Cloud Security Engineer

Description

About the role

We are seeking a dynamic and detail-oriented IT Security Cloud Engineer to join our IT Cyber Security team. The Cloud Security Engineer helps architect, deploy and operate a secure cloud application infrastructure that aligns with business needs. The position is responsible for supporting operational innovation and providing security direction to the business to elevate the company's security posture within a cloud computing infrastructure.

Reporting to the Sr. Director, Cyber Security & IT Operations, this is a hybrid-remote role offering a
flexible work arrangement out of our Vienna, VA or Raleigh, NC offices.

You Will

• Develop and maintain secure, resilient enterprise-grade cloud processes in tandem with architects and system engineers.
• Secure business applications and computing environments across public, private or hybrid cloud infrastructures.
• Protect patient data and business applications in compliance with privacy, security, business resiliency and compliance frameworks as defined in corporate policies.
• Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts.
• Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
• Act as a key figure in incident response to track occurrence and resolution, with strict documentation and reporting as well as engagement with security operations and incident response teams.
• Attend regular technical project and implementation meetings and serve as the security consultant to help guide secure application and infrastructure configurations.
• Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments.
• Manage remediation efforts after security assessment findings outline weaknesses requiring attention.

About You

• Bachelor's degree in computer science, information assurance, cybersecurity or related field, or the equivalent combination of education, skills and experience.
• 5+ years' experience in cybersecurity as a practitioner and with at least 3+ years exposure with Microsoft Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP).
• Strong Windows platform security, logging, audit skills, Linux platform support a plus
• Demonstrated experience with tools such as Email Security gateway, Endpoint Protection/EDR, Firewalls, Identity Access Management (IAM), Security Incident Event Management (SIEM), Vulnerability Management, Enterprise Logging/Observability, Cloud Security Posture / Workload Protection (CSPM / CNAPP).
• Experience in cloud networking architecture and hybrid-cloud operations, Network and encryption experience, including virtual private networks (VPNs), IPsec, SSL/TLS, LDAP and public key infrastructure (PKI).
• Proven experience securing a multi-location or distributed enterprise footprint, preferably a retail environment.
• Healthcare and medical devices experience, a plus
• Proficient in utilizing threat intelligence services within a production environment.
• Knowledge of various regulatory requirements and laws, including but not limited to: Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), General Data Protection Regulation (GDPR). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST.
• Up-to-date understanding of a wide-range of incident response, system configuration, vulnerability management and hardening guidelines.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.