Senior Security Engineer, Detection and Response Acadia Healthcare

Acadia Healthcare is a leading provider of behavioral healthcare services across the United States. Acadia operates a growing network of 250 plus behavioral healthcare facilities with approximately 11,100 beds in 39 states and Puerto Rico. With more than 23,000 employees serving approximately 75,000 patients daily, Acadia is the largest stand‑alone behavioral health company in the U.S.

Acadia Healthcare’s purpose is to Lead Care With Light and our mission is to be a world‑class organization that sets the standard for excellence in the treatment of mental health and addiction concerns. We strive to maintain our standing as a thought leader in the behavioral healthcare industry, providing treatment that is synonymous with compassion and innovation.

We are seeking an onsite Sr. Security Engineer – Detection and Response team member for our corporate office in Franklin, TN.

The first 90 days in this role will be fully in‑person to ensure comprehensive onboarding and training. After the initial period, the position will transition to a hybrid model, with 2 days remote and 3 days in the office each week.

The Sr. Security Engineer – Detection and Response position is instrumental in the safeguarding and preservation of Acadia’s crucial IT infrastructure and sensitive patient data. This role is entirely committed to upholding the most stringent cybersecurity standards within a healthcare environment, ensuring full compliance with industry regulations, and promptly addressing security incidents. Through the adept utilization of state‑of‑the‑art security technologies, automation, and strong partnerships with third‑party MSSPs, the Healthcare Security Engineer assumes a pivotal role in the delivery of superior patient care, the nurturing of patient trust, and the unwavering preservation of integrity and confidentiality within our healthcare systems.

• Security Operations:
  • Implement and manage security tools.
  • Continuously monitor for malicious activities and vulnerabilities.
  • Develop comprehensive threat detection and alerting procedures.
• Incident Response:
  • Lead and coordinate incident response, collaborating with IT and compliance teams.
  • Tailor incident response plans for healthcare settings.
  • Investigate and assess security incidents, with forensic analysis.
  • Develop containment and remediation strategies for risk mitigation.
• Security Infrastructure and Compliance:
  • Maintain and optimize security tools and systems.
  • Ensure compliance with healthcare regulations and standards.
  • Assist in external compliance audits.
• MSSP and Threat Intelligence:
  • Collaborate with MSSP for security tools and configurations.
  • Define SLAs and KPIs to align with security objectives.
  • Share threat intelligence with MSSP for unified threat response.
  • Coordinate incidents and create incident response playbooks with MSSP’s expertise.
• Continuous Improvement and Automation:
  • Enhance security through scripting and automation.
  • Develop custom security solutions.
  • Automate incident response with scripting.
  • Stay current with scripting languages and automation frameworks.
• Operational Metrics and SLOs:
  • Define operational metrics and KPIs.
  • Establish quantifiable performance indicators.
  • Regularly review and refine operational metrics.
  • Develop and monitor service level objectives (SLOs) to ensure operational excellence.

• Performs other tasks as assigned.

• Complies with organizational policies, procedures, performance improvement initiatives and maintains organizational and industry policies regarding confidentiality.
• Communicate clearly and effectively to person(s) receiving services and their family members, and other members of the health care team.
• Develops constructive and cooperative working relationships with others and maintains them over time.
• Encourages and builds mutual trust, respect and cooperation among team members.

• Education:
  
  A bachelor’s degree or equivalent work experience.
• Experience:
  
  Minimum of 5 years of cybersecurity experience, with a preference for at least 4 years in detection and response.
• Expertise:
  Strong knowledge of cybersecurity principles, technologies, and best…