Sr IS Cybersecurity Engineer

UW Health - Madison, WI

Full-time - Mid Level

Remote - Madison, WI

Educational Services

About the position

This is a full-time position for a Senior Cybersecurity Engineer at UW Health, the top hospital in Wisconsin. The role is designed for individuals who are passionate about fostering teamwork and collaboration, building strong relationships, and mentoring others. The successful candidate will lead, plan, research, implement, manage, and maintain security technology solutions that enhance the security program of the organization. A comprehensive understanding of various cybersecurity domains such as cloud security, network security, Privileged Access Management (PAM), Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), HIPAA compliance, incident management, threat hunting, data protection, and data privacy is essential. The position requires solid experience in troubleshooting complex cybersecurity and network events, working collaboratively with other Information Systems teams and stakeholders. The ideal candidate will possess excellent organizational, interpersonal, and communication skills, demonstrating personal accountability and the ability to work independently while being adaptable to change. This hybrid role will require the candidate to work onsite at 1212 Deming Way, Madison, WI, and will include an after-hours and weekend on-call rotation as needed. At UW Health, employees are offered an excellent benefits package that includes health and dental insurance, paid time off, retirement plans, two weeks of paid parental leave, and adoption assistance. The organization also provides access to resources through the UW Health Employee Wellbeing Department, which supports emotional, financial, and physical well-being. Additionally, UW Health invests in professional growth by offering tuition benefits for coursework related to career advancement, along with options for flexible schedules that promote work-life balance.

Responsibilities

• Lead the planning, implementation, and management of security technology solutions.
• Collaborate with Information Systems teams to troubleshoot complex cybersecurity and network events.
• Mentor and coach team members on cybersecurity protocols and best practices.
• Conduct assessments, testing, and implementation of security systems and controls.
• Manage and maintain security tools such as vulnerability scanners, SIEM, and cloud security tools.
• Ensure compliance with HIPAA and other regulatory requirements related to data protection and privacy.
• Participate in incident management and threat hunting activities.

Requirements

• Minimum of an Associate Degree in Healthcare, Information Technology, Business, or a related field.
• Two years of relevant experience may be considered in lieu of a degree, along with additional experience.
• Demonstrated success in using vulnerability scanners, SIEM, and cloud security tools.
• Experience with identity access management systems, encryption technologies, and firewall management.
• Proven ability to assess, test, and implement security systems and controls.
• Experience mentoring and teaching others on cybersecurity topics.
• Experience leading large-scale projects and processes.

Nice-to-haves

• Bachelor's Degree in Computer Science, Information Systems, Healthcare, Cybersecurity, Information Technology, Engineering, or Business.
• Ten years of progressively responsible experience in a healthcare setting.
• Familiarity with Microsoft 365, Azure Cloud, Active Directory, Cisco and Palo Alto products, VPN, and Intrusion Prevention/Detection.
• Advanced certifications such as CISSP, CEH, CISM, CISA, CRISC, CCSP.

Benefits

• Health and dental insurance
• Paid time off
• Retirement plans
• Two-week paid parental leave
• Adoption assistance
• Tuition benefits for professional growth
• Access to employee wellbeing resources
• Flexible work schedules