Brentwood, Tennessee, US (On-site)1 open job
QualDerm Partners is a dermatology practice management company operating 158 practices across 17 states, supporting dermatology, skin cancer care, cosmetics, plastic surgery, and pathology services.
QualDerm Partners is a dermatology practice management company - founded in 2014 and now backing 158 practices across 17 states - operating in a healthcare vertical where the attack surface is real: electronic health records, billing systems, patient portals, and cross-practice data flows spanning dermatology, skin cancer care, cosmetics, plastic surgery, and pathology. The threat model here is healthcare-specific. PHI theft, ransomware targeting clinical operations, and supply-chain risk across affiliated practices all come with the territory.
The company's model is built on strategic affiliations and de novo development, with physician autonomy and physician leadership as stated core principles. That distributed structure - many practices, one management layer - means security has to be federated: consistent policy and tooling pushed across entities that retain operational independence. Think identity and access management at scale, endpoint hardening across diverse practice environments, and compliance frameworks (HIPAA, HITECH) that have to hold across state lines and varying IT maturity levels.
For a security team, the challenge is architectural. You're not securing a single monolith; you're building controls that work across a growing network of affiliated practices while respecting the "True Partnership" model that lets physicians run their own clinical operations. Data governance, vendor risk management, and incident response planning all have to account for that reality.
