Cyber Security Engineer

Posting number: 26-CSEQ2

Department: IS DEV - UMC - 8540

Job classification: Cyber Security Engineer - 15434

Posting type: Open

Categories: IT and Computers

Summary

As an academic medical center with a rich history of providing life-saving treatment in Southern Nevada, UMC serves as the anchor hospital of the Las Vegas Medical District, offering Nevada’s highest level of care to promote successful medical outcomes for patients.

 

UMC is home to Nevada's ONLY Nonprofit Level I Trauma Center, Verified Burn Center, and Multi-Organ Transplant Center. In 2026, we became the FIRST and ONLY Magnet®-Recognized hospital in the state, reflecting UMC's nursing professionalism, teamwork, and superiority in patient care.

Position Summary:
Plans and coordinates security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Assists with security design, consultation, and technology implementations.

Examples of duties

Education/Experience:
Equivalent to a Bachelor’s degree in Cybersecurity, Management Information Systems, or a closely related field and two (2) years of experience in network, systems, or security role, with at least one (1) of the two (2) years in recent dedicated enterprise security role performing hands-on security practices and duties.
 
Licensing/Certification Requirements:
ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Associate CISSP, Global Information Assurance Security Essentials Certification (GSEC), or other industry-recognized equivalent certification in the disciplines of cyber security.

Qualifications

Candidate's must have the following experience to be considered:

At least 2 or more years of Advanced Detection & Response (MDR / XDR) experience.

The candidate must have hands-on experience with Managed Detection and Response (MDR) solutions, such as Sophos MDR, including active monitoring, alert investigation, and threat hunting. This role requires the ability to tune detection rules, reduce false positives, and respond to advanced threats across endpoint, network, and cloud environments using XDR capabilities.

At least 2 or more years of SIEM, UEBA & Advanced Analytics experience.

The ideal candidate will have practical experience with SIEM and User and Entity Behavior Analytics platforms, preferably Exabeam, with the ability to develop correlation rules, analyze anomalous behavior, and generate actionable insights. Experience in building dashboards and translating complex data into meaningful security intelligence for both technical teams and leadership is essential.

At least 2 or more years of Cloud Security & SSE (Secure Service Edge) experience.

This position requires hands-on experience with cloud security platforms such as Netskope or equivalent Secure Service Edge solutions. The candidate should be skilled in implementing controls for SaaS applications, enforcing data protection policies, and securing remote user access through capabilities like CASB, secure web gateways, and data loss prevention.

At least 2 or more years of Email Security & Threat Protection experience.

The candidate must have experience managing and optimizing email security platforms such as Mimecast. Responsibilities include configuring anti-phishing protections, analyzing email-based threats, and supporting phishing awareness initiatives to reduce organizational risk from social engineering attacks.

At least 2 or more years of Governance, Risk, and Compliance (GRC) experience.

A strong understanding of Governance, Risk, and Compliance principles is required, including familiarity with frameworks such as NIST, ISO 27001, and HIPAA. The role involves conducting risk assessments, supporting audits, maintaining policies, and effectively communicating risk posture and remediation strategies to business stakeholders.<