[Remote] Security Engineer
Note: The job is a remote job and is open to candidates in USA. U.S. Urology Partners is an independent provider of urology and related specialty services operating a nationwide network of medical practices. The Security Engineer will administer and support the organization’s cybersecurity technology stack, including security monitoring, identity and access management, endpoint protection, cloud security, vulnerability remediation, and incident response. The role collaborates with Information Technology and Engineering teams to implement secure enterprise systems and maintain effective technical security controls.
Responsibilities
- Administer, configure, maintain, monitor, and troubleshoot enterprise cybersecurity technologies, including endpoint protection, security monitoring, identity services, secure access solutions, backup security, and Microsoft 365 security capabilities
- Support the administration and ongoing optimization of the organization's security platforms, including Arctic Wolf Managed SOC/SIEM, CrowdStrike Falcon, Microsoft Entra ID, Microsoft 365 Security, Rubrik, Cato Networks SASE, and future security technologies as they are implemented
- Work in coordination with Infrastructure, Network, Cloud, Systems, and Application Engineering teams to implement security controls, resolve technical issues, and ensure secure deployment and operation of enterprise technologies
- Collaborate with the Security Analyst and managed security service providers to investigate, analyze, and respond to security alerts, suspicious activity, and cybersecurity incidents. Assist with containment, remediation, recovery, and documentation of security events
- Implement and maintain security configurations for Microsoft Entra ID, Conditional Access, Multi-Factor Authentication, privileged access, and identity-related security controls while coordinating changes with Information Technology teams responsible for user administration and infrastructure services
- Support the implementation, administration, and continuous improvement of identity governance, email security, endpoint protection, secure access, and other cybersecurity technologies as directed by the CISO
- Perform vulnerability assessments, review vulnerability reports, coordinate remediation activities with system owners and engineering teams, validate corrective actions, and assist in maintaining secure system configurations
- Assist Information Technology teams with implementing security hardening standards, endpoint protections, secure configurations, and technical safeguards across servers, workstations, cloud services, network infrastructure, and business applications
- Support administration and validation of backup and recovery security controls, participate in disaster recovery testing, and assist with ransomware recovery preparedness activities in coordination with Information Technology personnel
- Participate in the planning, implementation, testing, and deployment of new technologies, software upgrades, infrastructure changes, and security-related projects to ensure appropriate security controls are incorporated throughout the implementation lifecycle
- Support the integration of newly acquired medical practices by assisting with the deployment of enterprise security technologies, implementation of organizational security standards, and migration to approved security platforms
- Develop, maintain, and update technical documentation, operational procedures, configuration standards, diagrams, and support documentation for security technologies and related processes
- Provide technical support and guidance to Information Technology personnel regarding security technologies, security best practices, and implementation of security controls while maintaining strong working relationships across departments
- Participate in after-hours maintenance activities, planned technology implementations, and cybersecurity incident response activities when necessary to support business operations
- Maintain current knowledge of cybersecurity threats, vulnerabilities, technologies, and industry best practices to support continuous improvement of the organization's technical security capabilities
- Perform other duties and responsibilities as assigned in support of the Information Security program
Skills
- Associate's degree or Bachelor's degree in Information Technology, Information Security, Computer Science, or a related field, or demonstrated equivalent experience
- Two (2) to five (5) years of experience in cybersecurity, systems administration, infrastructure engineering, cloud engineering, networking, or a related technical field, or demonstrated equivalent experience
- Experience administering or supporting enterprise security technologies, including endpoint protection, identity and access management, security monitoring, email security, secure remote access, backup security, or cloud security platforms
- Experience supporting Microsoft 365, Microsoft Entra ID, Windows Server, Active Directory, cloud technologies, networking, virtualization, or enterprise infrastructure
- Familiarity with security concepts, including endpoint protection, vulnerability management, identity and access management, incident response, cloud security, Zero Trust, and system hardening
- Experience working collaboratively with infrastructure, networking, cloud, systems, and application engineering teams to implement and maintain secure enterprise environments
- Familiarity with scripting, automation, or administrative tools such as PowerShell or similar technologies
- Familiarity with HIPAA Security Rule requirements, healthcare environments, or other regulated industries is preferred
- Strong analytical, troubleshooting, organizational, verbal communication, and written communication skills
Benefits
- Comprehensive medical plans
- Comprehensive dental plans
- Comprehensive vision plans
- HSA / FSA
- 401(k) matching
- Employee Assistance Program (EAP)
Company Overview