Cyber Security Engineer

Position Summary

Employer-paid pension plan (Nevada PERS) competitive salary & benefits package. This position requires being onsite 5 days per week and is NOT a remote position.

As an academic medical center with a rich history of providing life-saving treatment in Southern Nevada, UMC serves as the anchor hospital of the Las Vegas Medical District, offering Nevada's highest level of care to promote successful medical outcomes for patients.

UMC is a Level I Trauma Center, home of the ONLY Verified Burn Center, and Transplant Center. In 2026, we became the FIRST and ONLY Magnet®-Recognized hospital in the state, reflecting UMC's nursing professionalism, teamwork, and superiority in patient care.

Job Requirement

Education/Experience: Equivalent to a Bachelor's degree in Cybersecurity, Management Information Systems, or a closely related field and two (2) years of experience in network, systems, or security role, with at least one (1) of the two (2) years in recent dedicated enterprise security role performing hands-on security practices and duties. Licensing/Certification Requirements: ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Associate CISSP, Global Information Assurance Security Essentials Certification (GSEC), or other industry-recognized equivalent certification in the disciplines of cyber security.

Additional Position Requirements

Candidate's must have the following experience to be considered:

• At least 2 or more years of Advanced Detection & Response (MDR / XDR) experience.
• The candidate must have hands-on experience with Managed Detection and Response (MDR) solutions, such as Sophos MDR, including active monitoring, alert investigation, and threat hunting. This role requires the ability to tune detection rules, reduce false positives, and respond to advanced threats across endpoint, network, and cloud environments using XDR capabilities.
• At least 2 or more years of SIEM, UEBA & Advanced Analytics experience.
• The ideal candidate will have practical experience with SIEM and User and Entity Behavior Analytics platforms, preferably Exabeam, with the ability to develop correlation rules, analyze anomalous behavior, and generate actionable insights. Experience in building dashboards and translating complex data into meaningful security intelligence for both technical teams and leadership is essential.
• At least 2 or more years of Cloud Security & SSE (Secure Service Edge) experience.
• This position requires hands-on experience with cloud security platforms such as Netskope or equivalent Secure Service Edge solutions. The candidate should be skilled in implementing controls for SaaS applications, enforcing data protection policies, and securing remote user access through capabilities like CASB, secure web gateways, and data loss prevention.
• At least 2 or more years of Email Security & Threat Protection experience.
• The candidate must have experience managing and optimizing email security platforms such as Mimecast. Responsibilities include configuring anti-phishing protections, analyzing email-based threats, and supporting phishing awareness initiatives to reduce organizational risk from social engineering attacks.
• At least 2 or more years of Governance, Risk, and Compliance (GRC) experience.
• A strong understanding of Governance, Risk, and Compliance principles is required, including familiarity with frameworks such as NIST, ISO 27001, and HIPAA. The role involves conducting risk assessments, supporting audits, maintaining policies, and effectively communicating risk posture and remediation strategies to business stakeholders.

Knowledge, Skills, Abilities, and Physical Requirements

Knowledge of: Secure system engineering; root cause analysis procedures and practices; cyber security emerging threats and risks; system forensics and evidence preservation; cloud security practices; IT security governance and compliance; application of cyber security technologies; department and hospital safety practice and procedures; patient rights; age specific patient care practices; infection control policies and practices; handling, storage, use and disposal of hazardous materials; department and hospital emergency response policies and procedures. Skill in: Secure system engineering; complex problem solving; identifying and remediating cyber security threats and risks; legal hold; data preservation and computer forensic response; compliance and governance activities; scripting; establishing and maintaining effective working relationships with all personnel contacted in the course of duties; communicating effectively in oral and written form; using computers and related software applications; communicating with a wide variety of people from diverse socio-economic and ethnic backgrounds; establishing and maintaining effective working relationships with all personnel contacted in the course of duties; efficient, effective and safe use of equipment. Physical Requirements and Working Conditions: Mobility to work in a typical office setting and use standard office equipment, stamina to remain seated and maintain concentration for extended periods of time, vision to read printed materials and a computer screen, and hearing and speech to communicate effectively in person and over the telephone. Strength and agility to exert up to 20 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this classification.