Security Engineer

About the role

New York Cancer & Blood Specialists is seeking a Security Engineer to design, implement, and maintain a robust security infrastructure that safeguards IT systems, networks, medical devices, and patient data. You will collaborate with IT, clinical, and compliance teams to embed security across every layer of the organization.

Key responsibilities

• Design, implement, and maintain security controls for on‑premises networks, cloud environments, endpoints, and clinical/administrative applications (EMR, lab systems, medical devices).
• Conduct vulnerability assessments, remediate findings, and continuously monitor security tools such as SOC, EDR, and SIEM platforms.
• Lead incident‑response activities, including investigation, containment, and remediation of security events.
• Ensure all systems and processes comply with HIPAA, HITRUST, and other healthcare regulations.
• Support internal and external audits, risk assessments, and regulatory inspections.
• Manage identity and access management (IAM) practices, performing least‑privilege access reviews.
• Evaluate, pilot, and deploy new security technologies to strengthen the security posture.
• Develop and maintain security policies, documentation, and provide awareness training to staff.

Required profile

• 3+ years of experience in security engineering, infrastructure security, or a related IT security role.
• Solid understanding of network, endpoint, and cloud security fundamentals.
• Experience with security tools such as SIEM platforms, vulnerability scanners, and EDR solutions.
• Familiarity with healthcare regulatory requirements (HIPAA, HITRUST) is a plus.

Required skills

• Network security
• Endpoint security
• Cloud security
• SIEM platforms
• Vulnerability scanners
• EDR solutions
• Identity and Access Management (IAM)
• Least‑privilege access reviews

What we offer

• Opportunity to work in a mission‑driven healthcare environment.
• Collaborative cross‑functional teams.
• Access to cutting‑edge security technologies.