Information Security Engineer
About The Position
The Information Security Engineer is a front-line defender in the organization’s cybersecurity operations, responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents. The role performs initial triage, containment, eradication, and recovery according to established playbooks and incident response policies. It maintains detailed incident, investigation, and remediation records and prepares summary reports for technical and non-technical audiences. The engineer collaborates with IT, compliance, risk management, and other departments to support integrated security measures; participates in post-incident reviews and lessons-learned sessions to improve response processes and strengthen security; and provides input to security awareness initiatives. The role independently implements, administers, and supports security solutions across enterprise systems, applying specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data. This vacancy is not eligible for sponsorship or visa transfers. Mayo Clinic does not participate in the F-1 STEM OPT extension program.
Requirements
- Bachelor's degree and four years of experience in the information security field, or an associate degree and six years of experience in the information security field.
- Pertinent fields of study include Computer Science, Information Systems, Engineering, or a related field.
- One or more of the following certifications, or equivalent, is required at hire or must be obtained within two years of hire: CISSP, CISM, GSEC, or OSCP.
Nice To Haves
- A master's degree in an applicable field and two years of experience; pertinent fields include Computer Science, Information Systems, Engineering, or a related field.
Responsibilities
- Monitor, detect, analyze, and respond to cybersecurity incidents.
- Perform initial incident triage, containment, eradication, and recovery according to established playbooks and incident response policies.
- Maintain detailed records of security incidents, investigations, and remediation steps.
- Prepare incident summary reports for technical and non-technical audiences.
- Collaborate with IT, compliance, risk management, and other departments to address integrated security measures.
- Participate in post-incident reviews and lessons-learned sessions to refine incident response processes and strengthen security.
- Provide input to security awareness initiatives and contribute to a culture of security.
- Independently implement, administer, and support security solutions across enterprise systems.
- Analyze security posture and design controls aligned with business requirements to protect organizational systems and data.
Benefits
- Medical plan options
- Dental coverage through Delta Dental or a reimbursement account for flexible coverage
- Vision plan with a national network
- HSA and FSA pre-tax savings for eligible expenses
- Competitive retirement package
- Continuing education and advancement opportunities
- Competitive compensation and comprehensive benefit plans
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
