Cybersecurity Engineer III

About the role

This Cybersecurity Engineer III position, with a primary focus on senior-level vulnerability management, is responsible for providing thought leadership and enhancing the cybersecurity team in identifying, assessing, prioritizing, and remediating security vulnerabilities across the organization’s endpoints, servers, networks, cloud, and applications.

Responsibilities

• Lead efforts in designing, deploying, and maintaining enterprise vulnerability management solutions and scanning infrastructure across endpoints, servers, network devices, cloud, and applications.
• Administer, configure, and optimize Rapid7 (InsightVM/Nexpose) and Tenable Nessus to discover assets, scan for vulnerabilities, and assess exposure across the environment.
• Perform risk-based prioritization of vulnerabilities using CVSS, threat intelligence, and asset criticality, and develop, tune, and continuously improve scanning policies and remediation workflows.
• Track and drive vulnerability remediation to closure in coordination with IT, infrastructure, application, and patch management teams, including validation and root cause analysis of recurring findings.
• Develop and maintain vulnerability metrics, dashboards, and reporting for technical teams and leadership, and collaborate with teams throughout ISS, as well as Privacy and Compliance, to ensure the protection of PHI and adherence to HIPAA and other regulatory requirements.
• Provide mentorship and guidance to junior and mid-level cybersecurity engineers.
• Participate in the development and implementation of cybersecurity strategies and policies.
• Serve as part of a dynamic incident response team, assisting with the detection, triage, investigation, containment, and remediation of security incidents.
• Conduct offensive security exercises, such as penetration testing and red team activities, to proactively identify vulnerabilities and validate defenses across the network.
• Participate in a rotating on-call schedule to support time-sensitive vulnerability and incident response activities outside of normal business hours.

Qualifications

• Duties and Responsibilities as described above.
• Education, Training and Certification: Bachelor's degree or higher in Cybersecurity, Information Technology, or a related field is preferred; relevant certifications such as CISSP, GIAC GEVA, CompTIA Security+, CompTIA PenTest+, or equivalent are highly desirable.
• Knowledge And Experience: Strong understanding of vulnerability management principles, the vulnerability lifecycle, CVSS scoring, and risk-based remediation practices. Hands-on proficiency with Rapid7 (InsightVM/Nexpose), Tenable Nessus, and other vulnerability scanning and assessment technologies across endpoints, servers, network, cloud, and applications. Extensive experience implementing and operating enterprise vulnerability management programs, including scan configuration, risk-based prioritization, and remediation tracking. 3–5 years of experience in vulnerability management, information security, or information technology in a large organization, preferably a large healthcare environment. Hands-on experience contributing to incident response, including alert triage, investigation, containment, and remediation.
• Skills And Abilities: Strong analytical and problem-solving skills. Excellent communication and teamwork abilities. Ability to learn and adapt to new technologies quickly. Attention to detail and a proactive approach to security. Leadership and mentoring skills. Ability to manage cybersecurity projects within a healthcare organization, coordinating effectively with both technical and non-technical team members.

Benefits

Atlantic Health offers a competitive and comprehensive Total Rewards package that supports the health, financial security, and well-being of all team members. Offerings vary based on role level (Team Member, Director, Executive).

Pay

Final compensation and benefit eligibility may vary by role and employment status and will be confirmed at the time of offer.

Schedule

Details regarding the schedule will be provided at the time of offer.