Security Engineer

New York Cancer & Blood Specialists; Terryville (NY); On-site; USD 81,000 - 99,000; Full time

Benefits offered by this job

Health Insurance starting Day 1

Dental, Vision, Life Insurance

Short & Long-Term Disability

Generous PTO

Job summary

New York Cancer & Blood Specialists (NYCBS) is seeking a Security Engineer to design, implement, and maintain security across on-prem and cloud environments, ensuring HIPAA compliance and protecting patient data. The role collaborates with IT, clinical, and compliance teams in a regulated healthcare setting.

The position covers vulnerability management, security monitoring, incident response, IAM, and security tooling, requiring 3+ years of related experience and strong communication skills.

Qualifications

• 3+ years security engineering or IT security experience.
• Solid understanding of network, endpoint, and cloud security.
• Familiar with HIPAA and healthcare data privacy/security regulations.

Responsibilities

• Design and maintain security controls across on-prem, cloud, endpoints, and clinical/administrative apps.
• Conduct vulnerability assessments and remediation.
• Monitor security systems (SOC, EDR) and respond to alerts.
• Lead or support incident response activities.
• Ensure HIPAA and healthcare regulatory compliance.
• Support audits and risk assessments (HITRUST, audits).
• Manage IAM and least-privilege access reviews.
• Evaluate and implement security tools and technologies.
• Develop and maintain security documentation and policies.
• Provide security awareness training to staff.
• Stay current on healthcare threat trends.

Skills

Security engineering experience

Network security

Endpoint security

Cloud security

Incident response

HIPAA knowledge

Communication skills

Tools

SIEM platforms

Vulnerability scanners

EDR solutions

IAM

Job description

Why Join Our Team?

Why Join Our Team?
At New York Cancer & Blood Specialists (NYCBS), we are dedicated to making a difference in the lives of our patients, their families, and our communities. Our passionate team of expert oncologists, hematologists, and healthcare professionals work together to provide world-class cancer care close to home. By offering cutting-edge treatments, innovative research, and a patient-centered approach, we are redefining what’s possible in the fight against cancer and blood disorders.

If you want to be part of a growing organization committed to healing, hope, and advanced care, join us and help make a meaningful impact!

Job Description

Security Engineer

Location: Port Jefferson, NY (In-person, non-remote)

Hours/Days: Monday–Friday 8:30am-5pm

Organization: New York Cancer & Blood Specialists (NYCBS)

NY Cancer & Blood is seeking a talented Security Engineer to help design, implement, and maintain and security infrastructure that protects our IT systems, networks, medical devices, and patient data. In this role, you\'ll work cross-functionally with IT, clinical, and compliance teams to identify vulnerabilities, respond to incidents, and build security into every layer of our environment, from network infrastructure to clinical and administrative systems. This role is well-suited to someone who enjoys both hands-on technical work and the challenge of operating in a highly regulated environment where security failures can have real consequences for patient care and safety.

What You\'ll Do

• Design, implement, and maintain security controls across on-premises networks, cloud infrastructure, endpoints, and clinical/administrative applications (EMR, lab, and medical devices, etc.)
• Conduct vulnerability assessments and remediate vulnerabilities
• Monitor security systems (SOC, EDR, etc.) and respond to alerts and incidents
• Lead or support incident response efforts, including investigation, containment, and remediation of security incidents
• Ensure systems and processes align with HIPAA and other relevant healthcare regulatory requirements
• Support audits and risk assessments (HITRUST, internal/external audits, regulatory inspections)
• Manage identity and access management (IAM) practices, including least-privilege access reviews for all applications
• Evaluate and implement security tools and technologies to strengthen our security posture
• Develop and maintain security documentation and policies
• Provide security awareness training and guidance to clinical staff, administrative staff, and IT teams
• Stay current on emerging threats and healthcare-specific attack trends (e.g., ransomware targeting hospital systems, PHI breaches, medical device vulnerabilities)

What We\'re Looking For

• 3+ years of experience in a security engineering, infrastructure security, or related IT security role
• Solid understanding of network security, endpoint security, and cloud security fundamentals
• Experience with security tools such as SIEM platforms, vulnerability scanners, and EDR solutions
• Familiarity with HIPAA and other healthcare data privacy/security regulations
• Working knowledge of encryption, IAM, and secure network design
• Experience responding to and investigating security incidents
• Strong communication skills, ability to explain risk to both clinical/administrative staff and technical stakeholders

Nice To Have

• Additional years of IT experience considered a plus
• Experience securing healthcare-specific systems (EMR platforms, HL7/FHIR interfaces, medical devices, biomedical/IoT equipment)
• Relevant certifications
• Experience with compliance frameworks such as HIPAA, HITRUST, or NIST 800-53
• Experience working in a hospital, health system, or clinical environment

Compensation & Benefits

• Salary: Starting at $90,000/yr
• Benefits Include:
• Health Insurance starting Day 1
• Dental, Vision, Life Insurance
• Short & Long-Term Disability
• Generous PTO

Join us at NYCBS, where we are making strides in healthcare through innovative and compassionate care.

Visit our website at: Nycancer.com

Follow us on Facebook: NYCBS on Facebook

• New York Cancer and Blood Specialists is an Equal Opportunity Employer.*