[Hiring] Information Security Specialist/Engineer III @Medical University of South Carolina

Role Description

The Information Security Specialist/Engineer III reports to the Cybersecurity Operations Manager and supports the organization’s business, technology, clinical, and cybersecurity missions by strengthening enterprise cyber defense capabilities. With general supervision, this role leads and continuously improves:

• Threat intelligence and analysis
• Vulnerability management
• Adversary emulation
• Incident response readiness
• Cybersecurity technology operations
• Detection engineering
• Security awareness activities

The position analyzes relevant government, industry, vendor, healthcare-sector, open-source, and internal intelligence; assesses organizational exposure using:

• Threat activity
• Vulnerability data
• Asset criticality
• Control effectiveness
• Business impact

Partners with technical, clinical, operational, and business stakeholders to prioritize practical mitigation and risk reduction actions. The role designs, maintains, tunes, integrates, and improves:

• Cybersecurity tools
• Detections
• Dashboards
• Workflows
• Automation
• Reporting
• Documentation

Plans and supports authorized adversary emulation and purple team validation activities, coordinates incident triage and response activities, communicates cybersecurity risk and recommended actions to technical and non-technical audiences, develops awareness and education materials, mentors peers, leads projects, recommends process improvements, maintains high professional standards, and provides excellent customer service.

Qualifications

• Bachelor’s degree, or associate’s degree and equivalent work experience, required.
• Eight (8) or more years of experience in cybersecurity, security operations, threat intelligence, vulnerability management, incident response, or related technical functions required.
• Role-relevant certification required, such as CISSP, CASP+/SecurityX, CCSP, CISM, GCIA, GCIH, GCFA, GCFE, GPEN, or an equivalent cybersecurity certification.
• Excellent interpersonal, analytical, written, and verbal communication skills required.
• Demonstrated ability to lead complex analysis and engineering work, improve security tools and workflows, validate detections, influence remediation decisions, mentor peers, and communicate risk to technical and business stakeholders required.

Benefits

• If you like working with energetic enthusiastic individuals, you will enjoy your career with us!

Company Description

The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.

Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees.