Lead Cyber Security Engineer

PURPOSE: Develops and implements security solutions. Administers security technology systems by architecting and engineering/developing trusted systems into secure systems. Assists in the development of implementation and deployment plans that are aligned to the organizational strategic plan objectives and security requirements. Advises management in developing cybersecurity policies, processes, and procedures.  ESSENTIAL FUNCTIONS: Leads all activities in the day-to-day support of the security solutions. Oversees engineering support and system administration of specialized cybersecurity applications. Develops information systems security action plans, evaluates information security products, and performs other activities necessary to secure the organization's network. Identifies potential conflicts with the implementation of any cybersecurity tools. Reviews and analyzes appropriate solution system logs for performance and functional anomalies. Collaborates with architects and project managers to provide security requirements. Answers advanced questions about the installation, operation, configuration, and customization of cybersecurity solutions. SUPERVISORY RESPONSIBILITY: Position does not have direct reports but is expected to assist in guiding and mentoring less experienced staff. May lead a team of matrixed resources. QUALIFICATIONS: Education Level: Bachelor's Degree Computer Science, Information Technology, or related field OR in lieu of a Bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience. Licenses/Certifications: PCNSE – Palo Alto Networks Certified Network Security Engineer PCCSE – Palo Alto Networks Prisma Certified Cloud Security Engineer PCSAE – Palo Alto Networks Certified Security Automation Engineer GIAC Defensible Security Architecture (GDSA) GIAC Continuous Monitoring Certification (GMON) Certified Ethical Hacker (CEH) Upon Hire Required Experience: 8 years relevant IT security experience. Preferred Qualifications: High level of experience in a multi-cloud environment, with a focus on Azure. Experience with cloud firewall technologies Experience with cloud web application firewalls. Ability to create and document detections for the for prevention of malicious activity. Advanced knowledge of anomaly-based detection technologies, such as ExtraHop. 2 years of experience architecting security controls in a cloud environment using a combination of cloud native and non-cloud native solutions. Experience automating the configuration and deployment of security policies to various systems. Ability to script in at least one language is highly desirable (Python or PowerShell preferred). Knowledge, Skills and Abilities (KSAs) Ability to perform risk assessments and investigate cyber security incidents. Ability to interact with a broad cross-section of personnel to explain and enforce security measures. Ability to understand vulnerabilities at a technical level. Knowledge of hardware and software, networks, data centers, systems and cyber security related issues. Strong critical thinking ability and investigative/problem solving skills. Must be able to meet established deadlines and handle multiple customer service demands from internal and external customers, within set expectations for service excellence. Must be able to effectively communicate and provide positive customer service to every internal and external customer, including customers who may be demanding or otherwise challenging. Department Department:  Equal Employment Opportunity CareFirst BlueCross BlueShield is an Equal Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.