Apply on Employer Site

Labcorp · 15 hours ago

Senior Cybersecurity Engineer

Durham, NC

Full-time

Hybrid

Senior Level

5+ years exp

Labcorp is a leading company in the healthcare sector seeking a Cybersecurity Engineer to join its Office of Information Security. The role involves implementing security controls for cloud environments, ensuring sensitive data protections, and collaborating with various teams to enhance the enterprise security strategy.

BiotechnologyHealth CareHospitalLife ScienceMedicalPrecision Medicine

H1B Sponsor Likely

Responsibilities

Partner with other technical teams to design and drive the implementation of security controls for PaaS and IaaS environments and associated components. For example:

Infrastructure as code (IaC)

Container security (Kubernetes/EKS, ECS, image scanning)

Serverless functions/Lambda

Data services (S3, RDS, DynamoDB)

M365 Services (Entra, Purview, Intune)

Design, implement, and oversee security controls for AI platforms, including data governance, model integrity, access control, and adversarial threat mitigation

Lead efforts to ensure sensitive data has appropriate protections in accordance with internal policy and external regulations. For example:

Encryption at rest (application encryption, transparent data encryption)

Encryption in-transit (TLS, IPSec tunnels)

Key management (KMS/Key Vault, HSM)

Tokenization/deidentification of PHI

Lead and participate in technical security reviews of strategic applications:

Collaborate with other IT teams to understand the design and document any risks

Recommend and drive the adoption of technical controls to strengthen security posture

Collaborate with application development teams on best practices for embedding fine-grained authorization inside of modern web applications and microservices

Work alongside other team members to develop technical security standards and best practices across various security domains; socialize and evangelize to other IT teams

Articulate common TTP’s used by malicious software and threat actors, along with associated remediation, to other IT teams

Provide level 3 support of security incidents as required

Assist members of Governance, Risk, and Compliance to answer technical questions from auditors and clients

In partnership with the broader Office of Information Security, research and recommend emerging security technologies/tools to address current and future threats

Represent the interests of security and risk to other technical staff and business stakeholders

Qualification

CybersecurityCloud securityIdentityAccess managementAWSAzureGCPEncryptionCISSPPythonPowershellAnalytical skillsProblem-solvingCommunication skillsProject management

Required

Minimum 5 years of experience in cybersecurity

Hands-on experience working with a major public cloud platform such as AWS, Azure, or GCP

Experience in securing common cloud-native services residing in PaaS/IaaS environments

A working understanding of modern identity and access management concepts as they relate to application authentication and authorization, especially OAuth 2.0 and OIDC

Familiarity with REST APIs and healthcare standards such as HL7 FHIR and SMART on FHIR

Experience in implementing security controls to protect regulated data

Strong interpersonal, written, and oral communication skills

Highly self-motivated and directed professional, with keen attention to detail

Proven project management and organizational skills, specifically managing multiple, concurrent projects

Excellent analytical, problem-solving and decision-making abilities

Able to effectively prioritize tasks in a high-pressure environment

Strong customer service and solution-focused orientation

Preferred

Bachelor's or higher is highly desired

CISSP certification desired

Familiarity with scripting – Powershell, Python, shell scripting

Familiarity with threat analysis models such as the cyber kill Chain and the MITRE ATT&CK framework

Familiarity with identity-centric zero trust network access (ZTNA) solutions

Previous experience in securing medical and related instrumentation devices

Understanding of industry standards and compliance requirements related to cybersecurity and cloud computing—especially ISO 27001, HIPAA, and PCI DSS

Familiarity with NIST and/or CIS benchmarks

Benefits

Medical

Dental

Vision

Life

STD/LTD

401(k)

Paid Time Off (PTO) or Flexible Time Off (FTO)

Tuition Reimbursement

Employee Stock Purchase Plan

Company

Labcorp

Glassdoor3.6

Labcorp specializes in providing physicians with laboratory tests.

Founded in 1978

Burlington, North Carolina, USA

10001+ employees

https://www.labcorp.com

H1B Sponsorship

Labcorp has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2021 (1)