IT Cybersecurity Sr Engineer

At the heart of CommonSpirit Health's ministry are the national office departments that provide the foundational support, resources, and expertise that empower local communities to focus on what they do best—caring for patients. Our teams bring together expertise in clinical excellence, operations, finance, human resources, legal, supply chain, technology, and mission integration.

Guided by our faith-based values, the national office fosters consistency, alignment, and innovation across CommonSpirit. By centralizing expertise and leveraging economies of scale, we enable each location to operate efficiently while maintaining flexibility to address unique local community needs. From advancing digital solutions to driving health equity, these departments extend the healing presence of humankindness everywhere we serve.

The Cyber Senior Engineer monitors threat landscape and changing business requirements to Identify functional, technological and/or control solutions.  Integrates all cybersecurity solutions in an optimal manner to best protect the organization from cyber threats and exposures.  Technological solution owner responsible for technology selection based on business requirements and emerging threats.  Drives the design, development, configuration, and implementation of solutions and optimizes solutions to resolve highly complex technical and business issues related to cybersecurity and identity management.  Designs, develops, and implements solutions to successfully integrate new information security and identity management systems with the existing architecture. May drive one or more projects as part of a Security or Security Risk Management team.  Acts as a subject matter expert (SME) for one or more security, IDM, or risk management areas. May act as team-lead for other security or risk management personnel.  Mentors other engineers as a leader in the organization.

This program is responsible for cyber security incident response and investigation including preparation, documentation, and coordination with other teammates and teams, assisting with eradication and recovery, and any necessary post-incident activities.

• Designs, develops, configures, and implements solutions to resolve intermediate to complex technical and business issues related to information security.
• Reviews and consults on security of technology solutions to resolve intermediate to high technical and business issues.
• Designs, develops, and implements new solutions to integrate into existing or newly defined architecture.
• Provides support and works on multiple functions of intermediate to high complexity.
• Serves as SME for one or more technical solutions.
• Extensive experience with one or more scripting languages (PowerShell, Python, Bash, etc.)
• Investigate, triage, contain, and mitigate complex  cybersecurity alerts and incidents using various cyber security tools such as: EDR, SIEM and CASB.
• Perform threat hunting exercises by developing detection rules and analyzing cybersecurity data to discover complex activity not seen within the environment
• Conduct trending and correlation of multiple cyber intelligence sources for the purposes of indicator collection, shifts in TTPs, attribution and establishing countermeasures to increase cyber resiliency
• Demonstrated understanding of complex threat modeling techniques, in a cyber intelligence or cyber operations environmen

The job summary and responsibilities listed above are designed to indicate the general nature of the work performed within this job. They are not designed to contain or be interpreted as a comprehensive inventory of all job responsibilities required of employees assigned to this job. Employees may be required to perform other duties as assigned.

Education and Experience

• 4-5 years Experience Required
• Bachelor’s Degree in Computer Science, Information Security, Information Systems, or related field, or equivalent professional experience Required.
• Two or more relevant technical/professional security certifications (such as: COMPTIA Network+, Security+,
• SANS/GIAC, EC-Council, CISSP or vendor-specific) preferred.