Job Summary The Cybersecurity Engineer operates and supports the technical security infrastructure used to protect the organization's systems and data. This role requires working knowledge of information security practices and is responsible for responding to security alerts, events, incidents, and escalations that cannot be resolved by front-line analysts. The role analyzes, implements, and operationalizes security measures to strengthen the organization's security posture and response capabilities. It also monitors security infrastructure, maintains related documentation, collaborates with Mercyhealth staff, customers, vendors, and IT professionals to identify and remediate security issues, and supports regulatory, audit, and customer reporting requirements. Job Responsibilities Recommends, implements, supports and maintains cybersecurity systems and infrastructure across the enterprise. Provides technical leadership for cybersecurity and related solutions. Monitors, investigates and mitigates information security alerts, events and incidents generated throughout the cybersecurity solution stack. Collaborates with appropriate organizational staff to develop and implement remediation plans for identified security events. Conducts vulnerability scans and facilitates penetration testing; reviews results, develops prioritized mitigation plans and tracks remediation. Evaluates bug reports, exploit reports, and vendor, manufacturer, government and industry security notices; makes recommendations to leadership and tracks remediation. Performs or assists with security evaluations of proposed IT system implementations or modifications. Monitors and reports on capacity, operational performance, and operational readiness of the cybersecurity infrastructure. Uses a variety of software and hardware tools, including vendor-acquired and open-source tools, to assess security issues and provide ongoing security monitoring. Assists in fulfilling evidence requests for regulatory compliance audits, including SOC and HIPAA audits. Develops and maintains documentation of security infrastructure design and configuration. Participates in an on-call rotation or provides on-call support as assigned. Performs other related duties as assigned.

Job Requirements Education:

Bachelor's Degree preferred.

Required Experience :

2

• 5 years

Special Skills and Abilities:

Familiarity with industry standard control frameworks (e.g.

NIST CSF

) and HIPAA Security Rule requirements Public cloud infrastructure experience (e.g. Azure, AWS) Experience with

SIEM/SOAR/EDR

platforms

Licensure/Certification/Registration:

CISSP, GIAC, CompTIA Security+, or other applicable security certifications or accreditations are desirable.

Physical Requirements:

Activity Never Rarely Occasionally Frequently Constantly Physical Dexterity and Effort Bending/Stooping X Climbing X Keyboard Data Entry X Kneeling X Reaching X Repetitive Foot/Leg Movements X Repetitive Hand/Arm Movements X Running X Sitting X Squatting X Standing X Walking X Lifting/Carrying (Non-Patient) 0

• 25 lbs. X 25
• 75 lbs. X Over 75 lbs. X Lifting/Carrying (Patient) Less than 25 lbs. X 25
• 50 lbs. X 50
• 75 lbs. X 75
• 100 lbs. X Over 100 lbs. X Pushing/Pulling 0
• 25 lbs. X 25
• 75 lbs.

X Over 75 lbs. X Populations Served The age-specific populations with which the job incumbent interacts: No direct responsibility to treat or care for patients