Cloud Security Engineer

Blue Cross and Blue Shield of Nebraska; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

Blue Cross and Blue Shield of Nebraska is seeking a Cloud Security Engineer to design, implement, secure, and continuously improve cloud networks and systems. You will support security operations across various environments and collaborate with teams to mature our cloud security posture.

The role emphasizes implementing Azure security features (Azure Security Center, Policy, Sentinel), conducting threat modeling, and participating in audits.

Qualifications

• Bachelor’s degree or equivalent in a relevant field.
• Minimum 4 years in IT/InfoSec with at least 2 years in information security.
• Proficiency in Azure cloud security tools and practices.
• Understanding of cloud computing concepts and security.
• Experience with IT Audit lifecycle and frameworks.

Responsibilities

• Implement, deploy, and maintain security access solutions including cloud-based ones.
• Research, recommend, and implement security solutions for new technologies.
• Investigate changes in current security solutions and industry best practices.
• Communicate cloud security best practices to technical and non-technical partners.
• Write specs for procurement of security appliances and software.
• Support audits and resolve audit issues.
• Contribute to KPI/metrics reporting.
• Configure and manage cloud security controls with the team.
• Implement Azure Cloud security features (Azure Security Center, Policy, Sentinel).
• Troubleshoot security system access issues and incidents.
• Use Palo Alto security solutions to enhance network security.
• Participate in IR exercises and security design for new products.

Skills

Azure security

Azure Security Center

Azure Policy

Azure Sentinel

Palo Alto NGFW

Threat modeling

MITRE framework

IT Audit

Cloud computing

Forensics

Threat hunting

Penetration testing

Data loss prevention

NTFS security

Change control

Education

Bachelor’s degree in cyber security, computer science, information technology or a related field

Tools

Palo Alto Networks tools

Job description

At Blue Cross and Blue Shield of Nebraska, we are a mission-driven organization dedicated to championing the health and well‑being of our members and the communities we serve.

Our team is the power behind that promise. And, as the industry rapidly evolves and we seek ways to optimize business processes and customer experiences, there’s no greater time for forward‑thinking professionals like you to join us in delivering on it! As a member of Team Blue, you’ll find purpose, opportunities and the support you need to build a meaningful career and make a powerful impact in our community.

Looking for a cloud security professional who wants to be part of a high performing team and is interested in working on newer Azure technologies. The Cloud Security Engineer will be responsible for designing, implementing, securing, maintaining, and continuously improving cloud networks and cloud-based systems. This individual will be responsible for security operations and maintenance of secure cloud infrastructure, security platforms, and software systems across a variety of domains and environments under supervision. They will also install, maintain, and upgrade the organization’s cloud computing environment and core infrastructure as assigned.

What you’ll do:

• Independently implement, deploy, and maintain security access solutions and update current security solutions to include cloud-based solutions.

• Research, recommend, and implement security solutions for new technologies across all platforms and environments.

• Investigate changes/updates in current security solutions, as well as the cyber security industry, and recommend best practices in design and delivery.

• Answer inquiries regarding information security practice or security access. Can communicate cloud security best practices to both technical and non-technical business partners.

• Write technical specifications for procurement and implementation of security appliances and software products.

• Participate in audit support activities, as they pertain to cybersecurity and cloud management for both internal and external audits, as assigned. Perform required activities to resolve open audit issues.

• Provide input for Key Performance Indicators (KPIs) and Metrics reporting.

• Configure and manage cloud security controls to protect data and infrastructure in partnership with the assigned team.

• Within assigned scope implement and manage Azure Cloud security features, including Azure Security Center, Azure Policy, and Azure Sentinel. Write and review policies/procedures for audit and regulatory compliance as necessary.

• Troubleshoot and resolve security system access issues and incidents.

• Utilize Palo Alto Networks’ security solutions to enhance network security and the management of firewalls.

• Participate in retrospective (IR) exercises.

• Be involved in the security design of new products and technologies as they enter the environment.

To be considered for the position, you must have:

• Bachelor’s degree in cyber security, computer science, information technology or a related field.

• Minimum of 4 years of experience in information technology/information services, including at least 2 years in information security.

• Demonstrated understanding on how to go about securing various environments, as well as the ability to stay up with the latest trends and risks associated to cloud platforms.

• Proficiency in Azure Cloud security tools and practices.

• Proficient knowledge base around NTFS and file share/server volume security hierarchies.

• Ability to adapt to new technologies and environments quickly.

• Familiarity with IT Audit lifecycle and frameworks.

• Familiarity with MITRE threat model and other threat modeling techniques.

• Familiarity with cloud computing concepts.

• Familiarity with various cybersecurity techniques and principles, such as forensics, threat hunting, penetration testing, threat intelligence, Federated Identity Management, and/or data loss prevention.

• Experience with Palo Alto security solutions and NGFW.

An equivalent combination of education and experience may be substituted for this requirement. The ability to meet or exceed the attendance and timeliness requirements of their departments. On-call work may be required based on business needs and role assignment. The ability to work well in a team environment and be capable of building and maintaining positive relationships with other staff, departments, and customers.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Other duties may be assigned.

The strongest candidates for this position will also possess:

• Familiarity with multiple operating systems (Windows, CISCO, Linux, etc.) and various hardening techniques.

• Understanding of change control practices and experience building solutions in lab/dev environments, producing test cases, etc.

• Understanding of Linux root permissions.

• Understanding business needs as they relate to security.

• Previous experience with project management processes and methodologies.

• Proven collaboration skills with other technology teams outside of security.

We strongly believe that diversity of experience, perspective and background will lead to a better workplace for our employees and a better product for our customers and members.