Manager-Cloud Security/CNAPP

HCSC; Chicago (IL); Hybrid; USD 102,000 - 184,000; Full time

Job summary

HCSC seeks a Cloud Security Leader to head a security engineering and operations team. You will design secure cloud infrastructure, drive secure by design patterns, and manage lifecycle for the technology area. You will also mentor staff and contribute to policy and tool development.

Hybrid position based in Chicago, IL or Richardson, TX; relocation not offered. Strong background in CNAPP, IAM, and SDLC security is required.

Qualifications

• Bachelor’s degree in IT, Engineering, Computer Science or closely related field and 6 years in Information Technology with focus on Cloud Security and Orchestration building and managing platforms in the cloud (AWS/Azure) OR 10 years of experience in Information Technology with focus on Cloud Security and Orchestration building and managing platforms in the cloud (AWS/Azure).
• 3 years experience in Cloud security, Technology and automation.
• 1 year experience in Information Security management and/or leadership.
• Knowledge of cloud native technologies, cloud security controls and As a Service technologies.
• Building and leading a cloud security team; hiring, mentoring, and performance management.
• Deep understanding of CNAPP capabilities including Cloud Security Posture Management, Cloud Workload Protection Platform, Cloud Infrastructure Entitlement Management, Kubernetes Security Posture Management, Data Security Posture Management.
• Vulnerability management and scanning; Container and orchestration security; Integrating security into CI/CD pipelines, IaC and IaC security scanning.
• Identity and Access Management across cloud platforms; SAST, DAST, SCA, secrets scanning, API security and SDLC.
• Network security, encryption, zero-trust architecture; Threat detection, incident response, vulnerability management.
• Knowledge of frameworks and standards: NIST, CIS Benchmarks, ISO 27001, SOC 2, PCI-DSS, HIPAA, FedRAMP.
• Cloud compliance and audit support; Policy development and enforcement; Defining cloud security strategy, roadmap, and budget.
• Risk assessment and communication to executives/stakeholders; Vendor management and tool evaluation/procurement.
• Strong written and verbal communication; Experience monitoring, utilizing event management and automation technologies.

Responsibilities

• Leading a Cloud security engineering and operations team and collaborating with multiple groups to design and build secure cloud infrastructure solutions.
• Leading the secure by design build of repeatable patterns and life cycle management for the technology area.
• Transitioning knowledge to Infrastructure Operations and providing level 3 support when required.
• Developing processes, policies and standards for cloud and automation security services; implementing security management tools.

Skills

Cloud security

Leadership

CNAPP capabilities

IAM across cloud

CI/CD security

IaC security scanning

Vulnerability management

Kubernetes security

Data security

Threat detection

Zero-trust architecture

Education

Bachelor’s degree in IT/Engineering/CS

Master’s degree in Cybersecurity/IT/Engineering

Job description

Flex

TX - Richardson

IL - Chicago

Full time

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.

Join HCSC and be part of a purpose-driven company that will invest in your professional development.

Job Summary

This position is responsible for leading a Cloud security engineering and operations team, and collaborating with Solutions Engineering, Infrastructure Operations, and Infrastructure Service Management teams in the design and build of secure cloud infrastructure solutions/blueprints for area of responsibility; leading the secure by design build of repeatable patterns (build-kits); leading the life cycle management for the technology area of responsibility; transitioning knowledge to Infrastructure Operations; lead level 3 support for area of responsibility when required. In addition to the managerial duties, the incumbent will also provide technical expertise and leadership in the formulation and execution of secure cloud architecture across the organization. Developing processes, procedures, policies and standards for cloud and automation security services; designing, building, and driving the implementation of cloud security management tools for the organization.

NOTE: This hybrid role can be located in CHICAGO IL or RICHARDSON TX ~ relocation will not be offered; sponsorship is not available including if you are currently on OPT.

Required Job Qualifications:

• Bachelor’s degree in IT, Engineering, Computer Science or closely related field and 6 years in Information Technology with focus on Cloud Security and Orchestration building and managing platforms in the cloud (AWS/Azure) OR 10 years of experience in Information Technology with focus on Cloud Security and Orchestration building and managing platforms in the cloud (AWS/Azure).

• 3 years experience in Cloud security, Technology and automation.

• 1 year experience in Information Security management and/or leadership.

• Knowledge of cloud native technologies, cloud security controls and As a Service technologies.

• Building and leading a cloud security team; hiring, mentoring, and performance management.

• Deep understanding of CNAPP capabilities including:

• Cloud Security Posture Management

• Cloud Workload Protection Platform

• Cloud Infrastructure Entitlement Management

• Kubernetes Security Posture Management

• Data Security Posture Management

• Vulnerability management and scanning

• Container and orchestration security

• Integrating security into CI/CD pipelines, Infrastructure-as-Code and IaC security scanning.

• Identity and Access Management across cloud platforms.

• Familiarity with SAST, DAST, SCA, secrets scanning, API security and SDLC.

• Network security, encryption, zero-trust architecture.

• Threat detection, incident response, and vulnerability management.

• Knowledge of frameworks and standards: NIST, CIS Benchmarks, ISO 27001, SOC 2, PCI-DSS, HIPAA, FedRAMP.

• Cloud compliance and audit support.

• Policy development and enforcement Defining cloud security strategy, roadmap, and budget.

• Risk assessment and communication to executives/stakeholders.

• Vendor management and tool evaluation/procurement.

• Strong written and verbal communication.

• Experience monitoring, utilizing event management and automation technologies.

• Ability to simplify & standardize complex concepts / processes and drive cross functional execution.

• Understand and anticipate business priorities, trends and markets.

• Ability to prioritize and make trade-off decisions.

• Adaptability and ability to introduce / manage change.

Preferred Job Qualifications:

• Master’s degree in Cybersecurity, Information Technology, Engineering, Computer Science or closely related field.

• Relevant cybersecurity, cloud and service management certifications (e.g, CCSP, CKSP, CISSP, ITILv3) are highly desirable.

• Operations Management experience.

• Experience with Network and Voice, e.g. Network (data and voice) technologies, Software Defined Network, etc.

• Experience with Distributed Software, e.g., Web Server (Apache, IIS, and other HTTP Servers), Application Server (WebSphere, Tomcat, Open Stack).

• Experience with Third party supplier management.

• Experience with PMO structures, processes, and methods.

• Experience with Demand / Portfolio and Resource Management.

Pay Transparency Statement:

At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees. Learn more about our benefit offerings by visiting https://careers.hcsc.com/totalrewards .

The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan.

HCSC Employment Statement:

We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics.

Base Pay Range

$102,000.00 - $184,300.00

Exact compensation may vary based on skills, experience, and location.

For more than 80 years, HCSC has been dedicated to expanding access to high-quality, cost-effective health care and equipping our members with information and tools to make the best health care decisions for themselves and their families. As an industry leader, HCSC also has been helping to make the health care system work better for all Americans. To remain a leader, we offer compelling careers that encourage resourcefulness, strategic thought and empower you to make a difference in the lives of our members and their communities.

Today, with the industry at an important crossroad, HCSC is reimagining health care and looking for original thinkers who aren’t afraid to make innovative contributions. We are an Equal Opportunity Employment employer dedicated to workforce diversity and a drug-free and smoke-free workplace. Learn more about HCSC, our commitment to our members and the opportunity you’ll have to improve health care delivery in an open, collaborative environment.

HCSC is committed to diversity in the workplace and to providing equal opportunity to employees and applicants.

If you are an individual with a disability or a disabled veteran and need an accommodation or assistance in either using the Careers website or completing the application process, you can call us at 1-866-977-7378 to request reasonable accommodations.

Please note that only requests for accommodations in the application process will be returned. All applications, including resumes, must be submitted through HCSC's Career website on-line application process. If you have general questions regarding the status of an existing application, navigate to "candidate home" to view your job submissions.

Blue Cross and Blue Shield of Illinois, Blue Cross and Blue Shield of Montana, Blue Cross and Blue Shield of New Mexico, Blue Cross and Blue Shield of Oklahoma, and Blue Cross and Blue Shield of Texas,

Divisions of Health Care Service Corporation, a Mutual Legal Reserve Company, and Independent Licensee of the Blue Cross and Blue Shield Association

© Copyright 2025 Health Care Service Corporation. All Rights Reserved.