CyberSecurity Cloud Engineer

Cybersecurity Cloud Engineer

The Cybersecurity Cloud Engineer will design, develop, manage, and maintain a secure infrastructure leveraging cloud platform security technology and has an integral role toward protecting data entrusted to Ensemble Health Partners. This may involve analyzing existing cloud structures and creating new and enhanced security methods. The Cybersecurity Cloud Engineer is responsible for managing, configuring, finetuning and deploying cloud native policies to enhance security controls and reduce information security risks. This position will leverage resources to engineer solutions which support both IT and security controls and initiatives including support of HITRUST control and CIS framework requirements. The Cybersecurity Cloud Engineer will stay informed on current threats and proactively probe the enterprise for potential vulnerabilities and develop mitigation plans in collaboration with security and IT teams.  

Job Competencies: Valuing Differences - Works effectively with individuals of diverse cultures, interpersonal styles, abilities, motivations, or backgrounds; seeks out and uses unique abilities, insights, and ideas. Considers the collective. Collaboration - Works cooperatively within teams and partners with others, both internally and externally as needed, to achieve success; focuses on the results of the team, not the achievements of one person. Its All for One and One for All” Accountability - Accepts personal responsibility and/or consequences of failure and successes, delivering on commitments and refocusing effort when needed. Someone who is willing to step up and own it. Time Management - Effectively manages personal time and resources to ensure that work is completed efficiently. Developing Trust - Gains others’ confidence by acting with integrity and following through on commitments treats others and their ideas with respect and support them in the face of challenges. Takes Initiative - Takes prompt action to accomplish goals and achieve results beyond what is required; is proactive and pursues relentlessly in an agile environment. 

Responsibilities: 

• Coordinate with relevant teams to manage and update rules and signatures (e.g., intrusion detection/protection systems, antivirus, and content blacklists) for specialized cyber defense applications. 
• Manage cloud Azure/AWS policies to ensure compliance goals are maintained. 
• Manage and configure cyber defense tools including SIEM, Scanners, AV, etc. Assist in the development and maintenance of security documentation and all Playbooks 
• Participate in IT projects providing security architecture and security controls integration requirements. 
• Respond to crises or urgent situations to mitigate immediate and potential threats or IT issues. Track and document steps taken from initial detection through final resolution. 
• Assist with investigations of suspected cases of improper activity, coordinates reporting and recommends corrective steps. 
• Respond to security-related incident and service requests within allotted service level agreement time. 
• Manage and maintain, tune, and optimize the Web Application Firewalls (WAFs). 
• Manage and maintain API Management Services 
• Participate in IT projects providing Cybersecurity Engineering and security controls integration requirements.  
• Follow Change Management processes and represent change details in Change Advisory Board (CAB) meetings as necessary.  Work with the CAB to establish pre-approved changes as required. 
• Assure infrastructure-as-code is following standard security practices and achieves CIS compliance. 
• Improves process efficiency by crafting and implementing creative and balanced changes to existing deployment methodologies. 
• Experience with the analysis of underlying technologies that form the solution vital for the application of threat identification, analysis, and thread model design. 
• The threat model depicts trust boundary, threat agent(s), threat vector(s), and safeguard(s) vital to protect person, asset, data, and the Ensemble Health Partners brand. 
• Work closely with functional-area architects, engineering, and Cybersecurity analysts throughout the company to ensure adequate security solutions and controls are in place throughout all IT systems, cloud systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements.  

Experience/ Education: 

• 5+ years of experience in IT or Security and at least 2 years’ experience in managing cloud policies. 
• Preferred certifications: CISSP, CCSP, Security+, CySA+ or other industry standard certifications 
• Associate’s degree or greater in a relevant field of study with Information Security or Computer Science preferred 

Abilities/Skills: 

• Strong familiarity with Linux and Windows operating systems and cloud provider ecosystems like Azure and Amazon AWS 
• Working knowledge of networking protocols and configuration 
• Ability to create scripts (PowerShell/bash) 
• Knowledge of Terraform, CloudFormation, Containerization/Docker, Security tools 
• Adherence to change management process