Engineer, Cloud Security

Navitus; Des Moines (IA); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, Dental, Vision insurance

20 days paid time off

4 weeks paid parental leave

9 paid holidays

401K company match up to 5%

Adoption Assistance Program

Flexible Spending Account

Educational Assistance Plan

Professional Membership assistance

Referral Bonus Program – up to $750

Job summary

Navitus Health Solutions is seeking an Engineer, Cloud Security to design, deploy, and oversee enterprise cloud security solutions. You will guide threat modeling, automation, and secure software delivery across AWS/Azure environments and collaborate with technology partners.

The role emphasizes governance, risk, compliance, and continuous improvement to minimize cyber risk while supporting Navitus stakeholders across complexity and scale.

Qualifications

• 4-year degree in a technology/security discipline.
• 7–10 years of information security experience in SaaS environments.
• Experience in incident response, cloud architectures, tuning.
• Strong understanding of application architectures and security.
• Proficiency in programming or scripting languages.
• Provide security training and awareness to developers.
• Document security policies and procedures.
• Certifications in information security (Azure/AZ-900, CISSP, CISM) preferred.
• HIPAA/data privacy knowledge preferred.
• Experience with AWS WAF, CDK, and threat modeling.

Responsibilities

• Design, deploy, and oversee cloud security solutions across the company.
• Drive DevSec practices to integrate security into SDLC.
• Analyze and patch vulnerabilities in applications and infrastructure.
• Lead security programs and projects with enterprise impact.
• Use security tools to detect, remediate, and enforce standards in AWS/Azure.
• Conduct security assessments of cloud apps and APIs.
• Develop cloud API, security monitoring controls, and governance.
• Triage security issues using ticketing systems and maintain docs.
• Engineer and tune cloud security posture and monitoring.

Skills

Cloud security

Automation

Scripting

AWS WAF

CDK

DevSec Practices

Threat modeling

Programming

Incident response

Education

Bachelor's degree in CS/IT or related tech/security field

Tools

CDK

AWS WAF

Job description

Overview

Due to growth, we are adding an Engineer, Cloud Security to our team!

The Engineer, Cloud Security will drive continuous improvement to our cloud and will be responsible for designing, deploying, and overseeing the management of group wide security solutions and executing against the company's Information Security and Compliance roadmap. Working closely with technology partners, you will help guide the selection, implementation, and integration of various security solutions. This position has significant organizational impact, requiring enterprise perspective, knowledge, and change management skills. The Engineer, Cloud Security will ensure that the risk posed by a variety of cyber threats is minimized. Support the Navitus IT mission through the use governance, risk and compliance activities that detect, prevent, or mitigate threats to confidentiality, integrity and/or availability of information resources on-behalf of Navitus stakeholders.

Is this you? Find out more below!

Responsibilities

How do I make an impact on my team?

• Possess expertise in scripting controls, automating processes, managing AWS WAF rules, and utilizing CDK nag rules for preventive controls
• Analyze and improve existing security policies, identify, and patch vulnerabilities in applications and infrastructure, and lead key security programs and projects
• Develop and implement DevSec practices to integrate security into the software development lifecycle
• Use software to detect, remediate, and enforce security standards within an AWS and Azure environment
• Conduct security assessments of cloud applications and APIs
• Participate in the development of cloud API, Cloud Application Security and Cloud Security monitoring controls to ensure reliable service delivery and efficient use of all resources
• Perform analysis of log files and data outputs. Perform triage of incoming issues using a ticketing & tracking system
• Create and maintain documentation for new and existing processes and deployments
• Engineer and tune the cloud security solutions, including enrolling, monitoring, alerting, and maintaining a defined security posture
• Other duties as assigned

Qualifications

What our team expects from you?

• 4-year degree in Computer Science, Business, Healthcare or other technology/security discipline
• Must have at least seven-ten (7-10) years of information security experience in designing, deploying, managing, monitoring, and evaluating advanced cybersecurity
• Experience in incident response, engineering, cloud architectures, tuning, etc. in a SaaS environment
• Have a strong understanding of application architectures and security
• Has knowledge of securing code and best practices
• Proficiency in programming or scripting languages
• Provide security training and awareness to developers and other employees
• Document security policies and procedures
• Participate in proof of concepts and other technical evaluations of technologies, designs, and solutions and provide recommendations
• Hands-on knowledge of automation skills, dev ops skills, etc
• Candidates with certification in information security (Azure Fundamentals/AZ-900, CISSP, CISM, etc.) or comparable work experience preferred
• Risk analysis/assessment experience a plus. Knowledge of healthcare industry practices, HIPAA, and applicable data privacy practices preferred
• Experience with security tools and frameworks like AWS WAF, CDK, and threat modeling methodologies
• Experience with APIs and DevSec practices
• Participate in, adhere to, and support compliance program objectives
• The ability to consistently interact cooperatively and respectfully with other employees

What can you expect from Navitus?

• Top of the industry benefits for Health, Dental, and Vision insurance
• 20 dayspaid time off
• 4 weeks paid parental leave
• 9 paid holidays
• 401K company match of up to 5% - No vesting requirement
• Adoption Assistance Program
• Flexible Spending Account
• Educational Assistance Plan and Professional Membershipassistance
• Referral Bonus Program – up to $750!

#LI-Remote

Navitus Health Solutions is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, pregnancy, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by law.

Equal employment opportunity, including veterans and individuals with disabilities.