Administer, monitor, and optimize Huntress EDR, Huntress ITDR, ThreatLocker, Microsoft Defender, and other endpoint protection technologies.
Design, implement, and maintain Zero Trust security architectures, Secure Access Service Edge (SASE) technologies, endpoint protection strategies, and identity security controls.
Monitor and investigate security alerts, suspicious activity, account compromise attempts, data-protection incidents, and endpoint security events.
Lead vulnerability management, security remediation, hardening efforts, security assessments, and risk reduction initiatives across the organization.
Develop and maintain incident response procedures, security playbooks, recovery procedures, and security investigation documentation.
Administer and maintain SIEM solutions, security monitoring platforms, threat intelligence feeds, detection rules, and security reporting.
Partner with Compliance, Legal, IT Operations, business leadership, and third-party vendors to implement security controls that support HIPAA, privacy, and regulatory obligations.
Evaluate security risks associated with acquisitions, third-party vendors, cloud platforms, business applications, and external integrations.
Maintain awareness of emerging threats, attack techniques, industry trends, and evolving cybersecurity technologies while recommending improvements to the organization's security posture.
Design and maintain enterprise security architecture standards covering identity, endpoint security, cloud services, network security, data protection, privileged access, and third-party integrations.
Participate in project reviews, application assessments, vendor evaluations, acquisitions, and infrastructure initiatives to identify security risks and recommend mitigation strategies.
Develop and support organizational security awareness initiatives, phishing exercises, end-user security training, and policy education programs.
Develop and maintain security automations, alert-enrichment workflows, response actions, and system integrations using Microsoft Sentinel, Microsoft Graph, PowerShell, APIs, or other approved automation technologies.
Support internal and external security audits, compliance assessments, risk assessments, penetration testing activities, and remediation planning efforts.
Develop and maintain security dashboards, KPIs, executive reporting, risk registers, remediation tracking, and security maturity measurements.
Evaluate new security technologies and continuously improve security controls based on emerging threats, industry best practices, regulatory requirements, and business objectives.
Advanced experience administering and supporting Microsoft Defender, Microsoft Purview, Conditional Access, Privileged Identity Management (PIM), Microsoft Entra, and Microsoft security technologies.
Experience administering Huntress EDR, Huntress ITDR, ThreatLocker, or comparable endpoint detection, identity threat detection, application control, and endpoint security platforms.
Strong knowledge of Secure Access Service Edge (SASE), Zero Trust networking principles, identity security, endpoint protection, and modern access-control architectures.
Experience administering Microsoft Sentinel or a comparable SIEM platform, including log analysis, alert investigation, detection-rule management, incident triage, and security reporting.
Strong knowledge of HIPAA security requirements, healthcare cybersecurity practices, security and privacy controls, and the application of regulatory requirements within a technology environment.
Experience performing incident response, security investigations, vulnerability management, threat analysis, and risk assessments.
Strong understanding of cloud security, Microsoft 365 security, Azure security controls, identity governance, and data protection technologies.
Strong communication, documentation, analytical, and cross-functional collaboration skills.
Experience designing and implementing Zero Trust architectures, SASE technologies, identity governance programs, and modern endpoint security frameworks.
Experience securing Microsoft 365, Azure, Power Platform, Dynamics 365, and SaaS platforms within regulated environments.
Demonstrated ability to remain current with the evolving cybersecurity landscape, emerging threats, attack patterns, and defensive technologies.
Experience using PowerShell, Microsoft Graph, APIs, or security orchestration technologies to automate security administration, monitoring, investigation, or response activities.
Preferred Qualifications
Microsoft Sentinel experience.
Microsoft SC-200 certification.
Microsoft SC-300 certification.
CISSP certification.
CISM certification.
Healthcare cybersecurity experience.
M&A integration security experience.
Job Type
Full-time
Experience
5+ years in cybersecurity engineering, identity security, endpoint security, security operations, incident response, vulnerability management, or cybersecurity architecture.
Education
Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Engineering, or related field preferred. Equivalent professional experience may be considered.
Certifications/Licenses
Microsoft SC-200 or SC-300 certification preferred. CISSP, CISM, CompTIA Security+, or comparable cybersecurity certification is a plus.
Integrated Dermatology and it's entities provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
