Cyber Security Engineer

At Henry Ford Health, we're committed to advancing health and improving lives for the millions of people we serve across Michigan and around the world. As one of the nation's leading academic health systems, we provide a comprehensive continuum of care that includes primary and preventive services, specialty and complex care, virtual care, pharmacy, home health, eye care, health insurance, and more. With 12 hospitals and hundreds of ambulatory care locations, including former Ascension Southeast Michigan and Flint Region facilities, our growing network expands access to exceptional care in the communities we serve. Headquartered in Detroit, Henry Ford Health is helping shape the future of healthcare through the transformative Future of Health: Detroit initiative, a $3 billion investment that is redefining our academic healthcare campus and advancing innovation, research, education, and community impact. Our work is grounded in purpose, collaboration, and belonging. We empower team members to grow their careers, contribute innovative ideas, and make a meaningful difference every day. Whether you're caring for patients, supporting operations, conducting research, or driving new solutions, you'll be part of a team united by a shared mission: delivering exceptional care, advancing health outcomes, and building healthier communities for all. GENERAL SUMMARY: Henry Ford Health is hiring a Cyber Security Engineer to join our Security Operation (SOC) team. This role will focus on designing, deploying, and maintaining the company's security solutions. The ideal candidate is experienced with SIEM and enterprise security technology deployments and will collaborate with our Security Operations team and MSSP to ensure robust detection, visibility, and response across a hybrid cloud/on-prem environment. EDUCATION/EXPERIENCE REQUIRED: Bachelor's degree in computer science, Cybersecurity, Information Technology, or equivalent hands-on experience. 5+ years in cybersecurity, IT security engineering, security operations with a proven track record of strategic ownership and reporting. Proven experience deploying and managing a SIEM and EDR tools. Experience with log ingestion, normalization, and custom rule development. Proficiency in PowerShell, Python, or similar programming language. Familiarity with cloud security best practices, especially in Azure. Solid understanding of network security, endpoint protection, and identity access controls. Preferred: Experience in the healthcare or other regulated sectors. Knowledge of compliance frameworks like HIPAA, HITRUST, NIST CSF/800-53.Experience in detection engineering, SIEM content development, or playbook creation. CERTIFICATIONS/LICENSURES REQUIRED: Certifications such as GCIA, GSEC, or Microsoft Certified: Azure Security Engineer Associate preferred.