Remote Cloud Security Engineer – Threat Modeling

Ensemble Health Partners; Cincinnati (OH); Remote; USD 84.000 - 132.000; Vollzeit

Benefits dieser Stelle

Healthcare benefits

Time off

Retirement plan

Well-being programs

Tuition reimbursement

Zusammenfassung

Ensemble Health Partners in the United States is seeking a Cybersecurity Cloud Engineer to design, develop, and maintain a secure cloud infrastructure, leveraging security technologies and aligning with HITRUST and CIS controls to protect patient and enterprise data.

You will work with IT and security teams on threat modeling, security architecture, incident response, and compliance initiatives, including managing WAFs and API management, automating infrastructure as code, and supporting CAB

Qualifikationen

• This position requires 3–5 years of related experience in cybersecurity development.
• An Associate Degree or equivalent experience is required; professional certifications are preferred.
• Familiarity with HITRUST and CIS controls is beneficial.

Aufgaben

• Participate in security architecture and security controls integration for IT projects.
• Respond to incidents and crises to mitigate threats and document resolution steps.
• Assist investigations of improper activity; coordinate reporting and corrective steps.
• Manage and tune Web Application Firewalls (WAFs) and API Management Services.
• Ensure infrastructure-as-code follows security practices and CIS compliance.

Kenntnisse

Cybersecurity

Security architecture

Threat modeling

Incident response

Ausbildung

Associates Degree or Equivalent Experience

CompTIA Security+ or CISSP (preferred)

Tools

WAFs

API Management

Infrastructure as Code

Jobbeschreibung

Ensemble Health Partners in the United States is seeking a Cybersecurity Cloud Engineer to design, develop, and maintain a secure cloud infrastructure, leveraging security technologies and aligning with HITRUST and CIS controls to protect patient and enterprise data.

You will work with IT and security teams on threat modeling, security architecture, incident response, and compliance initiatives, including managing WAFs and API management, automating infrastructure as code, and supporting CAB