Cybersecurity Engineer at American Heart Association

Job description

Since our founding in 1924, we've cut cardiovascular disease deaths in half, but there is still so much more to do. To overcome today’s biggest health challenges and accelerate this progress, we need passionate individuals like you. Join our movement, be part of the progress, and help ensure a healthier future for all. You matter, and so does the impact you can make with us. The American Heart Association has an excellent opportunity for a Cybersecurity Engineer in Dallas, TX . The Cybersecurity Engineer implements and manages security technologies and controls that protect organizational assets in partnership with senior engineers, architects, and leaders. This role is responsible for hands-on execution and troubleshooting of security systems, collaborating with architecture, operations, and compliance teams to ensure security controls are both effective and aligned with enterprise risk. This role is critical in ensuring the confidentiality and security of the Company’s data, applications, cloud, and network infrastructure. They act as technical contributors with expertise in areas like system hardening, threat detection, vulnerability management, and compliance enforcement. This role provides a foundation for branching into specialization tracks such as Cloud Security Engineer, Application Security Engineer, or Network Security Engineer. The Association offers many resources to help you maintain work-life harmonization through your changing needs and life situations. To help you be successful, you will have access to Heart U, our award-winning corporate university, as well as additional training and support, locally. #TheAHALife is more than a company culture; it is our way of life. It embodies our commitment to work-life harmonization and is guided by our core values where our employees can thrive both personally and professionally. Discover why you will Be Seen. Be Heard. Be Valued at the American Heart Association by following us on LinkedIn , Instagram , Facebook , X , and at heart.jobs . • Implement and maintain enterprise security tools (e.g., SIEM, endpoint protection, vulnerability scanners, firewalls, cloud security tooling) according to established configurations and operational runbooks • Monitor security alerts, analyze logs, and investigate anomalies to detect and respond to threats; contribute to response playbooks and collaborate with SOC and IR teams for incident triage and root cause analysis • Perform vulnerability assessments across systems, networks, and applications; Support, track, and report on remediation progress and exceptions • Apply technical controls to meet regulatory, compliance, and internal policy requirements (e.g., NIST, PCI DSS, SOC 2, CIS, FedRAMP) supporting audits and assessments • Execute security control testing and participate in risk assessments in alignment with engineering practices with enterprise risk management goals and control frameworks • Apply secure configurations for systems, networks, cloud resources, and endpoints leveraging established benchmarks and baselines (i.e., CIS) to ensure consistent hardening • Maintain configuration management standards within CI/CD pipelines and secure configurations baselines (i.e., OWASP) under direction of senior engineers • Develop scripts, integrations, or automation to improve detection, response, and reporting; contribute to ideas for process improvements • Integrate security controls into CI/CD pipelines, cloud environments, and endpoint platforms following defined standards • Support incident investigations with log analysis, technical troubleshooting, and forensic data collection; Participate in tabletop exercises, post-incident reviews, and lessons learns implementation • Bachelor's degree or equivalent experience • 3 years minimum prior relevant experience • Required Skills: Analytical Thinking, Technical Troubleshooting, Collaboration, Problem Solving, Effective Communication, Adapability, Time Management, Cybersecurity Engineer, Application Security, Cloud Security, Network Security, Risk Awareness, Documentation & Reporting, endpoint detection and response (EDR), vulnerability management, Experience addressing misconfigurations The American Heart Association invests in its people. Here are the main components of our total rewards package. Visit Rewards & Benefits to see more details. • Compensation – Our goal is to ensure you have a competitive base salary. That’s why we regularly review the market value of jobs and make adjustments, as needed. • Performance and Recognition – You are rewarded for achieving success through annual salary planning and incentive programs; based on the type of position • Benefits – We offer a wide array of benefits including medical, dental, vision, disability, and life insurance, along with a robust retirement program that includes an employer match and automatic contribution. As a mark of our commitment to employee well-being, we also offer an employee assistance program, employee wellness program and telemedicine, and medical consultation. • Professional Development – You can join one of our many Employee Resource Groups (ERG) or be a mentor/mentee in our professional mentoring program. Heart U is the Association’s national online university, with more than 100,000 resources designed to meet your needs and busy schedule. • Work-Life Harmonization – The Association offers Paid Time Off (PTO) at a minimum of 16 days per year for new employees. The number of days will increase based on seniority level. You will also have a total of 12 paid holidays off each year, which includes several days off at the end of the year. • Tuition Assistance - We support the career development of all employees. This program provides financial assistance to employees who wish to further their education and career in relation to their current duties and responsibilities, or for potential future positions in the organization. The American Heart Association’s 2028 Goal: Building on over 100 years of trusted leadership in cardiovascular and brain health, by 2028 the Association will drive breakthroughs and implement proven solutions in science, policy, and care for healthier people and communities. The greatest discoveries in health must reach everyone where they are. At American Heart Association | American Stroke Association, our mission is to be a relentless force for a world of longer, healthier lives, regardless of race, ethnicity, gender, gender identity, religion, age, language, sexual orientation, national origin and physical or cognitive abilities. This position not a match with your skills? Click here to see other opportunities. In accordance with local and state laws where applicable, qualified applicants with arrest or conviction records will be considered for employment. EOE/Protected Veterans/Persons with Disabilities #LI-Hybrid

Requirements

Must-haves

The American Heart Association has an excellent opportunity for a Cybersecurity Engineer in Dallas, TX .
Implement and maintain enterprise security tools (e.g., SIEM, endpoint protection, vulnerability scanners, firewalls, cloud security tooling) according to established configurations and operational runbooks
Monitor security alerts, analyze logs, and investigate anomalies to detect and respond to threats; contribute to response playbooks and collaborate with SOC and IR teams for incident triage and root cause analysis
Perform vulnerability assessments across systems, networks, and applications; Support, track, and report on remediation progress and exceptions
Apply technical controls to meet regulatory, compliance, and internal policy requirements (e.g., NIST, PCI DSS, SOC 2, CIS, FedRAMP) supporting audits and assessments
Execute security control testing and participate in risk assessments in alignment with engineering practices with enterprise risk management goals and control frameworks
Apply secure configurations for systems, networks, cloud resources, and endpoints leveraging established benchmarks and baselines (i.e., CIS) to ensure consistent hardening
Maintain configuration management standards within CI/CD pipelines and secure configurations baselines (i.e., OWASP) under direction of senior engineers
Develop scripts, integrations, or automation to improve detection, response, and reporting; contribute to ideas for process improvements
Integrate security controls into CI/CD pipelines, cloud environments, and endpoint platforms following defined standards
Support incident investigations with log analysis, technical troubleshooting, and forensic data collection; Participate in tabletop exercises, post-incident reviews, and lessons learns implementation
Bachelor's degree or equivalent experience
3 years minimum prior relevant experience
The American Heart Association invests in its people. Here are the main components of our total rewards package. Visit Rewards & Benefits to see more details.
Compensation – Our goal is to ensure you have a competitive base salary. That’s why we regularly review the market value of jobs and make adjustments, as needed.
Performance and Recognition – You are rewarded for achieving success through annual salary planning and incentive programs; based on the type of position
This position not a match with your skills? Click here to see other opportunities.
In accordance with local and state laws where applicable, qualified applicants with arrest or conviction records will be considered for employment.
EOE/Protected Veterans/Persons with Disabilities

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cd

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

Pto

Paid Time Off

Wellness

Professional Development