Sr. Specialist, Cybersecurity Engineering

Description

The company is a Fortune 10 firm in healthcare, known for insights, products and services that make quality care more accessible and affordable.

The Cybersecurity Engineering role leads the design, rollout and tuning of advanced security solutions across cloud, on-premises and operational technology (OT) environments. You will build security requirements into systems, software and infrastructure so they meet regulatory expectations and make the enterprise more resilient, and you will lead control implementation and monitoring to reduce risk and keep the technology landscape visible.

You will shape security architecture decisions, remediation strategy and major incident investigations. You will work with cross-functional teams, assess new technologies and write security standards and guidelines. The role gives subject matter expertise, influences direction and includes mentoring junior staff.

The medical-surgical distribution segment, MMS, is expected to be renamed in early 2027. It is a subsidiary and publicly reported segment of the parent company. MMS supplies medical-surgical products, pharmaceuticals, diagnostic equipment and related services to non-acute settings such as physician offices, surgery centers, long-term care, labs, home health and hospice, health systems, government facilities and online retailers.

The segment is growing quickly. It has about 8,000 employees, 15 distribution centers and roughly 900 delivery vehicles, works with more than 2,200 manufacturers, serves over 200,000 customer accounts across the U.S., and carries more than 270,000 SKUs, from bandages to specialty drugs and COVID-19 tests.

Responsibilities

• Lead the design and rollout of advanced security solutions and architectures that match enterprise strategy and regulatory requirements.
• Run complex security assessments, including penetration tests, risk analysis and reviews of emerging threats, to inform decisions.
• Lead incident response and forensic work for major security incidents, identify root causes and drive remediation plans.
• Write and maintain advanced security documentation, standards and guidelines that keep practices consistent and transparent.
• Find gaps in security architecture and controls, recommend fixes and shape how they are implemented.
• Work with cross-functional teams so security requirements are built into systems and software from the start.
• Assess emerging security technologies, tools and industry trends to guide strategy and future capabilities.
• Work with vendors to evaluate, design and deploy advanced security products and managed services.
• Provide technical leadership, mentor junior and mid-level engineers and help build a strong security engineering practice.
• Contribute architecture input to business continuity and disaster recovery planning and check that systems are ready.

Requirements

• A bachelor's degree or an equivalent mix of education and experience. Typically 7+ years of progressive experience in cybersecurity engineering, architecture or infrastructure security.
• Deep knowledge of IT and cybersecurity, with the ability to shape architecture and tie solutions to business needs.
• Experience leading incident response, running complex assessments, evaluating new technologies and working with vendors on advanced security solutions.
• Skill in building resilient platforms across cloud security, communications security, cryptography and cyber resiliency.
• Ability to lead incident response, including containment and structured reporting.
• Ability to build threat visibility by tuning network sensors, enabling logs and telemetry, and writing solid event correlation rules.
• Ability to investigate threats through behavioral analysis, malicious activity analysis and digital evidence handling.
• Ability to spot systems designed without security in mind and drive fixes with their owners.
• Skill in platform lifecycle work, including installing system and component upgrades and planning reliable rollback.
• Skill in hardening pipelines with DevSecOps practices and writing code in a currently supported language for automation, checks and integrations.
• Ability to troubleshoot cyber defense infrastructure anomalies and system performance problems in production.
• Skill in identity and cryptographic engineering, including user credential management and enterprise key escrow systems.
• Ability to write clear briefings and practical technical runbooks for operations teams.

Conditions

Base pay range is $116,500 - $194,100.

Pay depends on performance, experience and skills, equity, regular market reviews and geographic location, and stays within applicable regulations.

An annual bonus or long-term incentive may also be offered in addition to base pay.

The company is an Equal Opportunity Employer.

Benefits

• Total Rewards package, with details on benefits available from the company.