Healthcare Security Engineer — HIPAA & Incident Response

New York Cancer & Blood Specialists; Terryville (NY); On-site; USD 81,000 - 99,000; Full time

Benefits offered by this job

Health Insurance starting Day 1

Dental, Vision, Life Insurance

Short & Long-Term Disability

Generous PTO

Job summary

New York Cancer & Blood Specialists (NYCBS) is seeking a Security Engineer to design, implement, and maintain security across on-prem and cloud environments, ensuring HIPAA compliance and protecting patient data. The role collaborates with IT, clinical, and compliance teams in a regulated healthcare setting.

The position covers vulnerability management, security monitoring, incident response, IAM, and security tooling, requiring 3+ years of related experience and strong communication skills.

Qualifications

• 3+ years security engineering or IT security experience.
• Solid understanding of network, endpoint, and cloud security.
• Familiar with HIPAA and healthcare data privacy/security regulations.

Responsibilities

• Design and maintain security controls across on-prem, cloud, endpoints, and clinical/administrative apps.
• Conduct vulnerability assessments and remediation.
• Monitor security systems (SOC, EDR) and respond to alerts.
• Lead or support incident response activities.
• Ensure HIPAA and healthcare regulatory compliance.
• Support audits and risk assessments (HITRUST, audits).
• Manage IAM and least-privilege access reviews.
• Evaluate and implement security tools and technologies.
• Develop and maintain security documentation and policies.
• Provide security awareness training to staff.
• Stay current on healthcare threat trends.

Skills

Security engineering experience

Network security

Endpoint security

Cloud security

Incident response

HIPAA knowledge

Communication skills

Tools

SIEM platforms

Vulnerability scanners

EDR solutions

IAM

Job description

New York Cancer & Blood Specialists (NYCBS) is seeking a Security Engineer to design, implement, and maintain security across on-prem and cloud environments, ensuring HIPAA compliance and protecting patient data. The role collaborates with IT, clinical, and compliance teams in a regulated healthcare setting.

The position covers vulnerability management, security monitoring, incident response, IAM, and security tooling, requiring 3+ years of related experience and strong communication skills.