Cyber Security Specialist

This is a fully remote position, open to applicants in District of Columbia.

📋 Description

• Oversee networks, systems, and applications for potential security breaches, vulnerabilities, and unusual activities.

• Establish and uphold security protocols that safeguard PHI and EHR.

• Execute risk assessments, vulnerability scans, and penetration testing across both clinical and administrative systems.

• Ensure adherence to HIPAA, HITECH, HITRUST, and other healthcare regulatory standards.

• Create, revise, and enforce security policies, procedures, and incident response strategies.

• Investigate security breaches, conduct root-cause analyses, and coordinate remediation efforts.

• Collaborate with IT, clinical, and compliance teams to secure medical devices and connected health technologies.

• Manage identity and access controls, including role-based access for clinical personnel.

• Offer security awareness training, phishing simulations, and education on best practices.

• Monitor for emerging threats, ransomware trends, and attack patterns specific to the healthcare sector.

• Assist with regulatory, auditor, and third-party audits and assessments.

• Assess and recommend security tools, technologies, and vendor solutions.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).

• 3+ years of experience in cybersecurity, information security, or IT security positions.

• Proficient understanding of the HIPAA Security Rule and healthcare compliance requirements.

• Experience with SIEM, IDS/IPS, endpoint detection and response (EDR), and firewalls.

• Knowledge of network security, encryption, and secure system architecture.

• Familiarity with medical device security and risks associated with IoMT.

• Strong analytical, problem-solving, and incident-response capabilities.

• Excellent written and verbal communication skills.

• Relevant certifications such as CISSP, CompTIA Security+, CEH, CISM, HCISPP, or GIAC are highly preferred.

• Experience with cloud security within a healthcare environment is preferred.

• Familiarity with EHR platforms such as Epic or Cerner is advantageous.

• Experience in conducting HIPAA risk assessments or supporting HITRUST certification is preferred.

• Knowledge of ransomware defense strategies and healthcare-specific threat intelligence is preferred.

🏝️ Benefits

• Multiple health and dental plans with nationally recognized networks.

• Vision benefits.

• Total wellness program.

• Employee assistance program for employees and their families.

• Competitive wages.

• Retirement savings plans.

• Company-paid disability and life insurance.

• Pre-tax savings opportunities (HSA and/or FSA).

• Professional development offerings.

• Opportunities for remote work.

• Generous paid-time-off program.

• Flexible scheduling for vacations, illness, life events, and unexpected circumstances.