Montefiore Medical Center logo

Attack Surface Management Engineer

Montefiore Medical Center

  • Elmsford, NY
  • 30+ days ago
  • $112,000–$140,000 Per Year
Want to know if you’re a fit?
Upload your resume and let our AI show you.

Skills

  • Analysis Skillsunmatched
  • Auditingunmatched
  • Automationunmatched
  • Cloud Computingunmatched
  • Communication Skillsunmatched
  • CompTIA - Computing Technology Industry Associationunmatched
  • Computer Securityunmatched
  • Consultingunmatched
  • Data Qualityunmatched
  • Detail Orientedunmatched
  • DevOpsunmatched
  • Emerging Technologyunmatched
  • Establish Prioritiesunmatched
  • GIAC - Global Information Assurance Certificationunmatched
  • GSEC - GIAC Security Essentials Certificationunmatched
  • Geneticsunmatched
  • HIPAA (Health Insurance Portability and Accountability Act)unmatched
  • Healthcareunmatched
  • Hospital/Healthcare Constructionunmatched
  • Incident Responseunmatched
  • Information Technology & Information Systemsunmatched
  • Information/Data Security (InfoSec)unmatched
  • Internet Securityunmatched
  • Internet of Thingsunmatched
  • Machine Toolunmatched
  • Medical Treatmentunmatched
  • Militaryunmatched
  • Nessusunmatched
  • Patient Careunmatched
  • Patient Safetyunmatched
  • Penetration Testingunmatched
  • Performance Metricsunmatched
  • Pharmacovigilanceunmatched
  • Product Lifecycleunmatched
  • Protective Servicesunmatched
  • Reporting Dashboardsunmatched
  • Riskunmatched
  • Risk Managementunmatched
  • Security Analysisunmatched
  • Software Engineeringunmatched
  • Standard Operating Procedures (SOP)unmatched
  • Supplier Relationship Management (SRM)unmatched
  • Technical Writingunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • Vendor/Supplier Relationsunmatched

Description

City/State:

Elmsford, New York

Grant Funded:

No

Department:

Work Shift:

Day

Work Days:

MON-FRI

Scheduled Hours:

8:30 AM-5 PM

Scheduled Daily Hours:

7.5 HOURS

Pay Range:

$112,000.00-$140,000.00

Montefiore is ranked among the top hospitals nationally and regionally by U.S. News & World Report. For more than 100 years we have been innovating new treatments, procedures, and approaches to patient care, producing stellar outcomes and raising the bar for academic medical centers in the region and around the world. Our work to improve health outcomes in underserved communities is unparalleled in the United States. Our workforce is among the most diverse in the US: Montefiore associates speak 60+ languages.

As a Cybersecurity Engineer in Montefiore Technology, you directly support patient safety, clinical operations, and the protection of sensitive health information. This role provides the opportunity to work deeply with modern security technologies while contributing to our mission-driven organization where cybersecurity is essential to care delivery.

The Attack Surface Management (ASM) Engineer is a security engineering role responsible for conducting and supporting attack surface discovery, vulnerability management, and exposure reduction activities across a complex healthcare environment. Building upon foundational ASM analyst experience, this role emphasizes hands-on technical execution, operational discipline, and collaboration with IT, Clinical Engineering, Cloud, and Security Operations teams to reduce cyber risk while supporting patient care.

Responsibilities:

  • Work with architecture and engineering personnel to implement automation and orchestration solutions where appropriate to improve efficiency and reduce manual effort.
  • Collaborate with IT, clinical teams, and other departments to ensure cybersecurity measures are integrated into everyday operations without disrupting patient care.
  • Manage vendor relationships related to security solutions, testing services, and consulting engagements.
  • Maintain security tools and services ensuring continued uptime and efficient execution of scanning activities.
  • Work with DevOps, cloud, and IT infrastructure teams to incorporate secure development practices and vulnerability remediation into their workflows.
  • Perform continuous device and asset discovery across IT, cloud, medical, and IoT/OT environments using approved ASM tooling.
  • Review and validate asset discovery and vulnerability findings to identify unmanaged, unknown, or misclassified assets.
  • Correlate exposure and vulnerability data with CMDBs, internal inventories, and cloud asset repositories to improve accuracy.
  • Support the enterprise vulnerability management lifecycle by tracking findings from identification through remediation.
  • Apply risk-based vulnerability prioritization using exploitability, asset criticality, and business impact.
  • Coordinate with system, application, and device owners to validate their proposed remediation actions and timelines.
  • Review third-party penetration testing results and assist with remediation tracking and validation.
  • Collaborate with SOC and incident response teams to contextualize vulnerabilities during investigations.
  • Develop and maintain technical documentation, SOPs, and workflows related to ASM processes.
  • Contribute to dashboards, KPIs, and reporting that measure attack surface coverage, vulnerability aging, and risk reduction.
  • Monitor vulnerability and threat trends relevant to healthcare and emerging technologies.
  • Assist with automation and orchestration initiatives to improve ASM efficiency under manager guidance.

Requirements:

  • Bachelor's degree or equivalent work experience.

  • 4 - 6 years Cybersecurity or IT experience with progression from vulnerability analysis, exposure management, or ASM analyst functions.

  • 4 - 6 years prior experience in highly regulated environments.

  • Strong proficiency with asset discovery and attack surface management technologies across on-prem IT, cloud, and IoMT environments.

  • Strong ability to interpret, validate, and assess findings from attack surface management (ASM) and vulnerability management platforms.

  • Strong understanding of the vulnerability management lifecycle, including remediation processes and governance requirements.

  • Foundational experience correlating data across CMDBs, cloud inventories, and security tools.

  • Ability to communicate technical findings to non-technical stakeholders with guidance.

  • Working knowledge of healthcare cybersecurity frameworks including HIPAA, HITECH, NIST CSF, HITRUST, HICP, and NYSDOH 405.46.

  • Strong analytical skills with attention to detail and data accuracy.

  • Ability to operate effectively within defined processes and escalate appropriately.

Preferred:

  • Prior experience in healthcare
  • One of the following certifications required or obtained within 18 months of hire:
  • CompTIA PenTest+
  • GIAC Security Essentials (GSEC)
  • Tenable Certified Nessus Auditor (TCNA)
  • CREST Registered Vulnerability Specialist (RVS)

#SF-DICE-MIT

#LI-MF1

Montefiore Health System, Inc. is an equal employment opportunity employer. Montefiore Health System, Inc. will recruit, hire, train, transfer, promote, layoff and discharge associates in all job classifications without regard to their race, color, religion, creed, national origin, alienage or citizenship status, age, gender, actual or presumed disability, history of disability, sexual orientation, gender identity, gender expression, genetic predisposition or carrier status, pregnancy, military status, marital status, or partnership status, or any other characteristic protected by law.

Numbers & Facts

LocationElmsford, NY
IndustryHealthcare Services
Salary$112,000–$140,000 Per Year
Company Size10,000 employees or more
Websitehttp://www.montefiore.org/

About Company

About Montefiore Medical Center

Commitment to Excellence

As the academic medical center and University Hospital for Albert Einstein College of Medicine, Montefiore Medical Center is nationally recognized for clinical excellence—breaking new ground in research, training the next generation of healthcare leaders, and delivering science-driven, patient-centered care.

Montefiore is ranked among the top hospitals nationally and regionally by U.S. News & World Report. For more than 100 years we have been innovating new treatments, new procedures and new approaches to patient care, producing stellar outcomes and raising the bar for medical centers in the region and around the world. As we build on this momentum, we continue to advance the practice of medicine and set the standard for excellence.

Enduring Mission and Distinguished History

The mission of Montefiore is to heal, to teach, to discover and to advance the health of the communities we serve.

From its beginning in 1884, as a facility for the care of patients with tuberculosis and other chronic illnesses, to the new millennium, Montefiore has been at the forefront of patient care, research and education and steadfast commitment to its community.

Our Services

We provide coordinated, compassionate and leading-edge care designed to reach people when and where they need it most. Through highly integrated teams of physicians, nurses, social workers, mental health professionals and other caregivers, we have created an innovative, seamless system of care focused around the patient.

Notable Centers of Excellence

At the intersection of Einstein science and Montefiore medicine is our commitment to scientific inquiry. This commitment has resulted in the creation of the Montefiore-Einstein Centers of Excellence in cancer care, cardiovascular services, transplantation and children’s health, where nationally recognized investigators and multidisciplinary clinical teams collaborate to develop and deliver advanced, innovative care.

Advanced Specialty and Surgical Care

We offer advanced, multidisciplinary care across specialties, delivering one standard of excellence for all. Our interventions are designed to help patients understand and manage their illness, advocate for their health, access the right treatments and receive the vital social support they need to flourish. On multiple fronts, Montefiore is developing more effective and less invasive approaches to complex problems from procedures to repair diseased hearts, protocols to treat complex cancers and medical devices designed to meet the needs of growing children.

Primary Care

With nearly 50 primary care locations throughout the New York metropolitan area, we are focusing on accessible, patient-centered primary and preventive care provided by leading physicians in the areas of family and internal medicine, pediatrics, obstetrics and gynecology, and a team of experts in nursing, health education, nutrition and pharmacy.

Providing Care Without Walls

Montefiore combines its deep commitment to the community with nationally-renowned expertise to reach people in locations easiest for them. Through Montefiore’s School Health Program (MSHP), Primary Care at Home programs, mobile medical and dental health vans and health education initiatives, Montefiore provides primary care services in non-traditional settings.

Through the formation of highly integrated teams of physicians, nurses, social workers, mental health professionals, care managers and other caregivers, we provide care around the patient, when and where they need it.

Research and Education

Montefiore's partnership with Einstein advances clinical and translational research to accelerate the pace at which new discoveries become the treatments and therapies that benefit patients. Together, the two institutions are among 38 academic medical centers nationwide to be awarded a prestigious Clinical and Translational Science Award (CTSA) by the National Institutes of Health.

The second-largest medical residency program in the country, with 1,251 residents and fellows across 89 programs, Montefiore provides the doctors of tomorrow a unique opportunity for education and training in one of the most diverse urban areas in the country — one where the population is global, the disease burden is high, and the need for quality care is great.

The partnership is further strengthened by the dual appointments of faculty and physicians across both organizations—enhancing synergies and collaborations for research, teaching and patient care.

Comprehensive Care Management

Since 1996, Montefiore has developed advanced models of care management to help patients, especially those with chronic diseases such as diabetes, heart failure and mental illness, achieve better health and improved wellbeing in a cost effective way. Montefiore goes beyond fragmented fee-for-service payments, assuming total responsibility for the quality and costs of care for some of our sickest patients.

Through CMO, Montefiore Care Management, we use a global prepayment or similar strategies to manage care for 200,000 individuals over the continuum, including hospital care, rehabilitation, outpatient care, professional services, home care, mental health counseling, community-based services, remote patient monitoring and many other programs.

Our leadership in coordinating care across multiple settings has earned us federal recognition from the Centers for Medicare and Medicaid Services as a Pioneer Accountable Care Organization. Montefiore's ACO is one of only 32 organizations in the nation, as well as the only one in New York State, to operate under this new model of providing Medicare beneficiaries with higher quality care, while reducing expenditures through enhanced care coordination.

Learn More

  • Mission, Vision and Values – Montefiore’s unique path of growth into the future and the clinical excellence and outstanding customer care that will get us there.
  • History and Milestones – Proud traditions guiding our mission and the moments that helped shape Montefiore into a premier academic medical center.
  • Commitment to the Community – Community health, education and neighborhood development.
  • Leadership – Executives and clinical chairs leading Montefiore’s advancements.
  • Physicians – Widely acclaimed medical professionals and specialists who provide our patients with the highest standards of care.
  • Nursing Staff – Highly competent and compassionate professionals committed to improving the health of their patients.
  • Ways to Give – Philanthropic opportunities and other ways to support Montefiore Medical Center.

Similar Jobs