Senior Cloud Security Engineer remote virtual home office eligible

Profile

Description

The Senior Cloud Security Engineer will consult, partner, and support strategic cloud security initiatives within Humana's IT and Business teams. This role will collaborate with engineering and business teams in an agile product team model to bake security into enterprise strategic initiatives, design and lead the implementation of strategic cloud security capabilities within the Cloud Security Strategy team, and will work directly with Cloud Service Provides to align on 12-18 month roadmaps. The role requires experience with cloud security principles and best practices.

Responsibilities

Responsibilities:


Build a very close working relationship with DevOps, cloud platform engineering, application security, and enterprise security teams
Participate in designing cloud security strategy, system security controls, and secure configuration designs following industry best practices
Determine security requirements by evaluating business strategies and requirements; researching information security standards; conduct system security threat model reviews
Partner with other enterprise security teams on the creation of artifacts for security functions, including architecture patterns, least privilege role profiles, and network access models
Design and lead strategic design around cloud security, container security, configuration management, infrastructure as code, and policy as code
Ensure all acquired or developed systems are consistent with enterprise cloud security guidelines through embedded engineering partnerships
Identify areas of improvement in the process, capability, and engineering space and work with the cloud security product owner to integrate improvements into strategic roadmaps
Continually review and assess changes to cloud services to track changes to risk and compliance position of individual cloud service offerings
Assess new and existing cloud implementations, identifying security issues, misconfigurations and assist in prioritizing fixes/remediation
Define and document how the implementation of a new system or interface impacts the security posture of our cloud environments


Role Essentials


5 years of experience designing, developing, and consulting in a security context
3 years of experience with either Microsoft Azure/Google Cloud Platform/AWS
Experience with risk-based testing and/or manual assessment of architecture and infrastructure configuration
Prior experience with Agile development frameworks such as Scaled Agile
Experience with Infrastructure as Code frameworks such as Terraform


Desired Qualifications


Applied knowledge of healthcare industry
Bachelor's Degree in Information Technology, Computer Science or a related field
Advanced knowledge of security capabilities and constraints related to deploying cloud native and multi-cloud applications and infrastructure


Scheduled Weekly Hours

40

Company info

Sign Up Now - WashingtondcCrossing.com