HTM Associate Information Security Engineer

We are seeking a motivated and technically skilled Associate Information Security Engineer to join our Healthcare Technology Management (HTM) cybersecurity team in Eau Claire, Wisconsin. This role combines healthcare technology, networking, and cybersecurity to support the secure implementation and ongoing protection of medical, research, laboratory, and operational technologies. The ideal candidate will support secure network onboarding, implement identified security controls, mitigate cybersecurity risks and vulnerabilities, and collaborate with HTM, Information Security, IT, clinical teams, manufacturers, and vendors throughout the technology lifecycle.

The HTM Associate Information Security Engineer position requires a Healthcare Technology Management (HTM) and/or Information Security professional who is result oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments. This position is responsible for the research and configuration of systems and procedures to ensure the protection of information processed, stored, or transmitted in Mayo Clinic's healthcare/operational technology environments. This position provides basic security deployment and/or consultation for various projects and initiatives. The incumbent also assists system users relative to medical, research, lab, and operational system security matters and undertakes projects requiring specialized technical knowledge. This position receives guidance from HTM leadership and other HTM Information Security Engineers/Analysts.

Specific Job Responsibilities

• Support secure network onboarding of medical, research, laboratory, and operational technologies, including evaluation of connectivity requirements and implementation of required security controls.
• Interpret security requirements, risk assessment results, and technical information to determine and implement appropriate security configurations and controls.
• Investigate and mitigate identified vulnerabilities and security findings through patching, configuration changes, compensating controls, or other appropriate measures.
• Collaborate with HTM, OIS, IT, clinical teams, manufacturers, and vendors to implement security solutions while maintaining device functionality and clinical operations.
• Support ongoing cybersecurity activities throughout the technology lifecycle, including system changes, upgrades, vulnerability remediation, and security improvements.
• Document security configurations, implemented controls, mitigation activities, and technical outcomes.

Bachelors or Associates degree in Biomedical Electronics, Computer Science, Information Systems, Clinical Engineering or related major and at least 1 year experience with medical, research, lab, or operational equipment service or 1 year of information security experience. 

This individual will have basic experience with security analysis for medical, research, lab, and operational systems and networks. Basic understanding of security concepts and controls for network, application and operating systems and work experience with logical access controls to ensure confidentiality, integrity and assurance of proprietary information. Basic knowledge of TCP/IP networking. This individual must present a professional image and possess excellent communication skills when dealing with staff, contractors and vendors. Responsibilities include serving as a security coach/mentor for clinical and HTM staff on an as needed basis. Demonstrated interpersonal skills including the ability to work effectively in a team environment and as a participant. Capacity to work independently and willingness to seek advice/assistance. Bachelor’s degree is preferred. Service experience with medical, research, lab and operational technologies is preferred. 

Certified as CISSP, GIAC, Security +, Network +, or security equivalent; or will obtain certification within 2 years of hire.

Preferred Qualifications

• Strong technical troubleshooting, analytical, and problem-solving skills.
• Working knowledge of TCP/IP networking, operating systems, network connectivity, access controls, vulnerabilities, and cybersecurity controls.
• Ability to interpret security requirements and translate them into practical technical configurations and mitigation actions.
• Ability to balance cybersecurity controls with patient safety, clinical workflow, device functionality, and manufacturer requirements.
• Strong initiative, attention to detail, and ability to manage multiple technical assignments while developing increasing independence.
   

Authorization to work and remain in the United States, without necessity for Mayo Clinic sponsorships now, or in the future (for example, be a U.S. Citizen, national, or permanent resident, refugee, or asylee). Mayo Clinic does not participate in the F-1 STEM OPT extension program. 

During the selection process you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.