Security Engineer

About the role

Why Join Our Team? At New York Cancer & Blood Specialists (NYCBS), we are dedicated to making a difference in the lives of our patients, their families, and our communities. Our passionate team of expert oncologists, hematologists, and healthcare professionals work together to provide world-class cancer care close to home. By offering cutting-edge treatments, innovative research, and a patient-centered approach, we are redefining what’s possible in the fight against cancer and blood disorders. If you want to be part of a growing organization committed to healing, hope, and advanced care, join us and help make a meaningful impact! Join us at NYCBS, where we are making strides in healthcare through innovative and compassionate care.

Responsibilities

• Design, implement, and maintain security controls across on-premises networks, cloud infrastructure, endpoints, and clinical/administrative applications (EMR, lab, and medical devices, etc.)
• Conduct vulnerability assessments and remediate vulnerabilities
• Monitor security systems (SOC, EDR, etc.) and respond to alerts and incidents
• Lead or support incident response efforts, including investigation, containment, and remediation of security incidents
• Ensure systems and processes align with HIPAA and other relevant healthcare regulatory requirements
• Support audits and risk assessments (HITRUST, internal/external audits, regulatory inspections)
• Manage identity and access management (IAM) practices, including least-privilege access reviews for all applications
• Evaluate and implement security tools and technologies to strengthen our security posture
• Develop and maintain security documentation and policies
• Provide security awareness training and guidance to clinical staff, administrative staff, and IT teams
• Stay current on emerging threats and healthcare-specific attack trends (e.g., ransomware targeting hospital systems, PHI breaches, medical device vulnerabilities)

Requirements

• 3+ years of experience in a security engineering, infrastructure security, or related IT security role
• Solid understanding of network security, endpoint security, and cloud security fundamentals
• Experience with security tools such as SIEM platforms, vulnerability scanners, and EDR solutions
• Familiarity with HIPAA and other healthcare data privacy/security regulations
• Working knowledge of encryption, IAM, and secure network design
• Experience responding to and investigating security incidents
• Strong communication skills, ability to explain risk to both clinical/administrative staff and technical stakeholders

Qualifications

• Additional years of IT experience considered a plus
• Experience securing healthcare-specific systems (EMR platforms, HL7/FHIR interfaces, medical devices, biomedical/IoT equipment)
• Relevant certifications
• Experience with compliance frameworks such as HIPAA, HITRUST, or NIST 800-53
• Experience working in a hospital, health system, or clinical environment

Benefits

• Health Insurance starting Day 1
• Dental, Vision, Life Insurance
• Short & Long-Term Disability
• Generous PTO

Pay

Salary: Starting at $90,000/yr

Schedule

Monday–Friday 8:30am-5pm (In-person, non-remote) – Port Jefferson, NY