Information Security Specialist/Engineer III (Cyber Defense) - Information Solutions

Medical University of South Carolina•Remote- South Carolina, SC

About The Position

The Information Security Specialist/Engineer III reports to the Cybersecurity Operations Manager and supports the organization’s business, technology, clinical, and cybersecurity missions by strengthening enterprise cyber defense capabilities. With general supervision, this role leads and continuously improves threat intelligence and analysis, vulnerability management, adversary emulation, incident response readiness, cybersecurity technology operations, detection engineering, and security awareness activities. The position analyzes government, industry, vendor, healthcare-sector, open-source, and internal intelligence; assesses organizational exposure using threat activity, vulnerability data, asset criticality, control effectiveness, and business impact; and partners with technical, clinical, operational, and business stakeholders to prioritize mitigation and risk reduction actions. The role designs, maintains, tunes, integrates, and improves cybersecurity tools, detections, dashboards, workflows, automation, reporting, and documentation to support asset visibility, vulnerability prioritization, alert fidelity, response coordination, and operational efficiency. The role also plans and supports authorized adversary emulation and purple team validation activities, coordinates incident triage and response, communicates cybersecurity risk and recommended actions to technical and non-technical audiences, develops awareness and education materials, mentors peers, leads projects, recommends process improvements, maintains high professional standards, and provides excellent customer service.

Requirements

Bachelor’s degree, or an associate’s degree and equivalent work experience.
Eight or more years of experience in cybersecurity, security operations, threat intelligence, vulnerability management, incident response, or related technical functions.
A role-relevant certification, such as CISSP, CASP+/SecurityX, CCSP, CISM, GCIA, GCIH, GCFA, GCFE, GPEN, or an equivalent cybersecurity certification.
Excellent interpersonal, analytical, written, and verbal communication skills.
Demonstrated ability to lead complex analysis and engineering work, improve security tools and workflows, validate detections, influence remediation decisions, mentor peers, and communicate risk to technical and business stakeholders.

Responsibilities

Lead and continuously improve threat intelligence and analysis, vulnerability management, adversary emulation, incident response readiness, cybersecurity technology operations, detection engineering, and security awareness activities.
Analyze government, industry, vendor, healthcare-sector, open-source, and internal intelligence.
Assess organizational exposure using threat activity, vulnerability data, asset criticality, control effectiveness, and business impact.
Partner with technical, clinical, operational, and business stakeholders to prioritize practical mitigation and risk reduction actions.
Design, maintain, tune, integrate, and improve cybersecurity tools, detections, dashboards, workflows, automation, reporting, and documentation.
Support reliable asset visibility, vulnerability prioritization, alert fidelity, response coordination, and operational efficiency.
Plan and support authorized adversary emulation and purple team validation activities.
Coordinate incident triage and response activities.
Communicate cybersecurity risk and recommended actions to technical and non-technical audiences.
Develop cybersecurity awareness and education materials.
Mentor peers and lead projects.
Recommend process improvements.
Maintain high professional standards and provide excellent customer service.