Cybersecurity Engineer II

The Talent Acquisition department hires qualified candidates to fill positions which contribute to the overall strategic success of Howard University. Hiring staff "for fit" makes significant contributions to Howard University's overall mission.

At Howard University, we prioritize well-being and professional growth.

Here is what we offer: 

• Health & Wellness: Comprehensive medical, dental, and vision insurance, plus mental health support
• Work-Life Balance: PTO, paid holidays, flexible work arrangements
• Financial Wellness: Competitive salary, 403(b) with company match 
• Professional Development: Ongoing training, tuition reimbursement, and career advancement paths
• Additional Perks: Wellness programs, commuter benefits, and a vibrant company culture

Join Howard University and thrive with us 

BASIC FUNCTION:

The Cybersecurity Engineer II is responsible for implementing, managing, and optimizing cybersecurity technologies and protocols to protect Howard University Hospital's digital assets. This role ensures the confidentiality, integrity, and availability of sensitive information, supports regulatory compliance, and advances the hospital's mission of excellence in patient care and service.

SUPERVISORY ACCOUNTABILITIES:

This position has no direct supervisory responsibility, but may provide technical direction and mentorship to junior cybersecurity staff, contractors, and project team members. The Senior Cybersecurity Engineer may also lead cross-functional implementation teams and coordinate security initiatives with other IT units.

NATURE AND SCOPE:

Works within the IT Technology Services department. Collaborates with IT, clinical, and administrative teams to implement security best practices. Engages with external auditors, vendors, and regulatory bodies as needed. Supports the hospital's compliance with HIPAA, NIST, and other relevant standards. Participates in cross-functional projects and hospital-wide cybersecurity initiatives.

PRINCIPAL ACCOUNTABILITIES:

Security Operations

• Deploy, configure, and maintain cybersecurity solutions (firewalls, IDS/IPS, endpoint protection, SIEM).
• Monitor network and system activity for threats; respond to security incidents.

Risk Management

• Conduct vulnerability assessments and penetration testing; remediate findings.
• Support risk assessments and third-party evaluations.

Compliance and Documentation

• Ensure adherence to HIPAA, NIST, and internal policies.
• Maintain documentation for security processes, incident response, and compliance audits.

Continuous Improvement

• Recommend and implement improvements to security architecture.
• Stay current with emerging threats and technologies.

Collaboration and Training

• Work with other departments to ensure secure IT practices.
• Mentor junior staff and participate in cybersecurity awareness initiatives.

CORE COMPETENCIES:    

• Technical proficiency in cybersecurity tools (e.g., MS Defender, SIEM platforms).
• Strong understanding of regulatory frameworks (HIPAA, NIST).
• Analytical and problem-solving skills.
• Effective communication and documentation abilities.
• Ability to work collaboratively in a diverse, fast-paced environment.
• Commitment to continuous learning and professional development.

MINIMUM REQUIREMENTS:

• Bachelor's degree in Computer Science, Information Security, or related field.
• 3–5 years of experience in cybersecurity engineering or IT security operations.
• Experience with network security, cloud security (Azure, AWS), and endpoint protection.
• Familiarity with vulnerability management and incident response.
• Preferred: CISSP, CISM, CEH, or equivalent certifications; experience in healthcare IT.

Compliance Salary Range Disclosure

Compensation Range: $112,500 - $125,000