Information Security Engineer - IS-Mod - 80651

Mayo Clinic•Rochester, MN

13h•$102,336 - $143,270

About The Position

The Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data. Depending on the area of focus, the Information Security Engineer may support a variety of application protection initiatives and operations related to Vulnerability and Exposure Management and Secure Cloud & Software Delivery. Examples of such activities include the following: Configure and operate vulnerability scanning tools; troubleshooting anomalies. Implement and maintain integrations between tools supported within and outside the department to enable automated workflows and reporting. Coordinate exception management workflows related to vulnerability and application protection policies. Coordinate and oversee Attack Surface Management activities, including the use of advanced tooling for digital asset discovery and protection. Partner with cloud engineering teams to embed security within the container lifecycle, support container vulnerability management, and integrate security controls into cloud hosting platforms. Implement and support software supply chain security capabilities. Administer Infrastructure as Code (IaC) and Policy as Code (PaC) tools, which enforce logic-based policy decisions. This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Requirements

Bachelor's degree and four (4) years experience in the information security field required, OR Associates degree and 6 years' experience in the information security field.
Pertinent fields of study include Computer Science, Information Systems, Engineering or related field.
One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP, CISM, GSEC, OSCP.

Nice To Haves

Master's Degree in applicable field and two (2) years experience preferred.
Systems administration, systems engineering, or security experience across Windows, Linux, network, cloud, endpoint, or containerized environments.
Experience supporting or troubleshooting security or technology platforms, including vulnerability management or application security tools.
Familiarity with vulnerability and exposure management, containers, CI/CD, software supply chain security, and cloud security concepts.
Familiarity with scripting or automation using PowerShell, Python, Bash, or similar technologies, with strong troubleshooting and collaboration skills.

Responsibilities

Configure and operate vulnerability scanning tools; troubleshooting anomalies.
Implement and maintain integrations between tools supported within and outside the department to enable automated workflows and reporting.
Coordinate exception management workflows related to vulnerability and application protection policies.
Coordinate and oversee Attack Surface Management activities, including the use of advanced tooling for digital discovery and protection.
Partner with cloud engineering teams to embed security within the container lifecycle, support container vulnerability management, and integrate security controls into cloud hosting platforms.
Implement and support software supply chain security capabilities.
Administer Infrastructure as Code (IaC) and Policy as Code (PaC) tools, which enforce logic-based policy decisions.