Assoc Cloud Security Engineer

Blue Cross and Blue Shield of Nebraska

About The Position

At Blue Cross and Blue Shield of Nebraska, we are a mission-driven organization dedicated to championing the health and well-being of our members and the communities we serve. Our team is the power behind that promise. And, as the industry rapidly evolves and we seek ways to optimize business processes and customer experiences, there’s no greater time for forward-thinking professionals like you to join us in delivering on it! As a member of Team Blue, you’ll find purpose, opportunities and the support you need to build a meaningful career and make a powerful impact in our community. Looking for a developing cloud security professional who wants to be part of a high performing team and is interested in working on newer Azure technologies. The Associate Cloud Security Engineer will be responsible for building a strong foundational knowledge base and assisting with designing, implementing, securing, maintaining, and continuously improving cloud networks and cloud-based systems. This individual will be responsible for basic security operations and general maintenance of secure cloud infrastructure, security platforms, and software systems across a variety of domains and environments under supervision. They will also install, maintain, and upgrade the organization’s cloud computing environment and core infrastructure as assigned.

Requirements

Bachelor’s degree in computer science, information technology or a related field.
Minimum of 2 years of experience in information technology/information services, including at least 1 year in information security.
General understanding of GPO/PSO and RSOP hierarchies.
General understanding on how to go about securing various environments, as well as the ability to stay up with the latest trends and risks associated to cloud platforms.
Developing proficiency in Azure Cloud security tools and practices.
Ability to adapt to new technologies and environments quickly.
An equivalent combination of education and experience may be substituted for this requirement.
The ability to meet or exceed the attendance and timeliness requirements of their departments.
On-call work may be required based on business needs and role assignment.
The ability to work well in a team environment and be capable of building and maintaining positive relationships with other staff, departments, and customers.

Nice To Haves

Familiarity with IT Audit lifecycle and frameworks.
Familiarity with MITRE threat model and other threat modeling techniques.
Familiarity with multiple operating systems (Windows, CISCO, Linux, etc.) and various hardening techniques.
Have an understanding of change control practices and experience building solutions in lab/dev environments, producing test cases, etc.
Basic understanding of Linux root permissions.
Familiarity with cloud computing concepts.
Familiarity with various cybersecurity techniques and principles, such as forensics, threat hunting, penetration testing, threat intelligence, Federated Identity Management, and/or data loss prevention.
Experience with Palo Alto security solutions and NGFW firewalls.

Responsibilities

Under supervision implement, deploy, and maintain security access solutions and update current security solutions to include cloud-based solutions.
Develop an understanding of current infrastructure and access systems in place.
Research and recommend security solutions for new technologies across all platforms and environments.
Investigate changes/updates in current security solutions, as well as the cyber security industry, and recommend best practices in design and delivery.
Answer general inquiries regarding information security practice or security access.
Write technical specifications for procurement and implementation of security appliances and software products.
Participate in audit support activities, as they pertain to Cyber Security and cloud Management for both internal and external audits, as assigned.
Perform required activities to resolve open audit issues.
Configure and manage cloud security controls to protect data and infrastructure in partnership with the assigned team.
Assist with implementing and managing Azure Cloud security features, including Azure Security Center, Azure Policy, and Azure Sentinel.
Troubleshoot and resolve security system access issues.
Utilize Palo Alto Networks’ security solutions to enhance network security and the management of firewalls.
Participate in retrospective (IR) exercises.