Security Engineer

Description

You will be the technical lead for the company's Microsoft security tools, including Defender, Purview, Conditional Access, PIM, Entra ID Protection and related platforms.

The company is a national dermatology practice that acquires and partners with dermatology practices across the United States.

This role is the main technical resource for security architecture, threat detection, endpoint and identity protection, cloud security, compliance support and incident response.

You will work with infrastructure, business application, practice operations and executive teams to lower risk while keeping operations running.

The job covers confidentiality, integrity and availability of company systems and data, and it includes keeping security practices current as the threat landscape changes.

Responsibilities

• Run, monitor and tune Huntress EDR, Huntress ITDR, ThreatLocker, Defender and other endpoint protection tools.
• Design, build and maintain Zero Trust, SASE, endpoint, identity and privileged access controls, plus enterprise standards for cloud, network, data and third-party integrations.
• Watch alerts and investigate suspicious activity, account compromise attempts, data-protection problems and endpoint events.
• Own vulnerability management, remediation, hardening, security assessments and risk reduction work across the organization.
• Write and maintain incident response procedures, playbooks, recovery steps and investigation records.
• Operate the SIEM, monitoring platforms, threat intelligence feeds, detection rules and security reporting.
• Work with Compliance, Legal, IT Operations, leadership and vendors to put in place controls that meet HIPAA, privacy and other regulatory duties.
• Assess security risk from acquisitions, third-party vendors, cloud platforms, business applications and external integrations.
• Review projects, application assessments, vendor evaluations, acquisitions and infrastructure initiatives, and recommend mitigations.
• Build and maintain security dashboards, KPIs, executive reports, risk registers, remediation tracking and maturity metrics.
• Create automations, alert enrichment, response actions and integrations using Microsoft Sentinel, Microsoft Graph, PowerShell, APIs or other approved tools.
• Support internal and external audits, compliance and risk assessments, penetration testing and remediation planning.
• Run security awareness programs, phishing exercises, end-user training and policy education.
• Track emerging threats, attack techniques and new security technologies, and improve controls and recommend changes to the security posture.

Requirements

• At least 5 years in cybersecurity engineering, identity security, endpoint security, security operations, incident response, vulnerability management or security architecture.
• Advanced hands-on administration of Microsoft Defender, Purview, Conditional Access, PIM, Microsoft Entra and other Microsoft security products.
• Hands-on administration of Huntress EDR, Huntress ITDR, ThreatLocker, or comparable endpoint detection, identity threat detection, application control and endpoint platforms.
• Solid knowledge of SASE, Zero Trust networking, identity security, endpoint protection and modern access-control design.
• Experience administering Microsoft Sentinel or a comparable SIEM, including log analysis, alert investigation, detection-rule management, incident triage and reporting.
• Solid knowledge of HIPAA security rules, healthcare cybersecurity practice, security and privacy controls, and applying regulation within a technology environment.
• Experience with incident response, security investigations, vulnerability management, threat analysis and risk assessments.
• Solid understanding of cloud security, Microsoft 365 security, Azure security controls, identity governance and data protection.
• Strong communication, documentation, analytical and cross-functional collaboration skills.
• Experience designing and implementing Zero Trust architectures, SASE, identity governance programs and modern endpoint security frameworks.
• Experience securing Microsoft 365, Azure, Power Platform, Dynamics 365 and SaaS platforms in regulated environments.
• Ability to keep up with the changing cybersecurity landscape, emerging threats, attack patterns and defensive technologies.
• Experience using PowerShell, Microsoft Graph, APIs or security orchestration tools to automate administration, monitoring, investigation or response.
• Preferred: Microsoft Sentinel experience.
• Preferred: Microsoft SC-200 or SC-300 certification.
• Preferred: CISSP or CISM certification.
• Preferred: Healthcare cybersecurity experience.
• Preferred: M&A integration security experience.
• Preferred: A bachelor's degree in cybersecurity, information technology, information systems, engineering or a related field. Equivalent professional experience may be considered.
• A plus: CompTIA Security+ or comparable cybersecurity certification.

Conditions

Full-time position.

This policy applies to all employment terms, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leave, compensation and training.