Cloud Security Engineer

Nebraska Blue; Omaha (NE); Hybrid; USD 90,000 - 140,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska is seeking a Cloud Security Engineer to design, implement, and maintain secure cloud networks and systems. You will lead security operations across Azure, contribute to audits, and drive security improvements in collaboration with cross-functional teams.

The ideal candidate has 4+ years in IT/security, strong Azure security knowledge, and hands-on experience with threat modeling, forensics, and DLP concepts.

Qualifications

• Bachelor’s degree in cyber security, computer science, information technology or a related field.
• Minimum of 4 years IT/ information services, including at least 2 years in information security.
• Proficiency in Azure Cloud security tools and practices.
• Familiarity with MITRE threat model and cloud computing concepts.
• Experience with Palo Alto security solutions and NGFWs.

Responsibilities

• Implement and maintain cloud security access solutions across platforms.
• Research, recommend, and implement security solutions for new technologies.
• Communicate cloud security best practices to technical and non-technical partners.
• Participate in audit support activities and remediation of issues.
• Configure and manage Azure Security Center, Azure Policy, and Azure Sentinel.

Skills

Azure cloud security

Threat modeling

Penetration testing

Data loss prevention

Education

Bachelor’s degree in cyber security, computer science, information technology or a related field

Tools

Palo Alto NGFW

Job description

At Blue Cross and Blue Shield of Nebraska, we are a mission-driven organization dedicated to championing the health and well-being of our members and the communities we serve. Our team is the power behind that promise. And, as the industry rapidly evolves and we seek ways to optimize business processes and customer experiences, there’s no greater time for forward-thinking professionals like you to join us in delivering on it! As a member of Team Blue, you’ll find purpose, opportunities and the support you need to build a meaningful career and make a powerful impact in our community. Looking for a cloud security professional who wants to be part of a high performing team and is interested in working on newer Azure technologies. The Cloud Security Engineer will be responsible for designing, implementing, securing, maintaining, and continuously improving cloud networks and cloud-based systems. This individual will be responsible for security operations and maintenance of secure cloud infrastructure, security platforms, and software systems across a variety of domains and environments under supervision. They will also install, maintain, and upgrade the organization’s cloud computing environment and core infrastructure as assigned.

What you’ll do:

• Independently implement, deploy, and maintain security access solutions and update current security solutions to include cloud-based solutions.
• Research, recommend, and implement security solutions for new technologies across all platforms and environments.
• Investigate changes/updates in current security solutions, as well as the cyber security industry, and recommend best practices in design and delivery.
• Answer inquiries regarding information security practice or security access.
• Can communicate cloud security best practices to both technical and non-technical business partners.
• Write technical specifications for procurement and implementation of security appliances and software products.
• Participate in audit support activities, as they pertain to cybersecurity and cloud management for both internal and external audits, as assigned.
• Perform required activities to resolve open audit issues.
• Provide input for Key Performance Indicators (KPIs) and Metrics reporting.
• Configure and manage cloud security controls to protect data and infrastructure in partnership with the assigned team.
• Within assigned scope implement and manage Azure Cloud security features, including Azure Security Center, Azure Policy, and Azure Sentinel.
• Write and review policies/procedures for audit and regulatory compliance as necessary.
• Troubleshoot and resolve security system access issues and incidents.
• Utilize Palo Alto Networks’ security solutions to enhance network security and the management of firewalls.
• Participate in retrospective (IR) exercises.
• Be involved in the security design of new products and technologies as they enter the environment.

To be considered for the position, you must have:

• Bachelor’s degree in cyber security, computer science, information technology or a related field.
• Minimum of 4 years of experience in information technology/information services, including at least 2 years in information security.
• Demonstrated understanding on how to go about securing various environments, as well as the ability to stay up with the latest trends and risks associated to cloud platforms.
• Proficiency in Azure Cloud security tools and practices.
• Proficient knowledge base around NTFS and file share/server volume security hierarchies.
• Ability to adapt to new technologies and environments quickly.
• Familiarity with IT Audit lifecycle and frameworks.
• Familiarity with MITRE threat model and other threat modeling techniques.
• Familiarity with cloud computing concepts.
• Familiarity with various cybersecurity techniques and principles, such as forensics, threat hunting, penetration testing, threat intelligence, Federated Identity Management, and/or data loss prevention.
• Experience with Palo Alto security solutions and NGFW.
• An equivalent combination of education and experience may be substituted for this requirement.
• The ability to meet or exceed the attendance and timeliness requirements of their departments.
• On-call work may be required based on business needs and role assignment.
• The ability to work well in a team environment and be capable of building and maintaining positive relationships with other staff, departments, and customers.

The strongest candidates for this position will also possess:

• Familiarity with multiple operating systems (Windows, CISCO, Linux, etc.) and various hardening techniques.
• Understanding of change control practices and experience building solutions in lab/dev environments, producing test cases, etc.
• Understanding Linux root permissions.
• Understanding business needs as they relate to security.
• Previous experience with project management processes and methodologies.
• Proven collaboration skills with other technology teams outside of security.

We strongly believe that diversity of experience, perspective and background will lead to a better workplace for our employees and a better product for our customers and members.

On the cutting edge of the health care industry, helping Nebraskans in moments of joy, times of hardship and the steps in "in",\" the steps in between.

Blue Cross and Blue Shield of Nebraska (BCBSNE), and we exist to be there for people when they need us. Our goal is to add more good, healthy years to people’s lives by supporting our customers and the Nebraska community at large. We have more than 80 years of experience behind us. And a bright future ahead as we continuously innovate to drive health care forward while meeting the needs of our members and state.

Here, you will find opportunities to grow personally and professionally while making a difference for our customers and greater Nebraska community.