Mayo Clinic · 3 hours ago

Information Security Engineer (Remote)

55901

Full-time

Remote

Mid Level

$98K/yr - $137K/yr

Maximize your interview chances

BiotechnologyHealth Care

No H1B

Insider Connection @Mayo Clinic

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Apply technical expertise in penetration testing, vulnerability research, red teaming, code auditing, and reverse engineering to perform in-depth security assessments of IT infrastructure (on-prem and cloud), medical devices, and various types of software (including web and mobile applications)

Identify, understand, and explain the root cause of technical security vulnerabilities and clearly report steps to reproduce a vulnerability

Develop and recommend technical strategies to mitigate or remediate identified vulnerabilities to asset owners

Regularly research and learn new TTPs in public and closed forums, and work with teammates to assess risk and implement and validate controls as necessary

Perform other security-related duties or enhancements as assigned

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Penetration TestingVulnerability ResearchRed TeamingCode AuditingReverse EngineeringInformation SecurityCloud SecuritySecurity Assessment ToolsOperating SystemsRisk AssessmentLearning New TTPsTechnical Reporting

Required

Hands-on experience with a variety of tools to emulate attacker tactics, techniques, and procedures (TTPs)

Understanding of information security, preferably with a computer science or engineering background

Understanding of applications, networking, and various operating systems

Knowledge of security assessment tools and frameworks

Ability to stay up to date with advancements in technology

Knowledge of older systems and applications that may still be in use in the enterprise

Results oriented and multi-disciplined

Comfortable working with senior and principal engineering staff

Apply technical expertise in penetration testing, vulnerability research, red teaming, code auditing, and reverse engineering

Perform in-depth security assessments of IT infrastructure (on-prem and cloud), medical devices, and various types of software (including web and mobile applications)

Identify, understand, and explain the root cause of technical security vulnerabilities

Clearly report steps to reproduce a vulnerability

Develop and recommend technical strategies to mitigate or remediate identified vulnerabilities to asset owners

Regularly research and learn new TTPs in public and closed forums

Work with teammates to assess risk and implement and validate controls as necessary

Perform other security-related duties or enhancements as assigned