Information Security Engineer - IS-Mod - 80651

The Information Security Engineer independently implements, administers, and supports security solutions across enterprise systems. This role applies specialized technical knowledge to analyze security posture, design controls aligned with business requirements, and protect organizational systems and data. Depending on the area of focus, the Information Security Engineer may support a variety of application protection initiatives and operations related to Vulnerability and Exposure Management and Secure Cloud & Software Delivery. Examples of such activities include the following: Configure and operate vulnerability scanning tools; troubleshooting anomalies. Implement and maintain integrations between tools supported within and outside the department to enable automated workflows and reporting. Coordinate exception management workflows related to vulnerability and application protection policies. Coordinate and oversee Attack Surface Management activities, including the use of advanced tooling for digital asset discovery and protection. Partner with cloud engineering teams to embed security within the container lifecycle, support container vulnerability management, and integrate security controls into cloud hosting platforms. Implement and support software supply chain security capabilities. Administer Infrastructure as Code (IaC) and Policy as Code (PaC) tools, which enforce logic-based policy decisions. This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.