Information Protection Associate Advisor

Information Protection Associate Advisor - HIH - Evernorth

Job Description Information Protection Associate Advisor

Role Summary:

As a member of the Cloud Security Engineering team you will play an integral role in helping to protect the network and company data from any security threats or attacks through the development of advanced security capabilities. As a Cloud Security Engineer you will provide hands-on technical engineering to implement security automation, event-based detection and preventative capabilities, apply machine learning models to detect security anomalies, as well as threat intrusion and detection capabilities. The Cloud Security Engineer also provides security recommendations to application teams across a diverse set of cloud platforms and technologies including container security, secure coding practices, microservice design and secure patterns for serverless and cloud-native computing.

The individual will be part of a highly motivated team that is focused on a growing multi-year cloud security program. This individual would provide findings of their research that ultimately would strengthen overall security posture of the organization.

Major Duties and Responsibilities:

• Provide primary operational support and engineering for the public cloud platform and cloud security tools and debug and optimize systems and automate routine tasks.
• Incorporate security tools/components into a DevOps pipeline.
• Automate security component and policy changes.
• Deep understanding of cloud security best practices, cloud native security controls, and Identity and Access Management (IAM)
• Configure, tune and maintain AWS Security Services like Network Firewall, AWS WAF, Firewall Manager, Shield Advanced and Guardduty
• Responsible for designing, implementing and maintain security controls across various cloud environments, including IaaS, PaaS and SaaS solutions
• Proven experience with Infrastructure and Platform services(e. g. EC2, RDS, ECS etc)
• Strong knowledge of industry standards and techniques in development, testing and implementation
• Knowledge of container security (Kubernetes, Docker) and serverless security principles.

Scope and Dimensions:

• Reports to the Director/Sr Manager responsible for Global Cloud Security Engineering
• Customer service-oriented
• Ability to work in a flexible environment where requirements and procedures continuously evolve
• Ability to multi-task and manage time effectively

Qualifications

Required Skills

• Cloud Security experience
• Cloud Security (CCSP) and AWS Security Specialty or other cloud certifications highly recommended
• Experience with CSPM/CNAPP platforms like Palo Alto Prisma/Cortex Cloud or Orca or Wiz Security etc
• Proven knowledge of coding languages like such as Terraform, Python.
• Experience with AWS native security services like AWS WAF, Shield Advanced, Firewall Manager or other third party WAF tools.
• Has a strong capability to work with and partner with delivery teams and stakeholders
• Proven ability to quickly learn and experiment with new security related cloud technologies and tools.
• Proven ability to design end-to-end security patterns and solutions that may include on-premise and cloud resources that meet enterprise security policies and best practices.
• The individual should have a passion for new emerging technology in the cloud security space
• Solid understanding of services and capabilities delivered by mainstream cloud service providers
• Ability to influence technical discussions and decisions
• Ability to perform security research and document and communicate the findings of their research
• Strong work ethic and sense of urgency

Required Experience & Education

• College or University degree in Computer Science or a related discipline
• 8 - 11 years of hands on technical experience in solution design and architecture with primary focus on security products.

About Evernorth Health Services