paragraph summarizing. - What You'll Do: responsibilities ->

Responsibilities

with

• items. - Required: qualifications/experience ->

  Requirements

  maybe also Qualifications. We'll use Requirements. - Preferred: could be "Preferred Experience" maybe under Qualifications or Skills. Could combine with Requirements? But we need separate sections only if content. We could have

  Qualifications

  for required and preferred? But we have both Required and Preferred. Could put Required under Requirements, Preferred under Qualifications or Skills. Let's decide: Use Requirements for required experience/education. Use Qualifications for preferred experience/skills. Use Skills for other knowledge? Or we could combine. The instruction: "Prefer a few substantive sections over many thin ones." So maybe we combine Required and Preferred into one Requirements section, but we need to preserve all info. Could list required and preferred bullet points. But we also have "Other Knowledge" which includes analytical, problem solving, interpersonal skills. That could go under Skills. We have "What STERIS Offers": benefits, pay, etc. We need Benefits section, Pay section, maybe Schedule. Schedule: posting mentions hybrid schedule, located in Mentor, Ohio with opportunity for hybrid schedule. So we can have Schedule section. Pay: they gave pay range $70,250 - $75,000, bonus eligibility, etc. So Pay section. Benefits: list of benefits. Thus sections: About the role (Position Summary), Responsibilities (What You'll Do), Requirements (Required + Preferred + Other Knowledge?), Benefits, Pay, Schedule. We need to avoid filler like "commensurate with experience". Not present. We must not include boilerplate like EEO, legal, etc. Remove those. We must not include application instructions, contact info, etc. We must preserve all substantive information. Let's extract content. Position Summary paragraph: "Join the Information and Technology team at STERIS as a Cybersecurity Engineer. You will be responsible for supporting the protection of STERIS systems, infrastructure, applications, data, and related technology assets through the implementation, operation, and continuous improvement of cybersecurity controls. You will assist with vulnerability management, security monitoring, incident response, third-party risk management, policy and standards support, audit evidence collection, and the evaluation of emerging threats and technologies. Working independently and collaboratively with IT, business, vendor, Legal, Procurement, and other stakeholders. As a Cybersecurity Engineer you will also identify risks, investigate security events, coordinate remediation activities, and strengthen the organization’s global cybersecurity posture. This position is located in Mentor, Ohio with the opportunity for a hybrid schedule. Preference will be given to qualified candidates currently living within commuting distance of Mentor." We can keep that as About the role. Responsibilities: bullet list from "What You'll Do As a Cybersecurity Engineer" each sentence starting with a verb. List: - Participate in security incident response activities, including triage, containment, eradication, recovery, documentation, and post-incident lessons learned. - Review infrastructure, cloud, application, and business technology changes to identify security risks and recommend appropriate controls. - Assess and support security controls for cloud platforms, SaaS applications, and externally hosted services. - Develop, tune, and improve detection rules, alert logic, use cases, and security monitoring capabilities to reduce false positives and improve response effectiveness. - Partner with IT, infrastructure, application, and business teams to track remediation of identified vulnerabilities, control gaps, and audit findings. - Support the cybersecurity third-party risk management program by assisting with vendor security assessments, reviewing cybersecurity questionnaires and supporting evidence, identifying control gaps, documenting risks, and coordinating remediation activities with business owners, vendors, Legal, Procurement, and IT stakeholders. - Contribute to cybersecurity standards, procedures, guidelines, and technical baselines aligned with company security requirements. - Provide technical evidence and clarification for internal audits, external audits, regulatory reviews, and Customer security inquiries. - Provide technical cybersecurity guidance to IT and business stakeholders and support security awareness efforts where needed, including technical tabletop exercises. - Maintain accurate documentation for supported security tools, processes, runbooks, configurations, and escalation procedures. - Monitor emerging threats, vulnerabilities, and cybersecurity technologies; recommend improvements to strengthen the company’s security posture. - Participate in after-hours response or escalation support for urgent cybersecurity events, as required. Now Requirements: includes education and experience. Required: "Bachelors degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity or related technical degree. Internship experience highly preferred. OR Associates degree with 4+ years in the following: OR High School Diploma with 8+ years experience in the following: Administrating and implementing security solutions containing at least three of the following enterprise infrastructure technologies: compute, data center, operating systems, database, networking, security tools/cyber, automation, cloud, and engineering applications for on premise and off premise deployment. Experience in the specific technology domain, with experience in requirements definition, solutioning, configuring, testing, or operationalization. Experience in implementing orchestration\automation to isolate systems that pose risk to the organization." Preferred: list bullet points: "Experience in a global/multi-national organization in a shared services organization. Experience in working across large geographically distributed and diverse teams, matrixed into a larger overall IT organization. Advanced vendor certification in an applicable technology domain. Six Sigma or LeanIT" Other Knowledge: "Knowledge of industry security policies. Experience within infrastructure security technologies, multifactor authentication, data, and vulnerability scanning technologies. Demonstrated analytical, problem solving and technical skills. Demonstrated interpersonal and communication skills." We could combine Required, Preferred, Other Knowledge into a Requirements section with sub-bullets maybe separate headings? But we only allowed headings from list; we could still use

  Requirements

  and then within that we can have paragraphs and lists. We'll include all details. We must not invent or summarize away detail. So we need to keep the exact phrasing? We can keep as is but maybe break into bullet points for readability. Must preserve all substantive information; we can rephrase slightly but must not lose detail. Safer to keep original sentences. We'll create a
  for each bullet point. But the Required section includes OR logic; we can keep as paragraph. Better to split into sub-sections? Not allowed headings besides those. We can still use

  paragraphs. Thus:

  Requirements

  Bachelors degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity or related technical degree. Internship experience highly preferred. OR Associates degree with 4+ years in the following: OR High School Diploma with 8+ years experience in the following: Administrating and implementing security solutions containing at least three of the following enterprise infrastructure technologies: compute, data center, operating systems, database, networking, security tools/cyber, automation, cloud, and engineering applications for on premise and off premise deployment. Experience in the specific technology domain, with experience in requirements definition, solutioning, configuring, testing, or operationalization. Experience in implementing orchestration\automation to isolate systems that pose risk to the organization.

  Preferred: Experience in a global/multi-national organization in a shared services organization. Experience in working across large geographically distributed and diverse teams, matrixed into a larger overall IT organization. Advanced vendor certification in an applicable technology domain. Six Sigma or LeanIT.

  Other Knowledge: Knowledge of industry security policies. Experience within infrastructure security technologies, multifactor authentication, data, and vulnerability scanning technologies. Demonstrated analytical, problem solving and technical skills. Demonstrated interpersonal and communication skills.

  Now Benefits: from "What STERIS Offers". List: - Market Competitive Pay - Extensive Paid Time Off and (9) added Holidays - Excellent Healthcare, Dental and Vision Benefits - Long/Short Term Disability Coverage - 401(k) with a company match - Maternity and Paternity Leave - Additional Add-on Benefits/discounts For Programs Such As Pet Insurance - Tuition Reimbursement and continued education programs - Excellent opportunities for advancement in a stable long-term career We need to keep as bullet list. Pay: from "Pay range for this opportunity is $70,250.00 - $75,000. This position is eligible for bonus participation. Minimum pay rates offered will comply with county/city minimums, if higher than range listed. Pay rates are based on a number of factors, including but not limited to local labor market costs, years of relevant experience, education, professional certifications, foreign language fluency, etc. STERIS offers a comprehensive and competitive benefits portfolio." We can put that in Pay section. Schedule: from "This position is located in Mentor, Ohio with the opportunity for a hybrid schedule. Preference will be given to qualified candidates currently living within commuting distance of Mentor." We can put that in Schedule section. We must not include boilerplate like "Open until position is filled." etc. Also not include "STERIS is a leading global provider..." etc. Also not include contact info, EEO. Thus final HTML fragment:

  About the role

  Join the Information and Technology team at STERIS as a Cybersecurity Engineer. You will be responsible for supporting the protection of STERIS systems, infrastructure, applications, data, and related technology assets through the implementation, operation, and continuous improvement of cybersecurity controls. You will assist with vulnerability management, security monitoring, incident response, third-party risk management, policy and standards support, audit evidence collection, and the evaluation of emerging threats and technologies. Working independently and collaboratively with IT, business, vendor, Legal, Procurement, and other stakeholders. As a Cybersecurity Engineer you will also identify risks, investigate security events, coordinate remediation activities, and strengthen the organization’s global cybersecurity posture. This position is located in Mentor, Ohio with the opportunity for a hybrid schedule. Preference will be given to qualified candidates currently living within commuting distance of Mentor.

  Responsibilities

  • Participate in security incident response activities, including triage, containment, eradication, recovery, documentation, and post-incident lessons learned.
  • Review infrastructure, cloud, application, and business technology changes to identify security risks and recommend appropriate controls.
  • Assess and support security controls for cloud platforms, SaaS applications, and externally hosted services.
  • Develop, tune, and improve detection rules, alert logic, use cases, and security monitoring capabilities to reduce false positives and improve response effectiveness.
  • Partner with IT, infrastructure, application, and business teams to track remediation of identified vulnerabilities, control gaps, and audit findings.
  • Support the cybersecurity third-party risk management program by assisting with vendor security assessments, reviewing cybersecurity questionnaires and supporting evidence, identifying control gaps, documenting risks, and coordinating remediation activities with business owners, vendors, Legal, Procurement, and IT stakeholders.
  • Contribute to cybersecurity standards, procedures, guidelines, and technical baselines aligned with company security requirements.
  • Provide technical evidence and clarification for internal audits, external audits, regulatory reviews, and Customer security inquiries.
  • Provide technical cybersecurity guidance to IT and business stakeholders and support security awareness efforts where needed, including technical tabletop exercises.
  • Maintain accurate documentation for supported security tools, processes, runbooks, configurations, and escalation procedures.
  • Monitor emerging threats, vulnerabilities, and cybersecurity technologies; recommend