Security Engineer

Integrated Dermatology•Boca Raton, FL

About The Position

The Security Engineer designs, implements, monitors, and continuously improves Integrated Dermatology’s cybersecurity program. The role is a primary technical resource for security architecture, threat detection, endpoint security, identity protection, cloud security, regulatory compliance support, and incident response. It works across infrastructure, business applications, practice operations, and executive leadership to reduce organizational risk and protect the confidentiality, integrity, and availability of company systems and data. The Security Engineer evaluates emerging threats, implements security technologies, develops security standards, and evolves organizational security practices alongside the changing cybersecurity landscape. The position requires technical expertise and understanding of healthcare security requirements, while balancing risk reduction with business operations.

Requirements

At least 5 years of experience in cybersecurity engineering, identity security, endpoint security, security operations, incident response, vulnerability management, or cybersecurity architecture.
Advanced experience administering and supporting Microsoft Defender, Microsoft Purview, Conditional Access, PIM, Microsoft Entra, and Microsoft security technologies.
Experience administering Huntress EDR, Huntress ITDR, ThreatLocker, or comparable endpoint detection, identity threat detection, application control, and endpoint security platforms.
Strong knowledge of SASE, Zero Trust networking principles, identity security, endpoint protection, and modern access-control architectures.
Experience administering Microsoft Sentinel or a comparable SIEM platform, including log analysis, alert investigation, detection-rule management, incident triage, and security reporting.
Strong knowledge of HIPAA security requirements, healthcare cybersecurity practices, security and privacy controls, and applying regulatory requirements in a technology environment.
Experience performing incident response, security investigations, vulnerability management, threat analysis, and risk assessments.
Strong understanding of cloud security, Microsoft 365 security, Azure security controls, identity governance, and data protection technologies.
Strong communication, documentation, analytical, and cross-functional collaboration skills.
Experience designing and implementing Zero Trust architectures, SASE technologies, identity governance programs, and modern endpoint security frameworks.
Experience securing Microsoft 365, Azure, Power Platform, Dynamics 365, and SaaS platforms within regulated environments.
Ability to remain current with the evolving cybersecurity landscape, emerging threats, attack patterns, and defensive technologies.
Experience using PowerShell, Microsoft Graph, APIs, or security orchestration technologies to automate security administration, monitoring, investigation, or response activities.

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Engineering, or a related field; equivalent professional experience may be considered.
Microsoft Sentinel experience.
Microsoft SC-200 certification.
Microsoft SC-300 certification.
CISSP certification.
CISM certification.
CompTIA Security+ or comparable cybersecurity certification.
Healthcare cybersecurity experience.
M&A integration security experience.

Responsibilities

Serve as the technical lead for Microsoft security technologies, including Microsoft Defender, Microsoft Purview, Conditional Access, Privileged Identity Management (PIM), Entra ID Protection, and related platforms.
Administer, monitor, and optimize Huntress EDR, Huntress ITDR, ThreatLocker, Microsoft Defender, and other endpoint protection technologies.
Design, implement, and maintain Zero Trust security architectures, Secure Access Service Edge (SASE) technologies, endpoint protection strategies, and identity security controls.
Monitor and investigate security alerts, suspicious activity, account compromise attempts, data-protection incidents, and endpoint security events.
Lead vulnerability management, security remediation, hardening efforts, security assessments, and organizational risk-reduction initiatives.
Develop and maintain incident response procedures, security playbooks, recovery procedures, and investigation documentation.
Administer and maintain SIEM solutions, security monitoring platforms, threat intelligence feeds, detection rules, and security reporting.
Partner with Compliance, Legal, IT Operations, business leadership, and third-party vendors to implement controls supporting HIPAA, privacy, and regulatory obligations.
Evaluate security risks associated with acquisitions, third-party vendors, cloud platforms, business applications, and external integrations.
Track emerging threats, attack techniques, industry trends, and cybersecurity technologies, and recommend improvements to the organization’s security posture.
Design and maintain enterprise security architecture standards for identity, endpoint security, cloud services, network security, data protection, privileged access, and third-party integrations.
Participate in project reviews, application assessments, vendor evaluations, acquisitions, and infrastructure initiatives to identify security risks and recommend mitigation strategies.
Develop and support security awareness initiatives, phishing exercises, end-user training, and policy education programs.
Develop and maintain security automations, alert-enrichment workflows, response actions, and system integrations using Microsoft Sentinel, Microsoft Graph, PowerShell, APIs, or other approved technologies.
Support internal and external security audits, compliance assessments, risk assessments, penetration testing activities, and remediation planning.
Develop and maintain security dashboards, KPIs, executive reporting, risk registers, remediation tracking, and security maturity measurements.
Evaluate security technologies and improve controls based on emerging threats, best practices, regulatory requirements, and business objectives.