Senior Cloud & Enterprise Security Analyst (Hybrid)

Independence Blue Cross; Philadelphia (Philadelphia County); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid work model

Equal Opportunity Employer

Job summary

Independence Blue Cross in the Philadelphia region is seeking a Sr Information Security Analyst (Cloud/Enterprise Security) to drive security controls across Azure, AWS, GCP, and on‑prem environments, while enabling the business to innovate securely.

As a SME and security operations lead, you will contribute to incident preparedness, threat monitoring, and governance programs aligned to HITRUST, PCI, NIST, and ISO standards in a collaborative, hybrid environment.

Qualifications

• 5–8 years of relevant information security experience (or 3–5 years in IT systems administration with strong security responsibilities).
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.

Responsibilities

• Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on‑prem environments.
• Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms.
• Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards.

Skills

Incident response

Security monitoring

Risk assessments

Compliance standards

Windows

Linux

Vulnerability assessment

Penetration testing

Project management

Technical writing

Tools

Qualys

NexusIQ

MS Sentinel

MDE

Elastic

Job description

Independence Blue Cross in the Philadelphia region is seeking a Sr Information Security Analyst (Cloud/Enterprise Security) to drive security controls across Azure, AWS, GCP, and on‑prem environments, while enabling the business to innovate securely.

As a SME and security operations lead, you will contribute to incident preparedness, threat monitoring, and governance programs aligned to HITRUST, PCI, NIST, and ISO standards in a collaborative, hybrid environment.