HTM Associate Information Security Engineer

HTM Associate Information Security Engineer

These are two onsite positions located in Mankato, MN.

The HTM Associate Information Security Engineer position requires a Healthcare Technology Management (HTM) and/or Information Security professional who is result-oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments. This position is responsible for the research and configuration of systems and procedures to ensure the protection of information processed, stored, or transmitted in Mayo Clinic's healthcare/operational technology environments. This position provides basic security deployment and/or consultation for various projects and initiatives. The incumbent also assists system users relative to medical, research, lab, and operational system security matters and undertakes projects requiring specialized technical knowledge. This position receives guidance from HTM leadership and other HTM Information Security Engineers/Analysts.

The core responsibilities of the incumbent are to provide security and network-related support to the Practice and Facilities. This includes configuring and connecting equipment to the network, troubleshooting connectivity issues, applying security controls, writing procedures on how to apply controls, mitigating device vulnerabilities, working with manufacturers/vendors, and performing other duties as assigned. Understanding basic security concepts such as access control, application security, device hardening, onboarding and installation, configuration of anti-virus/antimalware, and understanding of the TCP/IP protocols and network technologies are essential. The ability to troubleshoot and investigate security-related issues and having experience with vulnerability and patch management, including Windows and Linux patching, is required. The incumbent must be comfortable with being assigned multiple tasks or activities, dealing with a diverse changing environment, and able to work independently.

Bachelor's or Associate's degree in Biomedical Electronics, Computer Science, Information Systems, Clinical Engineering, or related major and at least 1 year of experience with medical, research, lab, or operational equipment service or 1 year of information security experience is required.

This individual will have basic experience with security analysis for medical, research, lab, and operational systems and networks. A basic understanding of security concepts and controls for network, application, and operating systems, as well as work experience with logical access controls to ensure confidentiality, integrity, and assurance of proprietary information, is necessary. Basic knowledge of TCP/IP networking is also required. This individual must present a professional image and possess excellent communication skills when dealing with staff, contractors, and vendors. Responsibilities include serving as a security coach/mentor for clinical and HTM staff on an as-needed basis. Demonstrated interpersonal skills including the ability to work effectively in a team environment and as a participant are essential. The capacity to work independently and willingness to seek advice/assistance is also necessary. A Bachelor’s degree is preferred. Service experience with medical, research, lab, and operational technologies is preferred. Certification as CISSP, GIAC, Security+, Network+, or security equivalent; or the ability to obtain certification within 2 years of hire is required.

Authorization to work and remain in the United States, without necessity for Mayo Clinic sponsorship now or in the future (for example, be a U.S. Citizen, national, or permanent resident, refugee, or asylee) is required. Also, Mayo Clinic does not participate in the F-1 STEM OPT extension program.