Information Security Engineer

Information Security Engineer PMO / OPERATIONS - 100.8732 (Billings Clinic Main Campus) req12419 Shift: Day Employment Status: Full-Time (.75 or greater) Hours per Pay Period: 1.00 = 80 hours every two weeks (Exempt) Starting Wage DOE: $45.11 - $56.38 The Information Security Engineer is a hands-on technical role within the Information Security team responsible for implementing, operating, and maintaining security controls that protect the organization's enterprise and cloud environments. Working under the direction of the Information Security leadership and architecture teams, this role focuses on the day-to-day engineering, configuration, monitoring, and optimization of security technologies across assigned domains. Assignments may span one or more areas including - but not limited to - detection engineering, cloud security, privileged access management, endpoint security, application control, vulnerability management, identity and access management, or network security. The Information Security Engineer works collaboratively with IT operations, infrastructure, clinical applications, and security operations teams to reduce cyber risk and support the organization's security strategy across a complex, multi-site healthcare environment. Essential Job Functions Implement, configure, and maintain security technologies and controls as directed by the security architecture and leadership teams. Perform ongoing administration, tuning, and optimization of assigned security platforms and tools to ensure effective operation and alignment with organizational security standards. Develop and maintain documentation of security configurations, standard operating procedures, and operational runbooks. Support security incident response activities by providing technical analysis, containment support, and post-incident remediation within assigned areas of responsibility. Execute changes to security systems following established change management processes, including testing, validation, and rollback planning. Collaborate with IT operations, infrastructure, and application teams to integrate security controls into existing and new systems. Assist in the evaluation, testing, and deployment of new security tools and technologies. Contribute to the development and maintenance of security policies, standards, and procedures as directed. Participate in vulnerability management activities including scanning, analysis, and coordination of remediation efforts. Provide technical support and knowledge sharing to IT staff and other stakeholders on security tools and processes. Research emerging threats, vulnerabilities, and security technologies to recommend improvements within assigned areas. Supports and models behaviors consistent with Billings Clinic's mission, vision, values, code of business conduct and service expectations. Meets all mandatory organizational and departmental requirements. Maintains competency in all organizational, departmental and outside agency standards as it relates to the environment, employee, patient safety or job performance. Performs all other duties as assigned or as needed to meet the needs of the department/organization. Minimum Qualifications Education Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Systems, or a related field required. Experience Minimum three (3) years of experience in information security, cybersecurity, or a related technical role. Hands-on experience implementing, configuring, or administering security tools and technologies. Experience working in a healthcare or similarly regulated environment preferred. Certifications and Licenses One or more information security, cybersecurity, cloud security, or vendor-specific certifications preferred. Preferred certifications may include, but are not limited to: CompTIA Security+ or equivalent foundational cybersecurity certification. GIAC certification relevant to assigned responsibilities, such as GSEC, GCIH, GCIA, or similar. Microsoft security certification, such as Microsoft Certified: Security, Compliance, and Identity Fundamentals, Security Operations Analyst Associate, or similar. Cloud or vendor-specific certification relevant to assigned technologies, such as CyberArk, Oracle Cloud, Microsoft Azure, Palo Alto Networks, or similar. CISSP, CCSP, or equivalent advanced cybersecurity certification preferred for advanced assignments or progression. A valid driver's license may be required for positions that require travel between Logan Health, Billings Clinic, affiliate, regional, or partner locations. Must be able to meet organizational requirements for driving on behalf of the organization, when applicable. Billings Clinic is Montana's largest health system serving Montana, Wyoming and the western Dakotas. A not-for-profit organization led by a physician CEO, the health system is governed by a board of community members, nurses and physicians. Billings Clinic includes an integrated multi-specialty group practice, tertiary care hospital and trauma center, based in Billings, Montana. Learn more at Billings Clinic is committed to being an inclusive and welcoming employer, that strives to be kind, safe, and courageous in all we do. As an equal opportunity employer, our policies and processes are designed to achieve fair and equitable treatment of all employees and job applicants. All employees and job applicants will be provided the same treatment in all aspects of the employment relationship, regardless of race, color, religion, sex, gender identity, sexual orientation, pregnancy, marital status, national origin, age, genetic information, military status, and/or disability. To ensure we provide an accessible candidate experience for prospective employees, please let us know if you need any accommodations during the recruitment process. #J-18808-Ljbffr US Diversity Job Search