Cybersecurity Engineer at Montefiore… · Yonkers

Summary: Montefiore Einstein Technology is a leading healthcare organization that focuses on improving health outcomes in underserved communities. The Cybersecurity Engineer is responsible for designing, implementing, and maintaining security controls to protect clinical systems and patient data while collaborating with various teams to ensure compliance with regulatory requirements. Responsibilities: - Perform assigned security engineering tasks under guidance - Escalate complex issues appropriately - Maintain security technologies across network, endpoint, identity, cloud, and logging domains - Perform hands-on troubleshooting of security tooling, integrations, and agent deployments - Maintain security controls in alignment with enterprise architecture standards and engineering best practices - Develop and maintain technical documentation, runbooks, and standard operating procedures - Automate security tasks using scripting and infrastructure-as-code where appropriate Required Qualifications: - Bachelor's degree or equivalent work experience - 1-3 years Fundamental understanding of cloud, network, email, and endpoint security - 1-3 years Foundational understanding of cybersecurity threats, attack vectors, and mitigation strategies - 1-3 years Strong analytical and problem-solving skills - Endpoint and workload protection (EDR/XDR, server and container security) - Cloud and hybrid security engineering (AWS, Azure, GCP) - Data protection technologies - Secure third-party and vendor integrations - Maintain secure connectivity between on-prem and cloud environments - Support regulatory compliance requirements in cloud environments - Change management and operational reliability - Certifications (Preferred): CompTIA Security+ (or equivalent foundational security certification) — obtained within 1 year - Cloud Security Certification (e.g., CCSP, AWS Security Specialty, or Azure Security Engineer Associate) — obtained within 18 months - GIAC Certifications (GSEC, GCED, GCIH, or GCIA) — obtained within 18 months Preferred Qualifications: - 1-3 years Ability to interpret logs and alerts - 1-3 years Ability to perform scripting (Python, PowerShell, Bash) - 1-3 years Excellent technical documentation skills - 1-3 years Strong verbal and written communication skills - 1-3 years Knowledge of NIST CSF and NIST 800-series standards Required Skills: Cloud security engineering, Network security, Email security, Endpoint security, EDR, XDR, Server security, Container security, Data protection technologies, Secure third-party integrations, Vendor integrations, On-prem to cloud connectivity, Regulatory compliance in cloud, Change management, Operational reliability, CompTIA Security+, CCSP, AWS Security Specialty, Azure Security Engineer Associate, GIAC Certifications, Log interpretation, Python scripting, PowerShell scripting, Bash scripting, NIST CSF, NIST 800-series standards