The posting
Company Description
Integrated Dermatology is a leading national dermatology practice that acquires and partners with dermatology practices across the United States. The culture at ID is a reflection of its people. Our environment is filled with hard-working, dynamic individuals who come together to ensure the success of our partner dermatologists.
Position Summary:
The Security Engineer is responsible for designing, implementing, monitoring, and continuously improving Integrated Dermatology's cybersecurity program. This position serves as a primary technical resource for security architecture, threat detection, endpoint security, identity protection, cloud security, regulatory compliance support, and incident response.
The Security Engineer works across infrastructure, business applications, practice operations, and executive leadership teams to reduce organizational risk, strengthen security controls, and ensure the confidentiality, integrity, and availability of company systems and data. This role proactively evaluates emerging threats, implements security technologies, develops security standards, and ensures organizational security practices evolve alongside the changing cybersecurity landscape.
The ideal candidate possesses strong technical expertise, a deep understanding of healthcare security requirements, and the ability to balance risk reduction with business operations.
Job Description
- Serve as the organization's technical lead for Microsoft security technologies including Microsoft Defender, Microsoft Purview, Conditional Access, Privileged Identity Management (PIM), Entra ID Protection, and related security platforms.
- Administer, monitor, and optimize Huntress EDR, Huntress ITDR, ThreatLocker, Microsoft Defender, and other endpoint protection technologies.
- Design, implement, and maintain Zero Trust security architectures, Secure Access Service Edge (SASE) technologies, endpoint protection strategies, and identity security controls.
- Monitor and investigate security alerts, suspicious activity, account compromise attempts, data-protection incidents, and endpoint security events.
- Lead vulnerability management, security remediation, hardening efforts, security assessments, and risk reduction initiatives across the organization.
- Develop and maintain incident response procedures, security playbooks, recovery procedures, and security investigation documentation.
- Administer and maintain SIEM solutions, security monitoring platforms, threat intelligence feeds, detection rules, and security reporting.
- Partner with Compliance, Legal, IT Operations, business leadership, and third-party vendors to implement security controls that support HIPAA, privacy, and regulatory obligations.
- Evaluate security risks associated with acquisitions, third-party vendors, cloud platforms, business applications, and external integrations.
- Maintain awareness of emerging threats, attack techniques, industry trends, and evolving cybersecurity technologies while recommending improvements to the organization's security posture.
- Design and maintain enterprise security architecture standards covering identity, endpoint security, cloud services, network security, data protection, privileged access, and third-party integrations.
- Participate in project reviews, application assessments, vendor evaluations, acquisitions, and infrastructure initiatives to identify security risks and recommend mitigation strategies.
- Develop and support organizational security awareness initiatives, phishing exercises, end-user security training, and policy education programs.
- Develop and maintain security automations, alert-enrichment workflows, response actions, and system integrations using Microsoft Sentinel, Microsoft Graph, PowerShell, APIs, or other approved automation technologies.
- Support internal and external security audits, compliance assessments, risk assessments, penetration testing activities, and remediation planning efforts.
- Develop and maintain security dashboards, KPIs, executive reporting, risk registers, remediation tracking, and security maturity measurements.
- Evaluate new security technologies and continuously improve security controls based on emerging threats, industry best practices, regulatory requirements, and business objectives.
Qualifications
- Advanced experience administering and supporting Microsoft Defender, Microsoft Purview, Conditional Access, Privileged Identity Management (PIM), Microsoft Entra, and Microsoft security technologies.
- Experience administering Huntress EDR, Huntress ITDR, ThreatLocker, or comparable endpoint detection, identity threat detection, application control, and endpoint security platforms.
- Strong knowledge of Secure Access Service Edge (SASE), Zero Trust networking principles, identity security, endpoint protection, and modern access-control architectures.
- Experience administering Microsoft Sentinel or a comparable SIEM platform, including log analysis, alert investigation, detection-rule management, incident triage, and security reporting.
- Strong knowledge of HIPAA security requirements, healthcare cybersecurity practices, security and privacy controls, and the application of regulatory requirements within a technology environment.
- Experience performing incident response, security investigations, vulnerability management, threat analysis, and risk assessments.
- Strong understanding of cloud security, Microsoft 365 security, Azure security controls, identity governance, and data protection technologies.
- Strong communication, documentation, analytical, and cross-functional collaboration skills.
- Experience designing and implementing Zero Trust architectures, SASE technologies, identity governance programs, and modern endpoint security frameworks.
- Experience securing Microsoft 365, Azure, Power Platform, Dynamics 365, and SaaS platforms within regulated environments.
- Demonstrated ability to remain current with the evolving cybersecurity landscape, emerging threats, attack patterns, and defensive technologies.
- Experience using PowerShell, Microsoft Graph, APIs, or security orchestration technologies to automate security administration, monitoring, investigation, or response activities.
Preferred Qualifications:
- Microsoft Sentinel experience.
- Microsoft SC-200 certification.
- Microsoft SC-300 certification.
- CISSP certification.
- CISM certification.
- Healthcare cybersecurity experience.
- M&A integration security experience.
Additional Information
Job Type:
- Full-time
Experience:
- 5+ years in cybersecurity engineering, identity security, endpoint security, security operations, incident response, vulnerability management, or cybersecurity architecture.
Education:
- Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Engineering, or related field preferred. Equivalent professional experience may be considered.
Certifications/Licenses:
- Microsoft SC-200 or SC-300 certification preferred. CISSP, CISM, CompTIA Security+, or comparable cybersecurity certification is a plus.
Integrated Dermatology and it's entities provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
