Senior Cyber Security Engineer

Senior Cybersecurity EngineerThe Senior Cybersecurity Engineer is responsible for protecting the information systems, digital assets, and technology infrastructure of Howard University Hospital. This position designs, implements, and maintains advanced cybersecurity solutions that safeguard patient data, clinical systems, and enterprise applications.Working across on-premises, hybrid, and cloud environments, the Senior Cybersecurity Engineer helps ensure the hospital's technology environment remains secure, compliant, and resilient against emerging threats. This role provides both hands-on technical expertise and strategic leadership in support of cybersecurity maturity, incident response, risk management, and continuous improvement of security controls.What You'll DoSecurity Operations & Incident ResponseMonitor, analyze, and respond to security alerts, incidents, and anomalies across hospital systems.Conduct vulnerability assessments, penetration testing, and threat-hunting activities to identify and mitigate risks.Investigate and document security incidents, perform root cause analysis, and recommend remediation actions.Utilize SIEM, EDR, and IDS/IPS platforms such as CrowdStrike and Microsoft Sentinel to strengthen continuous monitoring.Security Engineering & ArchitectureDesign, implement, and manage enterprise cybersecurity controls, including firewalls, NAC, DLP, CASB, and endpoint protection systems.Support secure configuration management using CIS Benchmarks and STIGs.Implement and manage identity and access management, multifactor authentication, and privileged access controls.Integrate cybersecurity practices into DevOps processes and CI/CD pipelines.Support the adoption and enforcement of Zero Trust Architecture principles across hybrid and cloud environments.Governance, Risk, and ComplianceEnsure compliance with cybersecurity frameworks and regulatory requirements, including HIPAA, NIST 800-53, ISO/IEC 27001, PCI DSS, and GDPR.Contribute to the development and maintenance of security policies, procedures, and documentation.Support internal and external security audits, risk assessments, and compliance reviews.Participate in disaster recovery and business continuity planning activities.Collaboration, Training, and AwarenessWork collaboratively with IT, Compliance, and Clinical Operations to embed security throughout technology operations.Provide mentorship and technical leadership to IT personnel and cybersecurity staff.Develop and deliver user training on secure computing, phishing prevention, and data protection best practices.Communicate complex technical concepts to diverse audiences, promoting security awareness and shared accountability.Required QualificationsEducationBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field required.Master's degree in Business Administration, Cybersecurity, or related discipline preferred.ExperienceMinimum 7–10 years of progressive experience in information security, with at least 5 years in a security engineering role.Demonstrated experience securing hybrid infrastructures, including on-premises systems and cloud environments such as Azure, AWS, or GCP.Proven expertise with enterprise tools such as Microsoft Defender Suite, Cisco ISE, CrowdStrike Falcon, and Azure Sentinel.Proficiency in scripting languages such as PowerShell or Python for automation and threat analysis.Strong background in encryption, PKI, IAM, SSO, VPNs, and secure system design.Experience implementing Zero Trust Architecture and DevSecOps practices.Preferred CertificationsCISSP (Certified Information Systems Security Professional)CISM (Certified Information Security Manager)CCSP (Certified Cloud Security Professional)AWS Certified Security – SpecialtyMicrosoft Certified: Azure Security Engineer AssociateSABSA or TOGAF preferredAdditional RequirementsStrong written and verbal communication skills.Ability to manage multiple priorities and work effectively in a fast-paced, high-stakes healthcare environment.High level of integrity and commitment to protecting sensitive information and hospital assets.About Howard University HospitalHoward University Hospital is one of the nation's leading academic medical centers and the primary teaching hospital for the Howard University College of Medicine. Located in Washington, DC, the hospital is dedicated to excellence in patient care, education, and research.As a mission-driven healthcare organization, Howard University Hospital relies on secure, resilient, and high-performing technology systems to support patient care, clinical operations, and enterprise services. The Enterprise Technology Services team plays a critical role in advancing that mission.What We OfferMeaningful work in support of a mission-driven academic medical centerOpportunities to work with advanced enterprise and cloud-based technologiesA collaborative environment focused on innovation, service, and operational excellenceProfessional growth and development opportunitiesComprehensive benefits packagePosition DetailsDepartment: Enterprise Technology ServicesReports To: Senior Director of CybersecurityLocation: Howard University Hospital – Washington, DCStatus: Full-TimePay + ScheduleThe anticipated salary range for this position is $145,000–$165,000 annually, commensurate with experience and qualifications.Compliance StatementsCulture of CareHoward University Hospital supports a Just Culture that promotes accountability, learning, and patient safety.Equal Opportunity EmployerHoward University Hospital is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants and do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other status protected by applicable law.Reasonable AccommodationHoward University Hospital is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and applicable state and local laws. If you require an accommodation during the application or interview process, please contact the Human Resources Department at View email address on click.appcast.io TransparencySalary ranges listed in job postings reflect the expected compensation range for the position and are provided in accordance with applicable pay transparency laws. Final compensation is determined based on experience, education, internal equity, and other relevant factors.DisclaimerThe above statements describe the general nature and level of work performed. They are not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position.