Sr. Cloud Cyber Security Engineer

Community Health Systems Professional Services Corporation•Franklin, TN

About The Position

As a member of the Information Security team, the Cloud Security Senior Engineer develops, implements, and operates cloud security solutions and controls to address current and emerging business security and compliance needs. The role serves as a cloud security expert, integrating practices for identity and access management, monitoring, platform standards, network segmentation and interconnection, encryption, and other security areas into CHS cloud platforms. The engineer contributes to technology decisions that reflect approved security architectures, business impact and exposures, emerging threats, vulnerabilities, regulatory requirements, and risks. The position works with Enterprise Architects, other functional area architects, and security specialists to ensure adequate security solutions across cloud IT systems and platforms, and communicates risks and solutions to business and IT partners.

Requirements

Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field, or equivalent, required.
5–7 years of experience in cybersecurity, information technology operations, or a related field required.
At least 1 year of cloud technology experience.
Experience designing and implementing technologies within cloud platforms.
Experience serving as an expert thought leader for cloud technology and influencing strategy to address internal or external business and regulatory issues.
Experience working in process-driven, structured environments and participating in process optimization activities.
Advanced knowledge of security principles, issues, techniques, and implementations across cloud platforms.
Ability to proactively identify and solve complex problems.
Strong understanding of the systems development lifecycle to provide technical leadership for multifunctional projects or initiatives.
Ability to communicate technical concepts to non-technical audiences.
Excellent written and verbal communication skills.

Nice To Haves

Relevant security certifications such as CISSP, GIAC, or OSCP.

Responsibilities

Define and document security standards for cloud platforms, carrying them through from initial concept to completion and governance.
Collaborate with internal IT teams to implement secure policies and settings across IaaS, SaaS, and PaaS cloud platforms.
Coordinate implementation of security standards for common COTS applications and cloud services, including support for log aggregation and SSO/SAML integrations.
Implement least-privilege access policies and restrictions in cloud infrastructure platforms, including Azure, AWS, Google Cloud Platform, and Oracle.
Contribute to and maintain security standards based on NIST recommendations, specifically NIST 800-53.
Review reference architectures from IT architecture and internal security architecture teams, and provide engineering reviews of cloud-platform Security Risk Assessments.
Implement cloud security toolsets and automate and continuously improve cloud security processes, both operationally and technically.
Partner with architects to develop and implement enterprise information security cloud architectures and solutions.
Document cloud configurations, including identity and access management, network segmentation, application security, data protection, and encryption.
Support security teams in implementing incident management and red-team processes, privileged access management strategy, and vulnerability remediation.
Participate in DevSecOps automation processes and applications, including GitHub, DAST/SAST tools, and code review processes.
Communicate and interact effectively and professionally with co-workers, management, and customers.
Maintain confidentiality of company business.
Communicate with management about developments within assigned responsibilities and perform special projects as required or requested.