Security Engineer

Envision Radiology is looking for a Security Engineer to join our IT Team!
| Position Pay Range: $101,320 - $126.650 |Monday - Friday: 8:00am - 4:00pm |
Summary/Objective

The Security Engineer is responsible for designing, implementing, administering, and continuously improving enterprise cybersecurity technologies and technical controls that protect Envision Radiology's systems, networks, applications, identities, endpoints, and information assets. This position partners with the Cybersecurity Manager, Security Administrators, Information Technology teams, Compliance, and business stakeholders to implement security requirements, investigate cybersecurity events, and remediate vulnerabilities in alignment with HIPAA, HITRUST, the NIST Cybersecurity Framework, and PCI DSS.

Essential Functions

1. Designs, implements, administers, and continuously improves enterprise cybersecurity technologies and technical controls, including endpoint protection, endpoint detection and response (EDR), identity security, email security, cloud security, network security, vulnerability management, and security monitoring platforms.

2. Monitors, investigates, and responds to cybersecurity alerts, events, and incidents by performing technical analysis, containment, remediation, recovery, evidence preservation, and root-cause analysis in coordination with the Cybersecurity Manager and other technology teams.

3. Leads the technical execution of the vulnerability management program by identifying and validating vulnerabilities, evaluating risk and exploitability, coordinating remediation with system owners, verifying corrective actions, and maintaining accurate remediation records and reporting.

4. Engineers and maintains security controls for Identity and Access Management (IAM), privileged access, authentication, access reviews, and identity threat protection while partnering with IT Operations and Systems Administration on identity lifecycle administration and operational support.

5. Conducts security architecture reviews and technical risk assessments for infrastructure, cloud services, applications, vendors, acquisitions, and strategic technology initiatives, documenting findings and recommending practical risk-reduction measures.

6. Develops and maintains cybersecurity configurations, technical standards, operating procedures, playbooks, diagrams, documentation, and automation that support consistent security operations, incident response, regulatory compliance, and effective knowledge transfer.

7. Supports internal and external security assessments, audits, customer security reviews, and compliance activities by validating control implementation, gathering technical evidence, addressing findings, and assisting with remediation plans aligned with HIPAA, HITRUST, NIST, PCI DSS, and other applicable requirements.

8. Serves as a senior technical cybersecurity resource for the Cybersecurity team and the broader Information Technology organization by providing technical leadership, mentoring Security Administrators and IT staff, promoting cross-training and knowledge sharing, supporting cybersecurity training and awareness initiatives, evaluating emerging threats and technologies, and recommending continuous improvements to Envision Radiology's overall security posture.

9. Performs other duties as assigned. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Competencies

1. Cybersecurity Engineering

2. Security Architecture

3. Incident Response

4. Risk & Vulnerability Management

5. Security Compliance

6. Technical Problem Solving

7. Communication

8. Cross-Functional Collaboration

Supervisory Responsibility

This position has no supervision responsibilities.

Work Environment

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to use hands and fingers to handle, feel or operate objects, tools or controls, and reach with hands and arms. The employee is frequently required to talk and hear.

Travel

Minimal travel is expected for this position.

Job Qualifications

Job Qualifications/Experience:

• Five (5) or more years of progressively responsible experience in cybersecurity, information security, or a closely related technical field.

• Experience designing, implementing, and administering enterprise cybersecurity technologies across endpoint, identity, cloud, email, network, vulnerability management, and security monitoring environments.

• Experience leading technical incident response activities, security investigations, containment, remediation, recovery, and root-cause analysis.

• Experience performing security architecture reviews, technical risk assessments, and security control evaluations.

• Experience supporting internal and external security audits, regulatory assessments, customer security reviews, and compliance activities.

• Strong knowledge of Microsoft enterprise technologies, including Microsoft Entra ID, Microsoft 365, Windows Server, Active Directory, Azure, virtualization platforms, and cloud services.

• Experience scripting or automating cybersecurity and administrative tasks using PowerShell, Python, or similar technologies preferred.

• Experience supporting healthcare or another highly regulated industry preferred.

• Ability to communicate technical risks, findings, and recommendations effectively to technical and non-technical audiences.

• Strong written, verbal, interpersonal, documentation, and presentation skills.

Education/Certifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.

• One or more of the following certifications preferred: CISSP, GSEC, GCED, Security+, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Identity and Access Administrator Associate (SC-300), CrowdStrike Certified Falcon Administrator, or other relevant cloud, networking, or cybersecurity vendor certifications.

Additional Eligibility Qualifications

None required for this position.

Compliance

Adheres to Envision’s Code of Conduct and Compliance Policies and attends annual Compliance training as set forth by the Company.

Company Benefits

The following benefit programs are available to eligible employees. Benefits eligibility is dependent on a variety of factors, including employee classification.

• Health Benefits: Medical/Dental/Vision/Life Insurance

• Company Matched 401k Plan

• Employee Stock Ownership Plan

• Paid Time Off + Paid Holidays

• Employee Assistance Program

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

OSHA Exposure Rating: 1

It is reasonably anticipated NO employees in this job classification will have occupational exposure to blood and other potentially infectious body fluids. Envision Radiology is an equal opportunity employer (M/F/D/V). We recruit, employ, train, compensate, and promote without regard to race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, disability, veteran status, or any other basis protected by applicable federal, state, or local law.

Applications for this position are accepted on an ongoing basis, this posting will remain open until the position is filled. Thus, interested candidates are encouraged to apply the same day they view this posting.