[Hiring] Senior Cyber Security Defense Engineer @Vail Health Private

Role Description

Under the direction of the Chief Information Security Officer (CISO), the Senior Cyber Security Defense Engineer is a high-impact, senior-level individual contributor who architects, implements, and continuously matures the technical capabilities that actively defend Vail Health from sophisticated cyber threats and measurably reduce enterprise cyber risk.

• Own and lead the enterprise patch management and security health program across endpoints, servers, cloud platforms, network devices, and security technologies.
• Design, implement, and continuously improve secure configuration standards, automated patch deployment workflows, and change management integration.
• Own and continuously mature the Vulnerability Management Program.
• Define and maintain enterprise patch compliance metrics, configuration hygiene baselines, and vulnerability exposure dashboards.
• Provide advanced Tier 2/Tier 3 security operations support.
• Correlate security telemetry across various platforms to identify, prioritize, and contain active and emerging threats.
• Develop, maintain, and continuously improve security operations runbooks, incident response playbooks, and escalation procedures.
• Lead enterprise email security operations and social engineering defense.
• Optimize email and messaging security controls.
• Serve as a core incident responder and technical lead for cybersecurity incidents.
• Author post-incident reviews and drive continuous improvement.
• Support enterprise risk management, audit, and compliance initiatives.
• Identify and execute opportunities for operational efficiency and cost savings.
• Mentor and provide technical guidance to junior engineers and IT partners.
• Collaborate cross-functionally and contribute to a security-first culture.

Qualifications

• Eight years of progressive experience in cybersecurity engineering, threat detection, vulnerability management, or incident response.
• Proven record of accomplishment in maturing enterprise patch management and vulnerability management programs.
• Hands-on expertise with enterprise patch management platforms.
• Deep experience with enterprise security tooling.
• Demonstrated proficiency with SIEM platforms.
• Strong command of security frameworks and methodologies.
• Experience operating in regulated, audit-intensive environments.
• Demonstrated ability to independently influence cross-functional stakeholders.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline.
• Certified Information Systems Security Professional (CISSP), Security+, CySA+, CEH, GCIH, GCIA, GMON, or cloud security certifications.
• Other IT Security Certifications Desired: CISM, CISA, Microsoft, Cisco.

Benefits

• Competitive wages.
• Parental leave (4 weeks paid).
• Housing programs.
• Childcare reimbursement.
• Comprehensive health benefits (Medical, Dental, Vision).
• Tuition assistance.
• Existing student loan repayment.
• Specialty certification reimbursement.
• Annual supplemental educational funds.
• Paid time off (up to five weeks in the first year).
• 403(b) retirement plan with immediate matching.
• Life insurance.
• Short and long-term disability.
• Up to $1,000 annual wellbeing reimbursement.
• Recreation discounts.
• Pet insurance.