Security Engineer / Information Technology

Omaha Children's Hospital • United States, United States • 1d ago

At Children's, the region's only full-service pediatric healthcare center, our people make us the very best for kids. Come cultivate your passion, purpose and professional development in an environment of excellence and inclusion, where team members are supported and deeply valued. Opportunities for career growth abound as we grow our services and spaces, including the cutting-edge Hubbard Center for Children. Join our highly engaged, caring team-and join us in providing brighter, healthier tomorrows for the children we serve.

Children's is committed to diversity and inclusion. We are an equal opportunity employer including veterans and people with disabilities.

A Brief Overview

The Security Engineer at Children's Nebraska plays a critical role in safeguarding the confidentiality, integrity, and availability of patient data, clinical systems, and hospital infrastructure. This position is responsible for designing, implementing, and maintaining security controls across a complex healthcare environment while ensuring compliance with HIPAA, HITECH, and other applicable regulatory frameworks.

Essential Functions

System Security Engineering:

Design, deploy, and maintain security infrastructure including firewalls, IDS/IPS, SIEM, endpoint protection, and identity management systems

Architect and implement zero-trust network segmentation

Evaluate, recommend, and integrate new security technologies that align with healthcare operational requirements

Collaborate with IT and clinical teams to embed security into the design of new systems, applications, and medical device integrations.

Configure and manage Microsoft Purview compliance solutions including Data Loss Prevention (DLP), Information Protection sensitivity labels, and Insider Risk Management policies to safeguard PHI and PII

Administer Entra ID (Azure AD) security controls including Conditional Access policies, Privileged Identity Management (PIM), Identity Protection risk policies, and Multi-Factor Authentication (MFA) enforcement

Monitor and harden Exchange Online, SharePoint Online, OneDrive, and Teams environments against phishing, data exfiltration, and unauthorized sharing threats

Review and approved endpoint compliance policies, mobile device management (MDM), and mobile application management (MAM) across hospital-issued and BYOD devices

Conduct regular review of M365 audit logs, sign-in logs, and unified audit log (UAL) for anomalous activity and policy violations

Vulnerability Management, Threat Detection & Incident Response

Monitor security events and alerts using SIEM and other security tools; investigate and triage potential security incidents

Lead and participate in incident response activities including containment, eradication, recovery, and post-incident review

Conduct threat hunting exercises to proactively identify indicators of compromise within the environment

Develop and refine detection rules, use cases, and playbooks tailored to healthcare threat landscapes

Perform regular vulnerability assessments and coordinate and lead penetration testing across network, application, and medical device environments

Prioritize and track remediation of identified vulnerabilities in partnership with asset owners and IT operations

Maintain awareness of emerging threats, CVEs, and healthcare-specific security advisories (e.g., HHS HC3, FBI alerts)

System Security Administration:

Researches and writes security "effective practices" as "living documents" which are updated as the environment changes. This role includes Policy Implementation

Collaborates with Information Security Team to create policies, procedures and best practices

Champion a culture of security consciousness across all hospital departments and service lines

Serve as a trusted advisor to clinical and operational leaders on security best practices and risk trade-offs

Regular attendance at work is an essential function of the job.

Perform physical requirements as described in the Physical Requirements section

Education Qualifications

Bachelor's Degree from an accredited college or university in Cyber-Security, Networking, Computer Science, Information Systems, Engineering or related field Preferred and

equivalent work experience may be substituted for education Required

Experience Qualifications

Minimum 3-5 years of hands-on experience in information security engineering or a related security role experience strongly preferred Required and

Minimum 3 years of progressively responsible experience performing Windows system administration duties in a critical production environment, preferably healthcare Required

Experience operating within regulated industries; healthcare or financial services experience strongly preferred Preferred

Proven track record in incident response, including leading or participating in security incident investigations Preferred

Skills and Abilities

Proficiency in network security concepts: TCP/IP, VLANs, VPNs, DNS, firewalls, and network access control (High proficiency)

Hands-on experience with the Microsoft 365 security stack including Entra ID, Purview, PIM, and Intune (High proficiency)

Working knowledge of directory services and identity management (Active Directory, Azure AD, MFA, PAM) (High proficiency)

Scripting or automation skills (Python, PowerShell, or Bash) for security tooling and workflow automation (High proficiency)

Ability to communicate effectively both verbally and in writing (High proficiency)

Strong interpersonal and team building skills (High proficiency)

Effective planning, organizational, time management and prioritizing skills (High proficiency)

Expert knowledge of application and implementation of HIPAA control implementation (High proficiency)

Licenses and Certifications

Certified Ethical Hacker (CEH) Preferred and

GAC Certified Forensic Analyst (GCFA) Preferred

Children's is the very best for kids and the very best for your career! At Children's, we put YOU first so together, we can improve the life of every child!

Requisition ID : 24283

Similar Jobs

Sewing Technician Upholstery

KI • Bonduel, WI • 39min ago

IT & Engineering

JOB REQUIREMENTS: KI\'s Manufacturing plant in Bonduel has an opening on our first shift in our Upholstery Department for a Sewing Technician. Starting wage is \$19.00 and you will receive a \$.50 increase after 6 months...

39min ago

Go to Apply

Staff Product Data Scientist, Vehicle Analytics & Insights

General Motors • Indianapolis, IN • 2h ago

IT & Engineering

Job Description At General Motors, our product teams are redefining mobility. Through a human-centered design process, we create vehicles and experiences that are designed not just to be seen, but to be felt. We're turni...

2h ago

Go to Apply