Access Control, Best Practices, Cloud Computing, Computer Science, Computer Security, Content Development, Endpoint Security, Enterprise Protection, GCIA - GIAC Certified Intrusion Analyst, GSEC - GIAC Security Essentials Certification, HIPAA (Health Insurance Portability and Accountability Act), Healthcare, Hybrid Cloud, Incident Response, Information Technology & Information Systems, Internet Security, Microsoft Windows Azure, Network Security, Programming Languages, Python Programming/Scripting Language, Security Information and Event Management (SIEM), U.S. National Institute of Standards and Technology (NIST), Windows PowerShell
GENERAL SUMMARY:
Henry Ford Health is hiring a Cyber Security Engineer to join our Security Operation (SOC) team. This role will focus on designing, deploying, and maintaining the company's security solutions. The ideal candidate is experienced with SIEM and enterprise security technology deployments and will collaborate with our Security Operations team and MSSP to ensure robust detection, visibility, and response across a hybrid cloud/on-prem environment.
EDUCATION/EXPERIENCE REQUIRED:
- Bachelor's degree in computer science, Cybersecurity, Information Technology, or equivalent hands-on experience.
- 5+ years in cybersecurity, IT security engineering, security operations with a proven track record of strategic ownership and reporting.
- Proven experience deploying and managing a SIEM and EDR tools.
- Experience with log ingestion, normalization, and custom rule development. Proficiency in PowerShell, Python, or similar programming language. Familiarity with cloud security best practices, especially in Azure.
- Solid understanding of network security, endpoint protection, and identity access controls.
- Preferred: Experience in the healthcare or other regulated sectors.
- Knowledge of compliance frameworks like HIPAA, HITRUST, NIST CSF/800-53.Experience in detection engineering, SIEM content development, or playbook creation.
CERTIFICATIONS/LICENSURES REQUIRED:
Certifications such as GCIA, GSEC, or Microsoft Certified: Azure Security Engineer Associate preferred.
Additional Information
- Organization: Corporate Services
- Department: Cybersecurity Incident Respons
- Shift: Day Job
- Union Code: Not Applicable