Information Security Engineer IS-Mod 80651

The Information Security Engineer independently implements administers and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture design controls aligned with business requirements and protect organizational systems and data.

Depending on the area of focus the Information Security Engineer may support a variety of application protection initiatives and operations related to Vulnerability and Exposure Management and Secure Cloud & Software Delivery. Examples of such activities include the following:

• Configure and operate vulnerability scanning tools; troubleshooting anomalies.
• Implement and maintain integrations between tools supported within and outside the department to enable automated workflows and reporting.
• Coordinate exception management workflows related to vulnerability and application protection policies.
• Coordinate and oversee Attack Surface Management activities including the use of advanced tooling for digital asset discovery and protection.
• Partner with cloud engineering teams to embed security within the container lifecycle support container vulnerability management and integrate security controls into cloud hosting platforms.
• Implement and support software supply chain security capabilities.
• Administer Infrastructure as Code (IaC) and Policy as Code (PaC) tools which enforce logic-based policy decisions.
  

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Bachelors degree and four (4) years experience in the information security field required OR Associates degree and 6 years experience in the information security field. Pertinent fields of study include Computer Science Information Systems Engineering or related field.

Masters Degree in applicable field and two (2) years experience preferred. Pertinent fields of study include Computer Science Information Systems Engineering or related field.

One or more of the following certifications (or equivalent) are required at time of hire or must be obtained within two years of hire: CISSP CISM GSEC OSCP.

Preferred Qualifications

• Systems administration systems engineering or security experience across Windows Linux network cloud endpoint or containerized environments.
• Experience supporting or troubleshooting security or technology platforms including vulnerability management or application security tools.
• Familiarity with vulnerability and exposure management containers CI/CD software supply chain security and cloud security concepts.
• Familiarity with scripting or automation using PowerShell Python Bash or similar technologies with strong troubleshooting and collaboration skills.