Sr Security Engineer

CVS Health•Woonsocket, RI

5d•$109,512 - $185,400•Hybrid

About The Position

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary: CVS Pharmacy Inc., a CVS Health company, is hiring for the following role in Woonsocket, RI: Sr Security Engineer to develop, design, implement, deploy and manage applications and technology in order to control risk in accordance with established corporate security policy. Build security-as-code in a large multi-cloud environment, leveraging modern DevSecOps methodologies. Design and develop detective and corrective controls across hyperscale cloud providers, such as GCP, Azure, AWS and OCI. Develop API/microservices to automate reusable components. Standardize and automate security operational procedures and processes. Translate cloud security controls into programmatic enforcement across different cloud providers. Build IaC templates for repeatable deployments across key cloud providers. Operate within DevOps and Agile frameworks as part of Product Management Model, applying engineering skills as well as the ability to help manage a suite of products through Continuous Improvement/Continuous Development strategies. Develop and design application solutions related to identity data service and drive the technical implementation on user data analytic platforms. Design, implement and deploy products on the premises or cloud. Advocate for and support the business by serving as a quality champion through measuring and monitoring the quality and effectiveness of products. Ensure security and compliance adherence of products that impact colleague experience and operational efficiency. Consult and work cross functionally to influence and promote change to deliver quality service to our internal and external customers. Responsible for solution design and implementation by working with various infrastructure and security teams to also modify existing software or to correct errors. Define and enforce standards and configuration specifications, analyze user needs and software requirements to determine feasibility. Provide industry trending analysis and knowledge of upcoming security trends/threats related to IaC. Lead team members in solution designs and implementations. Telecommuting available. Multiple Positions.

Requirements

Master’s degree (or foreign equivalent) in Computer Science, Computer Engineering, Information Technology, Engineering, or a related field and two (2) years of experience in the job offered or related occupation.
Two (2) years of experience in CI/CD, Jenkins, GIT, Gitlab, and DevOps
Two (2) years of experience in Java, Python, or Node.js
Two (2) years of experience in Spring Boot microservices
Two (2) years of experience in Redis, Docker or Kubernetes
Two (2) years of experience in JIRA, Rally, or Confluence
Two (2) years of experience in SQL, MySQL, and NoSQL
Two (2) years of experience in Writing application code and deploying to production
Two (2) years of experience in Developing backend services, performing code reviews, and collaborating with peers on software development solutions
Two (2) years of experience in Relational database concepts
Two (2) years of experience in Cloud components including cluster management
Two (2) years of experience in Containerized services, storage, and workspace management.

Responsibilities

Develop, design, implement, deploy and manage applications and technology in order to control risk in accordance with established corporate security policy.
Build security-as-code in a large multi-cloud environment, leveraging modern DevSecOps methodologies.
Design and develop detective and corrective controls across hyperscale cloud providers, such as GCP, Azure, AWS and OCI.
Develop API/microservices to automate reusable components.
Standardize and automate security operational procedures and processes.
Translate cloud security controls into programmatic enforcement across different cloud providers.
Build IaC templates for repeatable deployments across key cloud providers.
Operate within DevOps and Agile frameworks as part of Product Management Model, applying engineering skills as well as the ability to help manage a suite of products through Continuous Improvement/Continuous Development strategies.
Develop and design application solutions related to identity data service and drive the technical implementation on user data analytic platforms.
Design, implement and deploy products on the premises or cloud.
Advocate for and support the business by serving as a quality champion through measuring and monitoring the quality and effectiveness of products.
Ensure security and compliance adherence of products that impact colleague experience and operational efficiency.
Consult and work cross functionally to influence and promote change to deliver quality service to our internal and external customers.
Responsible for solution design and implementation by working with various infrastructure and security teams to also modify existing software or to correct errors.
Define and enforce standards and configuration specifications, analyze user needs and software requirements to determine feasibility.
Provide industry trending analysis and knowledge of upcoming security trends/threats related to IaC.
Lead team members in solution designs and implementations.