Engineer, Cloud Security

Overview Due to growth, we are adding an Engineer, Cloud Security to our team! The Engineer, Cloud Security will drive continuous improvement to our cloud and will be responsible for designing, deploying, and overseeing the management of group wide security solutions and executing against the company's Information Security and Compliance roadmap. Working closely with technology partners, you will help guide the selection, implementation, and integration of various security solutions. This position has significant organizational impact, requiring enterprise perspective, knowledge, and change management skills. The Engineer, Cloud Security will ensure that the risk posed by a variety of cyber threats is minimized. Support the Navitus IT mission through the use governance, risk and compliance activities that detect, prevent, or mitigate threats to confidentiality, integrity and/or availability of information resources on-behalf of Navitus stakeholders. Is this you? Find out more below! Responsibilities How do I make an impact on my team?  Possess expertise in scripting controls, automating processes, managing AWS WAF rules, and utilizing CDK nag rules for preventive controlsAnalyze and improve existing security policies, identify, and patch vulnerabilities in applications and infrastructure, and lead key security programs and projectsDevelop and implement DevSec practices to integrate security into the software development lifecycleUse software to detect, remediate, and enforce security standards within an AWS and Azure environmentConduct security assessments of cloud applications and APIsParticipate in the development of cloud API, Cloud Application Security and Cloud Security monitoring controls to ensure reliable service delivery and efficient use of all resourcesPerform analysis of log files and data outputs. Perform triage of incoming issues using a ticketing & tracking systemCreate and maintain documentation for new and existing processes and deploymentsEngineer and tune the cloud security solutions, including enrolling, monitoring, alerting, and maintaining a defined security postureOther duties as assigned Qualifications What our team expects from you? 4-year degree in Computer Science, Business, Healthcare or other technology/security disciplineMust have at least seven-ten (7-10) years of information security experience in designing, deploying, managing, monitoring, and evaluating advanced cybersecurityExperience in incident response, engineering, cloud architectures, tuning, etc. in a SaaS environmentHave a strong understanding of application architectures and securityHas knowledge of securing code and best practicesProficiency in programming or scripting languagesProvide security training and awareness to developers and other employeesDocument security policies and proceduresParticipate in proof of concepts and other technical evaluations of technologies, designs, and solutions and provide recommendationsHands-on knowledge of automation skills, dev ops skills, etcCandidates with certification in information security (Azure Fundamentals/AZ-900, CISSP, CISM, etc.) or comparable work experience preferredRisk analysis/assessment experience a plus. Knowledge of healthcare industry practices, HIPAA, and applicable data privacy practices preferredExperience with security tools and frameworks like AWS WAF, CDK, and threat modeling methodologiesExperience with APIs and DevSec practicesParticipate in, adhere to, and support compliance program objectivesThe ability to consistently interact cooperatively and respectfully with other employeesWhat can you expect from Navitus?  Top of the industry benefits for Health, Dental, and Vision insurance 20 days paid time off 4 weeks paid parental leave 9 paid holidays 401K company match of up to 5% - No vesting requirement Adoption Assistance Program Flexible Spending Account Educational Assistance Plan and Professional Membership assistance Referral Bonus Program – up to $750! #LI-Remote Navitus Health Solutions is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, pregnancy, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by law. PI287882017