Security Engineer

The Security Engineer is responsible for implementing, administering, maintaining, overseeing, and supporting the organization's cybersecurity technologies and technical security controls across a nationwide network of medical practices. Working under the direction of the Chief Information Security Officer (CISO), this position provides hands-on engineering support for the organization's security program and works closely with the Security Analyst, Information Technology teams, Infrastructure Engineers, Cloud Engineers, Network Engineers, Service Desk personnel, Application teams, and third-party service providers to protect the confidentiality, integrity, and availability of organizational systems and information.

The Security Engineer is responsible for the day-to-day operation of the organization's security technology stack, assisting with security monitoring, incident response, vulnerability remediation, identity and access management, endpoint protection, cloud security, and implementation of new security capabilities. Success in this role requires strong technical collaboration across Information Technology and Engineering teams to ensure security controls are effectively integrated into enterprise systems and operational processes.

Essential Duties and Responsibilities

• Administer, configure, maintain, monitor, and troubleshoot enterprise cybersecurity technologies, including endpoint protection, security monitoring, identity services, secure access solutions, backup security, and Microsoft 365 security capabilities.
• Support the administration and ongoing optimization of the organization's security platforms, including Arctic Wolf Managed SOC/SIEM, CrowdStrike Falcon, Microsoft Entra ID, Microsoft 365 Security, Rubrik, Cato Networks SASE, and future security technologies as they are implemented.
• Work in coordination with Infrastructure, Network, Cloud, Systems, and Application Engineering teams to implement security controls, resolve technical issues, and ensure secure deployment and operation of enterprise technologies.
• Collaborate with the Security Analyst and managed security service providers to investigate, analyze, and respond to security alerts, suspicious activity, and cybersecurity incidents. Assist with containment, remediation, recovery, and documentation of security events.
• Implement and maintain security configurations for Microsoft Entra ID, Conditional Access, Multi-Factor Authentication, privileged access, and identity-related security controls while coordinating changes with Information Technology teams responsible for user administration and infrastructure services.
• Support the implementation, administration, and continuous improvement of identity governance, email security, endpoint protection, secure access, and other cybersecurity technologies as directed by the CISO.
• Perform vulnerability assessments, review vulnerability reports, coordinate remediation activities with system owners and engineering teams, validate corrective actions, and assist in maintaining secure system configurations.
• Assist Information Technology teams with implementing security hardening standards, endpoint protections, secure configurations, and technical safeguards across servers, workstations, cloud services, network infrastructure, and business applications.
• Support administration and validation of backup and recovery security controls, participate in disaster recovery testing, and assist with ransomware recovery preparedness activities in coordination with Information Technology personnel.
• Participate in the planning, implementation, testing, and deployment of new technologies, software upgrades, infrastructure changes, and security-related projects to ensure appropriate security controls are incorporated throughout the implementation lifecycle.
• Support the integration of newly acquired medical practices by assisting with the deployment of enterprise security technologies, implementation of organizational security standards, and migration to approved security platforms.
• Develop, maintain, and update technical documentation, operational procedures, configuration standards, diagrams, and support documentation for security technologies and related processes.
• Provide technical support and guidance to Information Technology personnel regarding security technologies, security best practices, and implementation of security controls while maintaining strong working relationships across departments.
• Participate in after-hours maintenance activities, planned technology implementations, and cybersecurity incident response activities when necessary to support business operations.
• Maintain current knowledge of cybersecurity threats, vulnerabilities, technologies, and industry best practices to support continuous improvement of the organization's technical security capabilities.
• Perform other duties and responsibilities as assigned in support of the Information Security program.

Supervisory Responsibilities

This position has no supervisory responsibilities.

Preferred Qualifications

• Associate's degree or Bachelor's degree in Information Technology, Information Security, Computer Science, or a related field, or demonstrated equivalent experience.
• Two (2) to five (5) years of experience in cybersecurity, systems administration, infrastructure engineering, cloud engineering, networking, or a related technical field, or demonstrated equivalent experience.
• Experience administering or supporting enterprise security technologies, including endpoint protection, identity and access management, security monitoring, email security, secure remote access, backup security, or cloud security platforms.
• Experience supporting Microsoft 365, Microsoft Entra ID, Windows Server, Active Directory, cloud technologies, networking, virtualization, or enterprise infrastructure.
• Familiarity with security concepts, including endpoint protection, vulnerability management, identity and access management, incident response, cloud security, Zero Trust, and system hardening.
• Experience working collaboratively with infrastructure, networking, cloud, systems, and application engineering teams to implement and maintain secure enterprise environments.
• Familiarity with scripting, automation, or administrative tools such as PowerShell or similar technologies.
• Familiarity with HIPAA Security Rule requirements, healthcare environments, or other regulated industries is preferred.

Strong analytical, troubleshooting, organizational, verbal communication, and written communication skills

What We are Offer You

At U.S. Urology Partners, we are guided by four core values.  Every associate living the core values makes our company an amazing place to work.  Here “Every Family Matters”

Make Someone’s Day

Achieve Possibilities Together

Treat people with dignity

Do the right thing

Beyond competitive compensation, our well-rounded benefits package includes a range of comprehensive medical, dental and vision plans, HSA / FSA, 401(k) matching, an Employee Assistance Program (EAP) and more.

About US Urology Partners

U.S. Urology Partners is one of the nation’s largest independent providers of urology and related specialty services, including general urology, surgical procedures, advanced cancer treatment, and other ancillary services. Through Central Ohio Urology Group, Associated Medical Professionals of NY, Urology of Indiana, and Florida Urology Center, the U.S. Urology Partners clinical network now consists of more than 50 offices throughout the East Coast and Midwest, including a state-of-the-art, urology-specific ambulatory surgery center that is one of the first in the country to offer robotic surgery. U.S. Urology Partners was formed to support urology practices through an experienced team of healthcare executives and resources, while serving as a platform upon which NMS Capital is building a leading provider of urological services through an acquisition strategy.

U.S. Urology Partners is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, alienage or national origin, ancestry, citizenship status, age, disability or handicap, sex, marital status, veteran status, sexual orientation, genetic information, arrest record, or any other characteristic protected by applicable federal, state or local laws. Our management team is dedicated to this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities and general treatment during employment.