Information Security Engineer

The Information Security Engineer is a hands-on technical role within the Information Security team responsible for implementing, operating, and maintaining security controls that protect the organization's enterprise and cloud environments. Working under the direction of the Information Security leadership and architecture teams, this role focuses on the day-to-day engineering, configuration, monitoring, and optimization of security technologies across assigned domains. Assignments may span one or more areas including - but not limited to - detection engineering, cloud security, privileged access management, endpoint security, application control, vulnerability management, identity and access management, or network security. The Information Security Engineer works collaboratively with IT operations, infrastructure, clinical applications, and security operations teams to reduce cyber risk and support the organization's security strategy across a complex, multi-site healthcare environment. Essential Job Functions • Implement, configure, and maintain security technologies and controls as directed by the security architecture and leadership teams. • Perform ongoing administration, tuning, and optimization of assigned security platforms and tools to ensure effective operation and alignment with organizational security standards. • Develop and maintain documentation of security configurations, standard operating procedures, and operational runbooks. • Support security incident response activities by providing technical analysis, containment support, and post-incident remediation within assigned areas of responsibility. • Execute changes to security systems following established change management processes, including testing, validation, and rollback planning. • Collaborate with IT operations, infrastructure, and application teams to integrate security controls into existing and new systems. • Assist in the evaluation, testing, and deployment of new security tools and technologies. • Contribute to the development and maintenance of security policies, standards, and procedures as directed. • Participate in vulnerability management activities including scanning, analysis, and coordination of remediation efforts. • Provide technical support and knowledge sharing to IT staff and other stakeholders on security tools and processes. • Research emerging threats, vulnerabilities, and security technologies to recommend improvements within assigned areas. • Supports and models behaviors consistent with Billings Clinic’s mission, vision, values, code of business conduct and service expectations. Meets all mandatory organizational and departmental requirements. Maintains competency in all organizational, departmental and outside agency standards as it relates to the environment, employee, patient safety or job performance. • Performs all other duties as assigned or as needed to meet the needs of the department/organization.