Cybersecurity Engineer for Healthcare Sector

Contract Cybersecurity Engineer – Healthcare/HIPAA & Managed Security Services Job Description AlwaysYours Technologies is a growing cybersecurity consulting and managed security company focused primarily on dental, medical, and other healthcare organizations. We are seeking an experienced Contract Cybersecurity Engineer to help design, implement, and support cybersecurity solutions for our clients. This will initially be a project/part-time contractor position with the opportunity to develop into an ongoing relationship as our client base grows. The ideal candidate should be comfortable working independently with small and midsize healthcare organizations and translating security findings into practical remediation—not simply producing technical reports.

Responsibilities

The contractor may be responsible for: Conducting cybersecurity and vulnerability assessments Performing technical portions of HIPAA Security Risk Analyses Assessing client environments for cyber-insurance readiness Reviewing Microsoft 365 and Entra ID security configurations Implementing and managing MFA and identity/access controls Deploying and managing endpoint protection/EDR Configuring Microsoft Defender, SentinelOne, CrowdStrike, or comparable platforms Conducting vulnerability scanning and coordinating remediation Reviewing Windows workstations, servers, networks, firewalls and wireless environments Evaluating backup, encryption and disaster-recovery controls Performing email-security and phishing-risk assessments Implementing security hardening and patch-management recommendations Assisting with incident-response planning Helping establish RMM/endpoint-management infrastructure using platforms such as NinjaOne or ConnectWise Producing professional client-facing technical findings and remediation recommendations Maintaining appropriate documentation for all work performed Supporting ongoing managed-security clients as the company grows Required Experience Candidates should have practical experience in several of the following areas: Microsoft 365 / Entra ID security Microsoft Defender for Endpoint EDR/XDR technologies Vulnerability management MFA and identity/access management Windows endpoint and server security Network/firewall security Backup and disaster recovery RMM platforms Email security Security awareness/phishing programs Incident response NIST Cybersecurity Framework and/or CIS Controls HIPAA Security Rule environments