About Our Company

We’re a physician-led, patient-centric network committed to simplifying health care and bringing a more connected kind of care.

Our primary, multispecialty, and urgent care providers serve millions of patients in traditional practices, patients' homes and virtually through VillageMD and our operating companies Village Medical, Village Medical at Home, Summit Health, CityMD, and Starling Physicians.

When you join our team, you become part of a compassionate community of people who work hard every day to make health care better for all. We are innovating value-based care and leveraging integrated applications, population insights and staffing expertise to ensure all patients have access to high-quality, connected care services that provide better outcomes at a reduced total cost of care.

Please Note: We will only contact candidates regarding your applications from one of the following domains: @summithealth.com, @citymd.net, @villagemd.com, @villagemedical.com, @westmedgroup.com, @starlingphysicians.com, or @bmctotalcare.com.

Job Description

As a Cybersecurity Engineer at VillageMD you will play an invaluable role in defending our organization by creating, implementing, and monitoring security controls that keep our patients and employees’ data safe. You will be exposed to new technologies from leading vendors and challenged with their implementation and operational management.   

Core Responsibilities

• Participate in our vulnerability management program, collaborating with peers on effective deployment of hardening benchmarks and vulnerability identification.
• Work across business and IT teams to define security requirements, identify and address security gaps with appropriate control solutions.  
• Work closely with peers in network security, vulnerability management, email / messaging hygiene.
• Implement, and manage secure network architectures, ensuring segmentation and zero-trust principles.
• Collaborate with security operations and incident response teams to help analyze, contain, and coordinate elements of security incidents.

Experience and Qualifications

• Excellent understanding of common cybersecurity organizational practices, operations risk management processes, architectural requirements, and vulnerability risk.
• Familiarity with network security best practices and common network security control platforms (Cisco, Palo Alto, Checkpoint etc.)
• Familiarity with / exposure to leading security solutions in endpoint, network, zero-trust, messaging, data protection, vulnerability management, cloud security realms. 
• Deep understanding of hybrid cloud environments, including both on-premises and cloud server, storage, and networking technologies.
• Knowledge of zero trust principles and experience implementing network segmentation strategies in hybrid cloud environments.
• Experience with systems administration, IT infrastructure, and network management.
• Familiarity with governing security and regulatory frameworks. (PCI, ISO 27000 series, NIST 800-53, HIPAA, HITRUST)

Personal Traits

• Results oriented with proven ability to mobilize and energize large, complex cross-functional teams to drive down vulnerability risk.
• Able to self-start and complete projects and perform daily tasks w/minimal supervision.
• Capable of working under pressure in a continually changing fast-paced environment.
• Ability to effectively collaborate with stakeholders across a large enterprise environment.
• Strong written and verbal communication skills.
• Strong analytical and problem-solving skills.

Preferred Skills / Experience / Certifications:

• Experience with M&A / multi-organizational environments.
• Operating experience in a large organization (10,000+ employees)
• Comptia Security+, Network+
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Zero Trust platform integrations.

This is an exempt position. The base compensation range for this role is $101,700 - $127,400.  At VillageMD, compensation is based on several factors including but n