Senior Information Security Engineer - IS Mod

Mayo Clinic • Rochester, MN

7d • $134,347 - $194,750 • Hybrid

About The Position

This Senior Information Security Engineer serves as the dedicated security design and oversight lead for Enterprise Network Segmentation within the Information Protection – Network Security (IP-NS) team, ensuring segmentation controls are architected to appropriately align with the risk profile of the assets they protect across a large, regulated healthcare environment. A strong background in network segmentation is required, including proven experience designing risk-based segmentation strategies and defining policy intent for high-risk assets. This role is a critical technical authority who partners with Product Owners, the Network Security Architect, network engineering teams, and enterprise risk stakeholders to translate asset criticality and threat modeling into control requirements. It will also validate implemented policy meets design intent; provide continued oversight of segmentation controls and drift; contribute to Tier 3 incident response; and support executive reporting on risk-reduction outcomes aligned to security control objectives. Familiarity with security monitoring, incident response, vulnerability management, and security automation is highly desirable. Ability to operate effectively in a hybrid work environment, including participation in on-site work-related events, team collaboration sessions, and key organizational activities as required. This is a hybrid position and the incumbent must live within 100 miles of a Mayo Clinic campus. Mayo Clinic will not sponsor or transfer visas for this position including F1 OPT STEM.

Requirements

• Bachelor’s degree in applicable field plus five (5) years of relevant experience.
• Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, engineering, or a related field.
• One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP.

Nice To Haves

• Familiarity with security monitoring, incident response, vulnerability management, and security automation is highly desirable.
• Master’s degree in applicable field plus four (4) years of relevant experience preferred.

Responsibilities

• Serve as the dedicated security design and oversight lead for Enterprise Network Segmentation.
• Ensure segmentation controls are architected to appropriately align with the risk profile of the assets they protect.
• Design risk-based segmentation strategies.
• Define policy intent for high-risk assets.
• Translate asset criticality and threat modeling into control requirements.
• Validate implemented policy meets design intent.
• Provide continued oversight of segmentation controls and drift.
• Contribute to Tier 3 incident response.
• Support executive reporting on risk-reduction outcomes aligned to security control objectives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior