Security Engineer

Envision Radiology•Colorado Springs, CO

12h•$101,320 - $126,650•Onsite

About The Position

The Security Engineer is responsible for designing, implementing, administering, and continuously improving enterprise cybersecurity technologies and technical controls that protect Envision Radiology's systems, networks, applications, identities, endpoints, and information assets. This position partners with the Cybersecurity Manager, Security Administrators, Information Technology teams, Compliance, and business stakeholders to implement security requirements, investigate cybersecurity events, and remediate vulnerabilities in alignment with HIPAA, HITRUST, the NIST Cybersecurity Framework, and PCI DSS.

Requirements

Five (5) or more years of progressively responsible experience in cybersecurity, information security, or a closely related technical field.
Experience designing, implementing, and administering enterprise cybersecurity technologies across endpoint, identity, cloud, email, network, vulnerability management, and security monitoring environments.
Experience leading technical incident response activities, security investigations, containment, remediation, recovery, and root-cause analysis.
Experience performing security architecture reviews, technical risk assessments, and security control evaluations.
Experience supporting internal and external security audits, regulatory assessments, customer security reviews, and compliance activities.
Strong knowledge of Microsoft enterprise technologies, including Microsoft Entra ID, Microsoft 365, Windows Server, Active Directory, Azure, virtualization platforms, and cloud services.
Ability to communicate technical risks, findings, and recommendations effectively to technical and non-technical audiences.
Strong written, verbal, interpersonal, documentation, and presentation skills.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.

Nice To Haves

Experience scripting or automating cybersecurity and administrative tasks using PowerShell, Python, or similar technologies preferred.
Experience supporting healthcare or another highly regulated industry preferred.
One or more of the following certifications preferred: CISSP, GSEC, GCED, Security+, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Identity and Access Administrator Associate (SC-300), CrowdStrike Certified Falcon Administrator, or other relevant cloud, networking, or cybersecurity vendor certifications.

Responsibilities

Designs, implements, administers, and continuously improves enterprise cybersecurity technologies and technical controls, including endpoint protection, endpoint detection and response (EDR), identity security, email security, cloud security, network security, vulnerability management, and security monitoring platforms.
Monitors, investigates, and responds to cybersecurity alerts, events, and incidents by performing technical analysis, containment, remediation, recovery, evidence preservation, and root-cause analysis in coordination with the Cybersecurity Manager and other technology teams.
Leads the technical execution of the vulnerability management program by identifying and validating vulnerabilities, evaluating risk and exploitability, coordinating remediation with system owners, verifying corrective actions, and maintaining accurate remediation records and reporting.
Engineers and maintains security controls for Identity and Access Management (IAM), privileged access, authentication, access reviews, and identity threat protection while partnering with IT Operations and Systems Administration on identity lifecycle administration and operational support.
Conducts security architecture reviews and technical risk assessments for infrastructure, cloud services, applications, vendors, acquisitions, and strategic technology initiatives, documenting findings and recommending practical risk-reduction measures.
Develops and maintains cybersecurity configurations, technical standards, operating procedures, playbooks, diagrams, documentation, and automation that support consistent security operations, incident response, regulatory compliance, and effective knowledge transfer.
Supports internal and external security assessments, audits, customer security reviews, and compliance activities by validating control implementation, gathering technical evidence, addressing findings, and assisting with remediation plans aligned with HIPAA, HITRUST, NIST, PCI DSS, and other applicable requirements.
Serves as a senior technical cybersecurity resource for the Cybersecurity team and the broader Information Technology organization by providing technical leadership, mentoring Security Administrators and IT staff, promoting cross-training and knowledge sharing, supporting cybersecurity training and awareness initiatives, evaluating emerging threats and technologies, and recommending continuous improvements to Envision Radiology's overall security posture.
Performs other duties as assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.