IT Security Engineer

IT Security Engineer DoveLewis Veterinary Emergency & Specialty Hospital | Portland, OR DoveLewis Veterinary Emergency and Specialty Hospital is seeking an IT Security Engineer to join our IT Department. This position, reporting to the Director of IT, is responsible for the design, implementation, monitoring, and continuous improvement of the organization’s cybersecurity program. The IT Security Engineer protects information systems, networks, cloud environments, applications, and endpoint devices from cyber threats while supporting compliance, risk management, incident response, and security best practices across the organization. Salary range is $100,000-160,000 annually depending on education, certification, and experience. What you'll do: Monitor security systems and investigate alerts to identify, analyze, and respond to cybersecurity threats and incidents Conduct threat modeling, risk assessments, vulnerability assessments, and security reviews of systems, networks, and applications Manage security technologies including firewalls, IDS/IPS, endpoint protection, SIEM, vulnerability management, and related security tools Coordinate vulnerability remediation, patch management, and system hardening activities following industry best practices and CIS benchmarks Develop, implement, and maintain security policies, standards, procedures, and technical documentation Administer Identity and Access Management (IAM) controls and support Zero Trust security initiatives Support cloud security initiatives and secure architecture design across on-premises and cloud environments Develop and maintain incident response, disaster recovery, and business continuity processes Conduct security assessments of vendors, applications, and technology solutions and provide recommendations to mitigate risk Develop scripts and automation solutions to improve security monitoring, reporting, and operational efficiency Support compliance efforts related to cybersecurity insurance requirements, PCI-DSS, SOC 2, and industry security standards Maintain cybersecurity metrics and provide reporting on risks, vulnerabilities, incidents, and overall security posture Collaborate with IT staff, vendors, and business leaders to implement effective security solutions Conduct security awareness training and promote cybersecurity best practices throughout the organization Research emerging threats and technologies and recommend improvements to strengthen the organization’s security posture What you can look forward to at DoveLewis: Working alongside highly skilled veterinary professionals in a specialty and emergency teaching hospital. Exposure to a wide variety of specialty services including Emergency & Critical Care, Neurology, Surgery, Cardiology, Internal Medicine, Oncology, Exotics, Diagnostic Imaging, and more. Continuing education opportunities and professional growth in veterinary medicine. The opportunity to help shape a high-touch referral experience for patients and referring veterinary partners. A collaborative environment focused on teamwork, compassion, and high-quality medicine. Benefits + Compensation: Equitable health benefits including medical, dental, vision, and $0 mental health copays. 403(b) retirement plan with company match and access to financial advising. Student debt repayment assistance for all employees. Paid vacation, sick time, holiday pay, and bereavement leave (including time off for pet family members). Continuing education opportunities and career development support. A meaningful opportunity to work for a mission-driven nonprofit hospital dedicated to advancing veterinary medicine and supporting pets and people. What are we looking for in a candidate? Experience + Education: Associate’s or bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field 5+ years of experience in information technology, cybersecurity, or a related field 3+ years of experience in an information security, security engineering, or cybersecurity analyst role Experience with enterprise security technologies, incident response, vulnerability management, and security monitoring Industry certifications such as Security+, CEH, CISSP, GSEC, OSCP, CCSP, SC-200, AZ-500, or equivalent certifications preferred Any suitable combination of experience and education will substitute Knowledge, Skills + Abilities: Strong knowledge of cybersecurity principles, risk management, incident response, threat detection, and vulnerability management Experience with security technologies including firewalls, IDS/IPS, SIEM, EDR, vulnerability scanning, and endpoint protection platforms Knowledge of network security, TCP/IP, DNS, VPNs, TLS/SSL, PKI, and secure architecture principles Experience securing Windows, Linux, macOS, Microsoft 365, and cloud environments Working knowledge of cybersecurity frameworks such as NIST CSF, CIS Controls, and Zero Trust principles Experience with security tools such as Rapid7, Nessus, Qualys, SentinelOne, Microsoft Defender, Nmap, Burp Suite, Metasploit, and Wireshark Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages Knowledge of compliance and security requirements including cybersecurity insurance controls, PCI-DSS, and HIPAA Strong analytical, troubleshooting, and problem-solving skills Excellent communication, documentation, and presentation skills Ability to prioritize multiple tasks and work effectively in a fast-paced environment Ability to communicate technical risks and recommendations to technical and non-technical audiences The Pacific Northwest Advantage: With the ocean an hour away to the west and mountains an hour away to the east, Portland offers endless opportunities for outdoor enthusiasts and animal lovers alike. Enjoy hiking, local coffee, farmers markets, incredible food, and access to one of the country’s most pet-friendly cities. How to apply: To be considered, you must complete the online application and upload a resume. Resumes received without a completed online application will not be considered. DoveLewis is an equal opportunity employer dedicated to workforce diversity and a drug-free workplace. Pre-employment background screening and drug testing for illegal substances is required.