Engineer, Cloud Security

Navitus Health Solutions, LLC

United States

Remote

USD 116,000 - 145,000

Full time

4 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Health insurance

Paid time off

Parental leave

Holidays

401K match

Adoption assistance

Flexible spending account

Educational assistance

Professional membership assistance

Referral bonus

Job summary

Navitus Health Solutions, LLC is seeking an Engineer, Cloud Security to guide enterprise security for cloud environments and drive the company’s information security roadmap.

The role requires 7–10 years of security experience in a SaaS setting, expertise in AWS WAF, CDK, and threat modeling, and strong scripting and DevSec capabilities. Remote work is available for residents in select states.

Qualifications

4-year degree in Computer Science, Healthcare or other technology/security discipline.
7–10 years of information security experience in designing, deploying, managing, and evaluating advanced cybersecurity.
Experience in incident response, engineering, cloud architectures, tuning in a SaaS environment.
Strong understanding of application architectures and security; securing code and best practices.
Proficiency in programming or scripting languages; security training for developers.
Document security policies and procedures; participate in evaluations and tech proof-of-concepts.
Hands-on automation, DevOps skills; cloud security tooling like AWS WAF and CDK.

Responsibilities

Possess expertise in scripting controls, automating processes, AWS WAF rules, and CDK nag rules.
Analyze and improve security policies; patch vulnerabilities in applications and infrastructure; lead security programs.
Develop and implement DevSec practices to integrate security into the SDLC.
Use software to detect, remediate, and enforce security standards in AWS/Azure environments.
Conduct security assessments of cloud applications and APIs.
Develop cloud API, Cloud App Security and monitoring controls for reliable service delivery.
Triage issues using ticketing systems; create and maintain deployment docs.
Engineer and tune cloud security solutions; manage defined security posture.
Perform additional duties as assigned.

Skills

Information security

Cloud security

AWS

Azure

DevSec practices

SaaS security

Incident response

Automation

Programming / scripting

Security certifications

Education

4-year Computer Science / Security degree

Tools

AWS WAF

AWS CDK

Threat modeling

Job description

Company

Navitus

About Us

Navitus - Putting People First in Pharmacy - Navitus was founded as an alternative to traditional pharmacy benefit manager (PBM) models. We are committed to removing cost from the drug supply chain to make medications more affordable for the people who need them. At Navitus, our team members work in an environment that celebrates diversity, fosters creativity and encourages growth. We welcome new ideas and share a passion for excellent service to our customers and each other. Current associates must use SSO login option at https://employees-navitus.icims.com/ to be considered for internal opportunities. We are committed to providing equal employment opportunity to all applicants and employees and comply with all applicable nondiscrimination regulations, including those related to protected veterans and individuals with disabilities. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, or handicap.

Pay Range

USD $116,019.00 - USD $145,024.00 /Yr.

STAR Bonus % (At Risk Maximum)

7.50 - Salaried Non-Management except pharmacists

Work Schedule Description (e.g. M-F 8am to 5pm)

M-F 8am to 5pm

Remote Work Notification

ATTENTION: Navitus is only able to offer remote work to residents of Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, Florida, Georgia, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Montana, Nebraska, Nevada, New Jersey, New York, North Carolina, Ohio, Oklahoma, Oregon, Pennsylvania, Tennessee, Texas, Utah, Vermont, Virginia, Washington, Washington DC, Wisconsin.

Overview

Due to growth, we are adding an Engineer, Cloud Securityto our team!

The Engineer, Cloud Security will drive continuous improvement to our cloud and will be responsible for designing, deploying, and overseeing the management of group wide security solutions and executing against the company's Information Security and Compliance roadmap. Working closely with technology partners, you will help guide the selection, implementation, and integration of various security solutions. This position has significant organizational impact, requiring enterprise perspective, knowledge, and change management skills. The Engineer, Cloud Security will ensure that the risk posed by a variety of cyber threats is minimized. Support the Navitus IT mission through the use governance, risk and compliance activities that detect, prevent, or mitigate threats to confidentiality, integrity and/or availability of information resources on-behalf of Navitus stakeholders.

Is this you? Find out more below!

Responsibilities

How do I make an impact on my team?

Possess expertise in scripting controls, automating processes, managing AWS WAF rules, and utilizing CDK nag rules for preventive controls
Analyze and improve existing security policies, identify, and patch vulnerabilities in applications and infrastructure, and lead key security programs and projects
Develop and implement DevSec practices to integrate security into the software development lifecycle
Use software to detect, remediate, and enforce security standards within an AWS and Azure environment
Conduct security assessments of cloud applications and APIs
Participate in the development of cloud API, Cloud Application Security and Cloud Security monitoring controls to ensure reliable service delivery and efficient use of all resources
Perform analysis of log files and data outputs. Perform triage of incoming issues using a ticketing & tracking system
Create and maintain documentation for new and existing processes and deployments
Engineer and tune the cloud security solutions, including enrolling, monitoring, alerting, and maintaining a defined security posture
Other duties as assigned

Qualifications

What our team expects from you?

4-year degree in Computer Science, Business, Healthcare or other technology/security discipline
Must have at least seven-ten (7-10) years of information security experience in designing, deploying, managing, monitoring, and evaluating advanced cybersecurity
Experience in incident response, engineering, cloud architectures, tuning, etc. in a SaaS environment
Have a strong understanding of application architectures and security
Has knowledge of securing code and best practices
Proficiency in programming or scripting languages
Provide security training and awareness to developers and other employees
Document security policies and procedures
Participate in proof of concepts and other technical evaluations of technologies, designs, and solutions and provide recommendations
Hands-on knowledge of automation skills, dev ops skills, etc
Candidates with certification in information security (Azure Fundamentals/AZ-900, CISSP, CISM, etc.) or comparable work experience preferred
Risk analysis/assessment experience a plus. Knowledge of healthcare industry practices, HIPAA, and applicable data privacy practices preferred
Experience with security tools and frameworks like AWS WAF, CDK, and threat modeling methodologies
Experience with APIs and DevSec practices
Participate in, adhere to, and support compliance program objectives
The ability to consistently interact cooperatively and respectfully with other employees

What can you expect from Navitus?