Sr Platform Cloud Security Engineer (Remote - US)

Thank you for considering a career at Bon Secours Mercy Health!

Summary

The Senior Platform Cloud Security Engineer is responsible for engineering security solutions for cloud infrastructures and services to protect the confidentiality, integrity and availability of information systems and data assets. This is a broadly defined role that encompasses many aspects of cloud security engineering and administration. The successful candidate will be multi-faceted in their interest and skillset.

Essential Job Functions

• Responsible for security engineering, and administration to protect digital assets in cloud platforms. Develop and maintain security procedures for identification and protection of digital assets in cloud platform, in accordance with BSMH security policies and standards.
• Responsible for administration, engineering, and security cloud platforms, in compliance with BSMH security policy and standards. Anticipate security requirements exceeding policy and standard, as appropriate. Participate in rotating on call schedule. Support security tuning, engineering and alignment with BSMH SOC for SIEM and security orchestration automation and response (SOAR).
• Support enterprise SOC incident response, vulnerability management, purple team exercise, and penetration testing for Azure cloud platform and forensic investigations
• Support security tuning, engineering and administration Azure identity management, network security gateways, web application firewall, distributed denial of service, defender endpoint, cloud access security broker, identity management. Support Palo Alto firewall engineering and administration for Azure cloud platform.
• Review daily and weekly metrics for security events
• Deployment and administration of endpoint security tooling
• Review daily and weekly metrics for security events
• Perform analysis of log files and data outputs. Perform triage of incoming issues using a ticketing & tracking system
• Guide product engineering teams to adopt BSMH security standards directly in our software and development lifecycle. Work collaboratively with BSMH security governance to provide feedback for improvement of security policy and standards
• Assist with evaluating or creating new technologies and services in order to solve complex security issues. Work with other teams to identify vulnerabilities in their systems
• Support Cloud threat deception technologies and Cloud asset management
• Support Cloud compliance Azure Purview and Azure Security Center
• Support Cloud Akamai security technologies
• Support cyber threat intelligence
• Support audit compliance and control frameworks HITRUST, SOC 2 Type 2, PCI-DSS

This document is not an exhaustive list of all responsibilities, skills, duties, requirements, or working conditions associated with the job. Employees may be required to perform other job-related duties as required by their supervisor, subject to reasonable accommodation.

Licensing/Certification (Preferred)

• Certified Information Systems Security Professional (CISSP)
• Information Systems Security Engineer Professional (ISEP)
• Certified Cloud Security Professional (CCSP)
• Certificate of Cloud Security Knowledge (CCSK)
• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA)
• Palo Alto Networks Certified Security Automation Engineer (PCSAE)
• Palo Alto Networks Certified Cybersecurity Entry-Level Technician - (PCCET)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• EC-Council Certified Ethical Hacker (CEH)
• EC-Council Certified Hacking Forensic Investigator (CHFI)
• SANS GIAC Certified Incident Handler (GCIH)
• EC-Council Certified Cloud Security Engineer (C|CSE)
• EC-Council Certified Penetration Testing Professional
• Microsoft Certified Azure Administrator Associate
• Microsoft Certified Azure Engineer Associate
• Microsoft Certified Azure Security Engineer Associate
• Microsoft Certified Azure Scientist Associate
• Microsoft Certified Azure Fundamentals
• Microsoft Certified Azure Data Engineer Associate
• Microsoft Certified Azure Network Engineer Associate
• Microsoft Certified Azure Enterprise Data Analyst
• Microsoft Certified Azure Solutions Architect Expert
• Microsoft Certified Azure AI Engineer
• Microsoft Certified Azure AI Fundamentals
• Microsoft Certified Azure Support Engineer for Connectivity Specialty
• Microsoft Certified Enterprise Data Analyst Associate
• Microsoft Certified Security Operations Analyst Associate
• Microsoft Certified Security Compliance, and Identity Fundamentals
• Microsoft Certified Cybersecurity Architect
• Microsoft Certified Security Operations Analyst
• Microsoft Certified Security Administrator Associate
• Microsoft Certified Identity and Access Administrator Associate
• Microsoft Certified Security Administrator Associate
• Certified Scrum Master (CSM)

Education

Bachelor's Degree (required)

Field of Study- Information Assurance, Information Security, Information Technology, Information Systems, Computer Engineering, Cybersecurity (required)

Masters (preferred)

Field of Study- Information Assurance, Information Security, Information Technology, Information Systems, Computer Engineering, Cybersecurity (preferred)

Work Experience

5 to 10 years of recent experience in information technology/cybersecurity (required)

Training

None

Language

None

Technical/Hard Skills

• Experience designing and implementing cloud solutions using IaaS, SaaS, and PaaS
• Deep understanding of tools in the Azure platform
• Expertise in PowerShell and other automation languages (Python, Go, etc.)
• Skilled building and using automation to implement cloud technologies
• Strong knowledge of containers, container orchestration, and the Kubernetes ecosystem
• Understanding of Active Directory Federation Services
• Experience engineering and implementing security technologies for Azure cloud platform
• Experience Azure cloud Sentinel security information and event management (SIEM) administration
• Experience Azure cloud vulnerability remediation
• Experience Palo Alto firewall engineering and administration
• Experience administering Azure identity access management, network security gateways, B2B, web application firewall, distributed denials of serviced, Purview, PAAS services
• Experience Qualys Cloud vulnerability management
• Experience cyber security incident response and forensics

Interpersonal/Soft Skills

• Attention to detail
• Acceptance of authority
• Critical thinking
• Communication with family members
• Teamwork
• Conflict resolution
• Active listening
• Relationship building
• Technical Writing
• Analytical and problem solving
• Sensitivity to accuracy, timeliness, and professionalism in all areas of support activity
• Communications - ability to prepare presentations and communicate to a technical and non-technical audience

Working Conditions

Remote work

Periods of high stress and fluctuating workloads may occur

Long-distance or air travel as needed- not to exceed 10% travel

May have periods of constant interruptions

Required to car travel to off-site locations, occasionally in adverse weather conditions

Prolonged periods of working alone

Physical Requirements

Lifting/ Carrying (0-50 lbs.) 0%

Lifting/ Carrying (50-100 lbs.) 0%

Push/ Pull (0-50 lbs.) 0%

Push/ Pull (50-100 lbs.) 0%

Stoop, Kneel 0%

Crawling 0%

Climbing 0%

Balance 0%

Bending 0%

Sitting 67-100%

Walking 0%

Standing 0%

Additional Physical Requirements/Hazards

None

Patient Population

Not applicable to this position

Bon Secours Mercy Health is an equal opportunity employer.

Many of our opportunities reward* your hard work with:

• Comprehensive, affordable medical, dental and vision plans
• Prescription drug coverage
• Flexible spending accounts
• Life insurance w/AD&D
• Employer contributions to retirement savings plan when eligible
• Paid time off
• Educational Assistance
• And much more

*Benefits offerings vary according to employment status

Scheduled Weekly Hours:

40

Work Shift:

Days/Nights (United States of America)

Department:

SS Analytics

All applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, age, genetic information, or protected veteran status, and will not be discriminated against on the basis of disability. If you'd like to view a copy of the affirmative action plan or policy statement for Mercy Health - Youngstown, Ohio or Bon Secours - Franklin, Virginia; Petersburg, Virginia; and Emporia, Virginia, which are Affirmative Action and Equal Opportunity Employers, please email [email protected]. If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact The Talent Acquisition Team at [email protected].