Senior Cloud Security Engineer - Remote DevSec Expert

Navitus; Carson City (NV); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, Dental, and Vision insurance

20 days paid time off

4 weeks paid parental leave

9 paid holidays

401K company match up to 5%

Adoption Assistance Program

Flexible Spending Account

Educational Assistance Plan and Pro/Mc

Referral Bonus Program - up to $750

Job summary

Navitus Health Solutions is seeking an Engineer, Cloud Security to drive continuous improvement of our cloud security, design and deploy security solutions, and oversee governance, risk, and compliance activities across Navitus stakeholders.

You will guide security solution selections, implement and integrate security controls in AWS and Azure, and lead major security programs with enterprise impact. The role requires experience in cloud architectures, incident response, and DevSec practices.

Qualifications

• 4-year degree in Computer Science, Business, Healthcare or other technology/security discipline.
• 7–10 years of information security experience in designing, deploying, managing, monitoring, and evaluating advanced cybersecurity.
• Experience in incident response, engineering, cloud architectures, tuning, in a SaaS environment.
• Strong understanding of application architectures and security; knowledge of securing code and best practices.
• Proficiency in programming or scripting languages; provide security training to developers and other employees.
• Document security policies and procedures; participate in proof of concepts and evaluations; familiarity with automation and DevOps practices.
• Certification in information security (Azure Fundamentals/AZ-900, CISSP, CISM, etc.) or comparable work experience preferred.
• Risk analysis/assessment experience a plus; healthcare data privacy knowledge is a plus.
• Experience with security tools and frameworks like AWS WAF, CDK, and threat modeling methodologies.
• Experience with APIs and DevSec practices; support compliance program objectives.

Responsibilities

• Possess expertise in scripting controls, automating processes, managing AWS WAF rules, and utilizing CDK nag rules for preventive controls.
• Analyze and improve existing security policies, identify and patch vulnerabilities in applications and infrastructure, and lead key security programs and projects.
• Develop and implement DevSec practices to integrate security into the software development lifecycle.
• Use software to detect, remediate, and enforce security standards within AWS and Azure environments.
• Conduct security assessments of cloud applications and APIs.
• Participate in the development of cloud API, Cloud Application Security and Cloud Security monitoring controls.
• Perform analysis of log files and triage incoming issues using a ticketing system.
• Create and maintain documentation for new and existing processes and deployments.
• Engineer and tune cloud security solutions, including monitoring, alerting, and maintaining a defined security posture.
• Other duties as assigned

Skills

Automation

DevSec

Incident response

Cloud security

Programming

Education

Bachelor's degree in CS/IT/Security

Tools

CDK nag rules

AWS WAF

CDK

Threat modeling

Job description

Navitus Health Solutions is seeking an Engineer, Cloud Security to drive continuous improvement of our cloud security, design and deploy security solutions, and oversee governance, risk, and compliance activities across Navitus stakeholders.

You will guide security solution selections, implement and integrate security controls in AWS and Azure, and lead major security programs with enterprise impact. The role requires experience in cloud architectures, incident response, and DevSec practices.