Cybersecurity Engineer - Intermediate

Atrium Health Floyd - Charlotte, NC

Full-time - Mid Level

Charlotte, NC

About the position

The Cybersecurity Engineer position is a critical role within our Information Services department, focusing on maintaining and enhancing the overall security posture and risk management program for both on-premises and cloud-based solutions. This role operates under general supervision and requires a proactive approach to cybersecurity, ensuring the confidentiality, integrity, and availability of our computing environment. The engineer will work independently or collaboratively with other cybersecurity professionals to implement and maintain various cybersecurity systems, ensuring compliance with the Acceptable Use Policy and other relevant regulations. In this role, the engineer will participate in incident response activities as directed by management, providing essential support during security incidents. A strong understanding of security policies and basic security controls is necessary, as the engineer will be responsible for guiding associates on these matters. The position also involves monitoring multiple cybersecurity systems and services, identifying potential issues, and recommending resolutions. The engineer will assist associates in understanding cybersecurity protocols and will contribute to the confidentiality of investigations and forensic reviews. Additionally, the Cybersecurity Engineer will manage cybersecurity projects with minimal guidance, providing regular reporting to management. This may include leading projects such as anti-phishing testing, firewall changes, and vulnerability review coordination. The role also requires delivering cybersecurity training and presentations to medium-sized audiences, enhancing the overall cybersecurity awareness within the organization. The engineer will handle sensitive information and collaborate with Enterprise Privacy, the Legal Department, and law enforcement as directed by leadership, ensuring that all actions align with organizational policies and legal requirements.

Responsibilities

• Oversee overall security posture and risk management program for computing environments.
• Maintain and implement cybersecurity systems independently or with other engineers.
• Enforce the Acceptable Use Policy to ensure confidentiality, integrity, and availability of the computing environment.
• Participate in incident response as directed by management.
• Provide guidance to associates on security policies and basic security controls.
• Monitor multiple cybersecurity systems and identify potential issues for review and resolution.
• Assist associates with cybersecurity-related inquiries and issues.
• Manage cybersecurity projects with minor guidance and report to management.
• Lead cybersecurity projects autonomously when required, including anti-phishing testing and firewall changes.
• Provide cybersecurity training and presentations to audiences of less than 100 people.
• Engage with Enterprise Privacy, Legal Department, and law enforcement regarding sensitive information.

Requirements

• Bachelor's degree preferred.
• 3 years of relevant Information Services experience required.
• 2 years of Cybersecurity experience preferred.
• Security certification (Security+ or equivalent) preferred.
• General understanding of HIPAA requirements and Payment Card Industry Data Security Standards required.
• Knowledge of cybersecurity information security controls and implementation techniques required.
• Ability to work individually or within a group setting.
• Excellent oral and written communication skills.