Cybersecurity Engineer/Full time/Days

Gaylord Specialty Healthcare is a health system dedicated exclusively to medical rehabilitation.  We provide inpatient and outpatient care for people at every point in their journey from illness or injury to the most advanced state of recovery they can achieve. Our Mission:  To enhance health, maximize function  and transform lives.  Our values:  Integrity, Compassion, Accountability, Respect, and Excellence.  These values guide us in providing quality patient care and transforming the lives of our patients.

SUMMARY:

The IT Cybersecurity Engineer is responsible for securing and supporting the hospital’s IT infrastructure and cybersecurity operations. This is a hands-on hybrid role covering network and systems administration, security tooling, automation, identity and access management, and day-to-day cybersecurity operations. Reporting to the CIO, this position serves as the organization’s senior technical cybersecurity resource and works closely with IT leadership to strengthen security posture, ensure regulatory compliance, and support business continuity and patient safety

1. Infrastructure and Security Strategy

CRITERIA:

• Collaborates with the CIO to develop strategic and tactical IT plans including budgeting, resource allocation, and technology adoption.
• Consults on technology evaluations and implementations, ensuring alignment with IT strategy.
• Assesses infrastructure needs and presents justifications for hardware or software changes.
• Participates in cybersecurity risk assessments and remediation planning.
• Develops and maintains security standards, procedures, and technical documentation.
• Supports disaster recovery and business continuity planning related to IT systems.
• Identifies and integrates products to ensure performance, reliability and user satisfaction.

2. Network & Systems Administration

CRITERIA:

• Configures, monitors, and maintains servers, network devices, and system hardware.
• Installs and updates system software and applies security patches.
• Monitors system alerts and addresses performance issues proactively.
• Maintains documentation of configurations and standard procedures.

3. Security Operations & Automation

CRITERIA:

• Conducts vulnerability scanning and risk assessments; coordinates third-party penetration testing as needed and remediates findings.
• Monitors security alerts and investigates suspicious activity.
• Supports logging, monitoring, and incident response processes.
• Implements and supports security tooling (e.g., firewall, EDR, RMM, identity platforms).
• Manages access control using PortalGuard.
• Develops and maintains PowerShell scripts to automate IT tasks.

 4. Support, Compliance, & User Engagement

CRITERIA:

• Provides technical support for network, software, and hardware issues.
• Responds to complex service requests and assists with escalated issues.
• Educates users on safe cybersecurity practices and system usage.
• Ensures compliance with HIPAA and other healthcare security standards.
• Participates in cybersecurity incident response and root cause analysis.
• Supports audits, risk assessments, and vendor security reviews.
• Assists with security documentation and evidence collection for compliance efforts.

5. CATEGORY: IT IS ICARE

CRITERIA:

• Innovation: Embracing creativity and new ideas to improve processes and outcomes.
• Teamwork: Collaborating effectively with others to achieve shared goals and objectives.
• Inclusion: Fostering an environment where everyone feels valued and supported.
• Safety:  Prioritizing the well-being and security of patients, individuals, and communities.
• Integrity:  Acting with honesty and transparency in all interactions and decisions.
• Compassion:  Showing empathy and kindness towards others, especially in challenging situations.
• Accountability:  Taking responsibility for actions and outcomes, ensuring reliability and trust.
• Respect:  Treating others with dignity and consideration, valuing their perspectives and contributions
• Excellence:  Striving for the highest quality in performance and achievements.