Information Security Specialist/Engineer III (Cyber Defense) - Information Solutions

The Information Security Specialist/Engineer III reports to the Cybersecurity Operations Manager and supports the organization’s business, technology, clinical, and cybersecurity missions by strengthening enterprise cyber defense capabilities. With general supervision, this role leads and continuously improves threat intelligence and analysis, vulnerability management, adversary emulation, incident response readiness, cybersecurity technology operations, detection engineering, and security awareness activities.

The position analyzes relevant government, industry, vendor, healthcare-sector, open-source, and internal intelligence; assesses organizational exposure using threat activity, vulnerability data, asset criticality, control effectiveness, and business impact; and partners with technical, clinical, operational, and business stakeholders to prioritize practical mitigation and risk reduction actions. The role designs, maintains, tunes, integrates, and improves cybersecurity tools, detections, dashboards, workflows, automation, reporting, and documentation that support reliable asset visibility, vulnerability prioritization, alert fidelity, response coordination, and operational efficiency. It also plans and supports authorized adversary emulation and purple team validation activities, coordinates incident triage and response activities, communicates cybersecurity risk and recommended actions to technical and non-technical audiences, develops awareness and education materials, mentors peers, leads projects, recommends process improvements, maintains high professional standards, and provides excellent customer service.

Required Education/Skills/Work Experience:

• Bachelor’s degree, or associate’s degree and equivalent work experience, required.  

• Eight (8) or more years of experience in cybersecurity, security operations, threat intelligence, vulnerability management, incident response, or related technical functions required.  

• Role-relevant certification required, such as CISSP, CASP+/SecurityX, CCSP, CISM, GCIA, GCIH, GCFA, GCFE, GPEN, or an equivalent cybersecurity certification. Excellent interpersonal, analytical, written, and verbal communication skills required. 

• Demonstrated ability to lead complex analysis and engineering work, improve security tools and workflows, validate detections, influence remediation decisions, mentor peers, and communicate risk to technical and business stakeholders required.  

If you like working with energetic enthusiastic individuals, you will enjoy your career with us!

The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.

Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: http://www.uscis.gov/e-verify/employees