Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

The Senior Cybersecurity Engineer is responsible for designing, implementing, and maintaining robust security solutions across infrastructure, applications, and cloud environments. This role plays a key role in protecting the organization against evolving cyber threats while ensuring compliance with industry standards and internal security policies. The Senior Cybersecurity Engineer collaborates closely with cross functional teams, supports defined security program service levels, and provides mentorship and technical guidance to other Security Engineers.

This is a senior level role requiring a combination of demonstrated technical expertise, hands-on experience, and professional maturity. The ideal candidate has five years of IT experience in complex environments with a strong working knowledge of computer networking and platforms.

Key Responsibilities

• Design, implement, manage, and direct monitoring for the organization’s technical security architecture, processes, and systems
• Implement and manage end-to-end security solutions across on premise, cloud, and hybrid infrastructures and applications
• Plan, execute, and manage risk management and compliance frameworks, including NIST, CIS, STIGs, and HIPAA
• Perform vulnerability assessments, manage remediation workflows, and document associated risk
• Monitor security alerts and logs; lead incident detection and response and liaise with external service providers as needed
• Conduct threat modeling, threat hunting, and log analysis to identify anomalies and emerging risks
• Mentor junior engineers and provide technical leadership on security best practices
• Participate in an on-call rotation, including after-hours support, issue analysis, documentation, and escalation as required
• Maintain compliance with security policies, procedures, standards, and service level expectations

Technical Skills & Capabilities

• Demonstrated understanding of security controls, including firewalls, IDS/IPS, SIEM, EDR, IAM, and VPN technologies
• Cloud security strategy and configuration experience (e.g., AWS, Azure)
• Proven experience with vulnerability management, patching workflows, and compliance adherence
• Strong background in threat analysis, incident response, and log monitoring

Professional & Leadership Skills

• Strong leadership and mentoring capabilities for junior staff
• Excellent verbal and written communication skills for advisory, reporting, and documentation functions
• Analytical problem-solving skills with a detail oriented mindset
• Flexibility to work non‑business hours during deployments, incident response, or field maintenance activities

Required Minimum Knowledge, Skills, and Abilities (KSAs):

1. Education: Bachelor’s degree in a related field of study or equivalent work experience required.
2. License/Certifications: Professional certification in either technical security or within a relevant networking or platform technology required.
3. Experience: Five years of IT experience in complex environments and a working knowledge of computer networking and platforms required.

MaineHealth is committed to fostering a supportive, inclusive environment where care team members can thrive while making a meaningful impact in the communities we serve across Maine and New Hampshire. We offer competitive benefits including paid parental leave, flexible work options, student loan assistance, professional development opportunities, and well-being resources—so you can grow your career while feeling supported both personally and professionally.