HCA Healthcare · Nashville, TN

Salary
Posted
Jul 13, 2026
Location
Nashville, TN
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A hands-on security engineering role focused on protecting AI and data platforms within a large healthcare organization. Day-to-day work involves vulnerability assessments, threat modeling for ML and LLM-based systems, and embedding security controls into CI/CD and model deployment pipelines. The role suits an experienced security or cloud engineer with a background in DevSecOps, cloud environments, and healthcare compliance requirements such as HIPAA and HITECH.

Senior level · 5+ years · Nashville-Davidson--Murfreesboro--Franklin, TN · Bachelor's required · Full-time

Must have (9)
Google Cloud, AWS or AzureencryptionIAMCI/CDPythonHIPAAHITECHDevSecOpsCSPM
Nice to have (4)
CISSP, Cism or CehLLMsadversarial MLdata cataloging

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

Roughly 20 people in the Nashville-Davidson--Murfreesboro--Franklin, TN area plausibly meet what this posting asks for (information security analysts). range 6–30

Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.

What won't set you apart
Python51%IAM45%CI/CD45%CSPM42%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $117,968 (middle half $84,263–$159,011).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (7)

Location is inferred as HCA Healthcare's corporate headquarters in Nashville, TN; the posting does not explicitly state a city.

The JD lists a Bachelor's Degree as 'required' (with Information Systems noted as 'preferred' concentration), so Bachelors is treated as a hard gate.

Certifications (CISSP, CISM, CEH, cloud security certs) are listed under 'Licenses, Certifications and Training' without explicit 'required' language and appear aspirational rather than gating — treated as preferred. CISSP is listed as the primary with CISM and CEH as alternatives since all three are listed together.

Google Cloud is named as the preferred cloud platform within the required skills block ('preferably Google Cloud'); AWS and Azure are listed as alternatives since the JD accepts equivalent cloud security experience.

The role blends security engineering (threat modeling, vulnerability management, secure pipeline integration) with hands-on software/scripting work, making 15-1252 a plausible runner-up, but the primary framing is security analysis and controls — 15-1212 is the better fit.

No compensation figures are provided in the posting.

Remote status is not stated; given HCA Healthcare's on-site operational culture and no remote language, remote is set to false.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗