Cybersecurity Engineer for Healthcare Sector

Contract Cybersecurity Engineer – Healthcare/HIPAA & Managed Security Services

Job Description
AlwaysYours Technologies is a growing cybersecurity consulting and managed security company focused primarily on dental, medical, and other healthcare organizations.
We are seeking an experienced Contract Cybersecurity Engineer to help design, implement, and support cybersecurity solutions for our clients. This will initially be a project/part-time contractor position with the opportunity to develop into an ongoing relationship as our client base grows.
The ideal candidate should be comfortable working independently with small and midsize healthcare organizations and translating security findings into practical remediation—not simply producing technical reports.

Responsibilities

The contractor may be responsible for:
Conducting cybersecurity and vulnerability assessments
Performing technical portions of HIPAA Security Risk Analyses
Assessing client environments for cyber-insurance readiness
Reviewing Microsoft 365 and Entra ID security configurations
Implementing and managing MFA and identity/access controls
Deploying and managing endpoint protection/EDR
Configuring Microsoft Defender, SentinelOne, CrowdStrike, or comparable platforms
Conducting vulnerability scanning and coordinating remediation
Reviewing Windows workstations, servers, networks, firewalls and wireless environments
Evaluating backup, encryption and disaster-recovery controls
Performing email-security and phishing-risk assessments
Implementing security hardening and patch-management recommendations
Assisting with incident-response planning
Helping establish RMM/endpoint-management infrastructure using platforms such as NinjaOne or ConnectWise
Producing professional client-facing technical findings and remediation recommendations
Maintaining appropriate documentation for all work performed
Supporting ongoing managed-security clients as the company grows

Required Experience

Candidates should have practical experience in several of the following areas:
Microsoft 365 / Entra ID security
Microsoft Defender for Endpoint
EDR/XDR technologies
Vulnerability management
MFA and identity/access management
Windows endpoint and server security
Network/firewall security
Backup and disaster recovery
RMM platforms
Email security
Security awareness/phishing programs
Incident response
NIST Cybersecurity Framework and/or CIS Controls
HIPAA Security Rule environments