Cyber Security Consultant

BASIC FUNCTION :

The Senior Cybersecurity Engineer is responsible for safeguarding the client information systems, digital assets, and technology infrastructure. This role designs, deploys, and maintains advanced cybersecurity solutions that protect patient data, clinical systems, and enterprise applications. The Senior Cybersecurity Engineer ensures the client's technology environment remains secure, compliant, and resilient against emerging threats.

This position combines hands-on technical expertise with strategic leadership, driving initiatives that enhance cybersecurity maturity and operational readiness across on-premises, hybrid, and cloud environments (e.g., Azure, AWS). The role is pivotal in incident response, risk management, and ongoing improvement of security controls in alignment with hospital policies and regulatory standards such as HIPAA, NIST 800-53, and ISO / IEC 27001.

Salary : $130-140k

Employment Type : Full-time, direct hire

Location : Onsite 3 days / week, remote 2 days / week in Washington DC

SUPERVISORY ACCOUNTABILITIES :

This role does not have direct supervisory responsibility but may provide technical guidance and mentorship to junior cybersecurity staff, contractors, and project teams. The Senior Cybersecurity Engineer may lead cross-functional implementation teams and coordinate security initiatives with other IT departments.

NATURE AND SCOPE :

Operating in a fast-paced, high-impact healthcare technology environment, the Senior Cybersecurity Engineer reports to the Senior Director of Cybersecurity and collaborates with colleagues across Technology Services, including Infrastructure, Applications, Network Operations, and Compliance.

Internal contacts include hospital administrators, clinical and research staff, faculty, and IT personnel. External contacts include technology vendors, auditors, and regulatory agencies. The role requires strong analytical skills, proactive threat awareness, and the ability to balance operational needs with strategic security objectives in a mission-critical healthcare setting.

PRINCIPAL ACCOUNTABILITIES :

Security Operations & Incident Response

• Monitor, analyze, and respond to security alerts, incidents, and anomalies across hospital systems.
• Conduct vulnerability assessments, penetration tests, and threat-hunting activities to identify and mitigate risks.
• Investigate and document security incidents, performing root cause analyses and recommending remediation measures.
• Utilize SIEM, EDR, and IDS / IPS platforms (e.g., CrowdStrike, Microsoft Sentinel) to enhance continuous monitoring.

Security Engineering & Architecture

Governance, Risk, and Compliance

Collaboration, Training, and Awareness

CORE COMPETENCIES :

MINIMUM REQUIREMENTS :

Education :

Experience :

Certifications (one or more preferred) :