HTM Information Security Engineer

Mayo Clinic•Rochester, MN

1d•$102,336 - $143,270•Hybrid

About The Position

The HTM Cyber team is seeking a technically strong Information Security Engineer to support the team’s medical/facility device cybersecurity operations across medical, research, laboratory, and facilities environments. Unlike a traditional IT security function, this role is focused on identifying, assessing, and mitigating cybersecurity risks and vulnerabilities directly on connected medical and operational technology equipment. This position will work closely with the Senior Engineer and provide practical technical support across core operational areas, including Associate Engineer support, Security Lifecycle Profiles, secure baseline remediation, vulnerability management, remote access review, vulnerability scanning, metrics, and process improvement. The ideal candidate brings hands-on biomedical equipment or clinical engineering experience, a solid understanding of IT networking, and a working knowledge of cybersecurity principles. This individual should be able to bridge HTM field operations, vendor support, IT, and Information Security by helping troubleshoot connected device issues, translate security requirements into practical device-level actions, document repeatable remediation processes, and support risk-based decisions that protect patient care while reducing risk across complex healthcare technology environments. The Information Security Engineer position requires an information security professional who is results oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments. This position is responsible for the research, technical analysis, configuration, and administration of systems and procedures to ensure the protection of information processed, stored or transmitted in Mayo Clinic's computing environments. This position assists with the security design, consultation, and technology governance oversight for various projects and initiatives. The incumbent also assists system users relative to information systems security matters and undertakes complex projects requiring additional specialized technical knowledge. This position acts as information security liaison to various business units and the information technology department. This position receives general supervision and guidance from Information Security Directors and Senior Information Security Engineers.

Requirements

Hands-on biomedical equipment or clinical engineering experience.
Solid understanding of IT networking.
Working knowledge of cybersecurity principles.
Results oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments.

Responsibilities

Identifying, assessing, and mitigating cybersecurity risks and vulnerabilities directly on connected medical and operational technology equipment.
Provide practical technical support across core operational areas, including Associate Engineer support, Security Lifecycle Profiles, secure baseline remediation, vulnerability management, remote access review, vulnerability scanning, metrics, and process improvement.
Troubleshoot connected device issues.
Translate security requirements into practical device-level actions.
Document repeatable remediation processes.
Support risk-based decisions that protect patient care while reducing risk across complex healthcare technology environments.
Research, technical analysis, configuration, and administration of systems and procedures to ensure the protection of information processed, stored or transmitted in Mayo Clinic's computing environments.
Assist with the security design, consultation, and technology governance oversight for various projects and initiatives.
Assist system users relative to information systems security matters.
Undertake complex projects requiring additional specialized technical knowledge.
Act as information security liaison to various business units and the information technology department.