CyberTrust is expanding its Cyber Security services to the local healthcare sector, building on our successful cybersecurity service suite for municipalities and nonprofit organizations. Healthcare environments present distinctive challenges, including protection of sensitive data, regulatory requirements, connections to parent health systems, clinical systems, and networks containing numerous medical and third-party devices.

We are seeking a Senior Cyber Solutions Architect – Healthcare to help CyberTrust develop a highly effective and affordable security service offering for community healthcare organizations. This individual will work directly with healthcare customers to understand their environments, design solutions, and help turn those solutions into repeatable CyberTrust services. Our current security services portfolio includes proactive consulting and active security monitoring and response.

Location: Massachusetts

Salary range: Upper 100’s, based on experience and qualifications.

Responsibilities

• Assess healthcare customers' IT, clinical, network, data, and security environments, including medical and IoT devices, third-party systems, vendor connections, and relationships with parent health systems.

• Identify cybersecurity gaps and risks and design practical, cost-effective solutions addressing technology, architecture, processes, and security operations.

• Provide hands-on consulting to help customers implement security improvements, integrate new systems, strengthen security processes, and respond to significant security incidents.

• Serve as the technical lead for CyberTrust's relationship with each healthcare customer, working effectively with technical staff as well as clinical, operational, and executive leaders.

• Ensure customer environments can be effectively integrated with CyberTrust's SOC and managed security services, including security telemetry, monitoring, alerting, escalation, and incident response.

• Help adapt CyberTrust's existing security assessment and service capabilities to healthcare environments and identify additional capabilities required by the sector.

• Define and lead the development, testing, deployment, and continuous improvement of new healthcare-specific CyberTrust services.

• Develop repeatable security architectures, implementation approaches, technical standards, and documentation that enable CyberTrust to deliver effective services across multiple (smaller) healthcare customers.

• Evaluate cybersecurity technologies and vendors and make recommendations regarding their use in CyberTrust's healthcare service portfolio.

• Provide cybersecurity training and guidance to healthcare technical staff and clinical, administrative, and executive leaders.

Qualifications

• 10+ years of experience in cybersecurity, systems architecture, network engineering, or related technical roles, with significant responsibility for security architecture and solution design.

• 5+ years of experience in healthcare technology or cybersecurity, preferably in a clinical environment, health system, healthcare technology provider, or organization serving healthcare customers.

• Demonstrated experience designing and implementing cybersecurity solutions in complex healthcare environments, including clinical systems, medical/IoT devices, third-party applications, and external system connections.

• Strong understanding of healthcare cybersecurity requirements and frameworks, including the HIPAA Security Rule, NIST Cybersecurity Framework, NIST SP 800-53, and emerging federal healthcare cybersecurity requirements.

• Strong hands-on knowledge of cybersecurity technologies such as EDR, SIEM, vulnerability management, identity and access management, network security, and security monitoring.

• Experience with SOC, MSSP, MDR, or other managed security environments is strongly preferred.

• Demonstrated ability to translate cybersecurity requirements and risks into practical, cost-effective architectures and operational processes, particularly for resource-constrained organizations.

• Experience taking solutions from architecture through implementation, testing, and operationalization, and developing repeatable solutions or service offerings for multiple customers.

• Strong project and team leadership skills and significant experience in customer-facing technical roles.

• Excellent communication skills, including the ability to explain complex cybersecurity issues and risks to both technical and nontechnical healthcare leaders.

• Ability to work independently, manage multiple customer engagements, and balance security effectiveness, operational practicality, and cost.

• Relevant bachelor's degree and/or professional certifications such as CISSP, CISM, HCISPP, or GIAC credentials are desirable.