Flexible Spending Accounts
Annual incentive plans
Matching gifts program
Education assistance through MyQuest for Education
Career advancement opportunities
and so much more!
Incident Leadership & Technical Response
Direct the end-to-end lifecycle of critical and high-severity cyber incidents from initial detection through post-incident reporting.
Coordinate cross-functional technical teams to isolate, contain, and eradicate active security threats, minimizing operational downtime and risk to patient care.
Lead the development and execution of strategic containment plans under high-pressure scenarios.
Forensic Analysis & Threat Intelligence
Oversee digital forensics, log analysis, and root-cause investigations across hybrid environments (cloud and on-premise systems).
Integrate active threat intelligence to anticipate, hunt for, and mitigate emerging healthcare-targeted exploits and advanced persistent threats (APTs).
Analyze malware behaviors and attack vectors to strengthen perimeter and internal defenses.
Regulatory Compliance & Process Optimization
Ensure all incident handling aligns with HIPAA, HITECH, and OCR data breach notification rules to maintain absolute compliance.
Author, test, and update incident response playbooks, tabletop exercises, and continuous improvement initiatives.
Conduct post-incident reviews (PIRs) to identify security gaps and track remediation actions across the enterprise.
Stakeholder Management
Translate complex technical findings into clear, actionable, and risk-based updates for executive leadership, legal counsel, and clinical operations.
Serve as the primary technical point of contact for third-party forensic firms, insurance providers, and law enforcement during major events.
Required Work Experience
Minimum 6+ years in dedicated cyber incident response (CSIRT/SOC) environments.
Industry Sector: At least 2 years of security experience directly within a healthcare or heavily regulated organization.
Technical Mastery: Deep knowledge of EDR tools, SIEM platforms, CNAPP tools, network forensics, cloud security, and enterprise architecture.
Framework Proficiency: Proven experience utilizing NIST SP 800-61, MITRE ATT&CK, and ISO 27001 frameworks.
Certifications: Active certification desired but not required (e.g., GCIH, GCFA, CISSP, CHFI, or CEH).
Communication: Exceptional verbal and written skills under high-pressure scenarios.
Travel (Required): up to 25% domestic; up to 25% international
English (Required)
Education
Bachelor’s degree in Cybersecurity, Computer Science, or an equivalent technical field. (Required)
Technical Training or Professional Licensing
Deep knowledge of EDR tools, SIEM platforms, CNAPP tools, network forensics, cloud security, and enterprise architecture. (Required)
#LI-RM1
