Cyber Security Engineer

University Medical Center of Southern Nevada•Las Vegas, NV

1d•Onsite

About The Position

Plans and coordinates security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Assists with security design, consultation, and technology implementations. As an academic medical center with a rich history of providing life-saving treatment in Southern Nevada, UMC serves as the anchor hospital of the Las Vegas Medical District, offering Nevada’s highest level of care to promote successful medical outcomes for patients. UMC is a Level I Trauma Center, home of the ONLY Verified Burn Center, and Transplant Center. In 2026, we became the FIRST and ONLY Magnet®-Recognized hospital in the state, reflecting UMC's nursing professionalism, teamwork, and superiority in patient care.

Requirements

Equivalent to a Bachelor’s degree in Cybersecurity, Management Information Systems, or a closely related field.
Two (2) years of experience in network, systems, or security role, with at least one (1) of the two (2) years in recent dedicated enterprise security role performing hands-on security practices and duties.
ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Associate CISSP, Global Information Assurance Security Essentials Certification (GSEC), or other industry-recognized equivalent certification in the disciplines of cyber security.
At least 2 or more years of Advanced Detection & Response (MDR / XDR) experience.
Hands-on experience with Managed Detection and Response (MDR) solutions, such as Sophos MDR.
At least 2 or more years of SIEM, UEBA & Advanced Analytics experience.
Practical experience with SIEM and User and Entity Behavior Analytics platforms, preferably Exabeam.
At least 2 or more years of Cloud Security & SSE (Secure Service Edge) experience.
Hands-on experience with cloud security platforms such as Netskope or equivalent Secure Service Edge solutions.
At least 2 or more years of Email Security & Threat Protection experience.
Experience managing and optimizing email security platforms such as Mimecast.
At least 2 or more years of Governance, Risk, and Compliance (GRC) experience.
Strong understanding of Governance, Risk, and Compliance principles, including familiarity with frameworks such as NIST, ISO 27001, and HIPAA.
Knowledge of secure system engineering.
Knowledge of root cause analysis procedures and practices.
Knowledge of cyber security emerging threats and risks.
Knowledge of system forensics and evidence preservation.
Knowledge of cloud security practices.
Knowledge of IT security governance and compliance.
Knowledge of application of cyber security technologies.
Knowledge of department and hospital safety practice and procedures.
Knowledge of patient rights.
Knowledge of age specific patient care practices.
Knowledge of infection control policies and practices.
Knowledge of handling, storage, use and disposal of hazardous materials.
Knowledge of department and hospital emergency response policies and procedures.
Skill in secure system engineering.
Skill in complex problem solving.
Skill in identifying and remediating cyber security threats and risks.
Skill in legal hold, data preservation and computer forensic response.
Skill in compliance and governance activities.
Skill in scripting.
Skill in establishing and maintaining effective working relationships with all personnel contacted in the course of duties.
Skill in communicating effectively in oral and written form.
Skill in using computers and related software applications.
Skill in communicating with a wide variety of people from diverse socio-economic and ethnic backgrounds.
Skill in establishing and maintaining effective working relationships with all personnel contacted in the course of duties.
Skill in efficient, effective and safe use of equipment.

Responsibilities

Plans and coordinates security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities.
Assists with security design, consultation, and technology implementations.
Active monitoring, alert investigation, and threat hunting using MDR solutions.
Tune detection rules, reduce false positives, and respond to advanced threats across endpoint, network, and cloud environments using XDR capabilities.
Develop correlation rules, analyze anomalous behavior, and generate actionable insights using SIEM and UEBA platforms.
Build dashboards and translate complex data into meaningful security intelligence for both technical teams and leadership.
Implement controls for SaaS applications, enforce data protection policies, and secure remote user access through capabilities like CASB, secure web gateways, and data loss prevention.
Configure anti-phishing protections, analyze email-based threats, and support phishing awareness initiatives.
Conduct risk assessments, support audits, maintain policies, and effectively communicate risk posture and remediation strategies to business stakeholders.