Senior Engineer, Security Automation

The Nebraska Medical Center•Omaha, NE

3d•Hybrid

About The Position

Serious Medicine is what we do. Being extraordinary is who we are. Every colleague plays a key role in upholding this promise to our patients and their families. Nebraska Medicine is seeking a Senior Engineer, Security Automation to help advance the enterprise security program through automation, modern security engineering, and scalable solutions that strengthen our cybersecurity posture. In this role, you’ll have the opportunity to lead initiatives across security automation, SOAR, ServiceNow integrations, IAM/PAM, vulnerability management, cloud security, security data pipelines, and enterprise incident response while helping modernize security operations and improve resilience. You’ll research and evaluate emerging technologies, design and deploy security solutions, and partner across the enterprise to reduce risk and strengthen our ability to detect, respond to, and prevent sophisticated threats. If you’re a security engineer who enjoys solving complex problems, automating what can be automated, and building secure solutions for the future, this is an opportunity to make a significant impact across a large and mission-driven healthcare environment. The Senior Engineer, Security Automation will work independently, identify information/cyber security strategies and solutions to ensure the enterprise maintains a robust information/cyber security posture. Research, evaluate, recommend, and test new security strategies and systems for incorporation into the enterprise strategic plan. Lead deployment of identified strategies. Identify network security policies and security plans for data, software applications, hardware, and computer installations. Lead enterprise incident response.

Requirements

Minimum of five years of information security management required with exposure to infrastructure and system security, security scanning and vulnerability management and remediation, server management or end user deuce security required.
Bachelor's degree in Information Assurance, Computer Science, or related field or equivalent combination of education/experience combined (one year of experience equals one year of education) required.
Proficiency in security technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection (EDR), SIEM, etc. required.
Proficiency with cloud security principles and technologies (e.g., AWS, Azure, GCP) required.
Proficiency with Advanced Threat Detections, Threat Hunting and digital forensics required
Strong understanding of networking protocols, encryption techniques, and secure coding practices required.

Nice To Haves

Information security management experience in a large academic healthcare center preferred.
HIPAA compliance management, GLBA compliance management or PCI compliance management preferred.
Master's degree or equivalent preferred.
CISM or CISSP preferred.

Responsibilities

Lead initiatives across security automation, SOAR, ServiceNow integrations, IAM/PAM, vulnerability management, cloud security, security data pipelines, and enterprise incident response
Modernize security operations and improve resilience
Research and evaluate emerging technologies
Design and deploy security solutions
Partner across the enterprise to reduce risk and strengthen our ability to detect, respond to, and prevent sophisticated threats
Identify information/cyber security strategies and solutions to ensure the enterprise maintains a robust information/cyber security posture
Research, evaluate, recommend, and test new security strategies and systems for incorporation into the enterprise strategic plan
Lead deployment of identified strategies
Identify network security policies and security plans for data, software applications, hardware, and computer installations
Lead enterprise incident response