Security Engineer

Integrated Dermatology•Boca Raton, FL

About The Position

Integrated Dermatology is a national dermatology practice that acquires and partners with dermatology practices across the United States. The Security Engineer designs, implements, monitors, and continuously improves the organization's cybersecurity program. The role is a primary technical resource for security architecture, threat detection, endpoint security, identity protection, cloud security, regulatory compliance support, and incident response. Working across infrastructure, business applications, practice operations, and executive leadership, the Security Engineer reduces organizational risk and strengthens controls to protect the confidentiality, integrity, and availability of company systems and data. The position evaluates emerging threats, implements security technologies, develops standards, and evolves security practices alongside the cybersecurity landscape. The ideal candidate has strong technical expertise, understands healthcare security requirements, and can balance risk reduction with business operations.

Requirements

At least 5 years of experience in cybersecurity engineering, identity security, endpoint security, security operations, incident response, vulnerability management, or cybersecurity architecture.
Advanced experience administering and supporting Microsoft Defender, Microsoft Purview, Conditional Access, PIM, Microsoft Entra, and Microsoft security technologies.
Experience administering Huntress EDR, Huntress ITDR, ThreatLocker, or comparable endpoint detection, identity threat detection, application control, and endpoint security platforms.
Strong knowledge of SASE, Zero Trust networking principles, identity security, endpoint protection, and modern access-control architectures.
Experience administering Microsoft Sentinel or a comparable SIEM platform, including log analysis, alert investigation, detection-rule management, incident triage, and security reporting.
Strong knowledge of HIPAA security requirements, healthcare cybersecurity practices, security and privacy controls, and applying regulatory requirements in technology environments.
Experience with incident response, security investigations, vulnerability management, threat analysis, and risk assessments.
Strong understanding of cloud security, Microsoft 365 security, Azure security controls, identity governance, and data protection technologies.
Strong communication, documentation, analytical, and cross-functional collaboration skills.
Experience designing and implementing Zero Trust architectures, SASE technologies, identity governance programs, and modern endpoint security frameworks.
Experience securing Microsoft 365, Azure, Power Platform, Dynamics 365, and SaaS platforms in regulated environments.
Ability to stay current with evolving cybersecurity threats, attack patterns, and defensive technologies.
Experience using PowerShell, Microsoft Graph, APIs, or security orchestration technologies to automate security administration, monitoring, investigation, or response activities.
A bachelor's degree in Cybersecurity, Information Technology, Information Systems, Engineering, or a related field is preferred; equivalent professional experience may be considered.

Nice To Haves

Microsoft Sentinel experience.
Microsoft SC-200 certification.
Microsoft SC-300 certification.
CISSP certification.
CISM certification.
Healthcare cybersecurity experience.
M&A integration security experience.
CompTIA Security+ or a comparable cybersecurity certification.

Responsibilities

Serve as the technical lead for Microsoft security technologies, including Microsoft Defender, Microsoft Purview, Conditional Access, Privileged Identity Management (PIM), Entra ID Protection, and related platforms.
Administer, monitor, and optimize Huntress EDR, Huntress ITDR, ThreatLocker, Microsoft Defender, and other endpoint protection technologies.
Design, implement, and maintain Zero Trust security architectures, SASE technologies, endpoint protection strategies, and identity security controls.
Monitor and investigate security alerts, suspicious activity, account compromise attempts, data-protection incidents, and endpoint security events.
Lead vulnerability management, security remediation, hardening efforts, security assessments, and risk-reduction initiatives.
Develop and maintain incident response procedures, security playbooks, recovery procedures, and investigation documentation.
Administer and maintain SIEM solutions, security monitoring platforms, threat intelligence feeds, detection rules, and security reporting.
Partner with Compliance, Legal, IT Operations, business leadership, and vendors to implement controls that support HIPAA, privacy, and regulatory obligations.
Evaluate security risks related to acquisitions, third-party vendors, cloud platforms, business applications, and external integrations.
Monitor emerging threats, attack techniques, industry trends, and cybersecurity technologies, and recommend improvements to the organization's security posture.
Design and maintain enterprise security architecture standards for identity, endpoint security, cloud services, network security, data protection, privileged access, and third-party integrations.
Participate in project reviews, application assessments, vendor evaluations, acquisitions, and infrastructure initiatives to identify risks and recommend mitigations.
Develop and support security awareness initiatives, phishing exercises, end-user training, and policy education.
Develop and maintain security automations, alert-enrichment workflows, response actions, and system integrations using Microsoft Sentinel, Microsoft Graph, PowerShell, APIs, or other approved technologies.
Support internal and external security audits, compliance assessments, risk assessments, penetration testing activities, and remediation planning.
Develop and maintain security dashboards, KPIs, executive reporting, risk registers, remediation tracking, and security maturity measurements.
Evaluate new security technologies and continuously improve controls in response to threats, best practices, regulatory requirements, and business objectives.