Engineer, Cloud Security

Navitus Health Solutions is a pharmacy benefit manager committed to making medications more affordable by removing costs from the drug supply chain. The Engineer, Cloud Security will design, deploy, and oversee enterprise cloud security solutions, improve security controls across AWS and Azure environments, and execute the company's information security and compliance roadmap.

Responsibilities:

• Possess expertise in scripting controls, automating processes, managing AWS WAF rules, and utilizing CDK nag rules for preventive controls
• Analyze and improve existing security policies, identify, and patch vulnerabilities in applications and infrastructure, and lead key security programs and projects
• Develop and implement DevSec practices to integrate security into the software development lifecycle
• Use software to detect, remediate, and enforce security standards within an AWS and Azure environment
• Conduct security assessments of cloud applications and APIs
• Participate in the development of cloud API, Cloud Application Security and Cloud Security monitoring controls to ensure reliable service delivery and efficient use of all resources
• Perform analysis of log files and data outputs. Perform triage of incoming issues using a ticketing & tracking system
• Create and maintain documentation for new and existing processes and deployments
• Engineer and tune the cloud security solutions, including enrolling, monitoring, alerting, and maintaining a defined security posture
• Other duties as assigned

Requirements:

• • 4-year degree in Computer Science, Business, Healthcare or other technology/security discipline
• • Must have at least seven-ten (7-10) years of information security experience in designing, deploying, managing, monitoring, and evaluating advanced cybersecurity
• • Experience in incident response, engineering, cloud architectures, tuning, etc. in a SaaS environment
• • Have a strong understanding of application architectures and security
• • Has knowledge of securing code and best practices
• • Proficiency in programming or scripting languages
• • Provide security training and awareness to developers and other employees
• • Document security policies and procedures
• • Participate in proof of concepts and other technical evaluations of technologies, designs, and solutions and provide recommendations
• • Hands-on knowledge of automation skills, dev ops skills, etc
• • Experience with security tools and frameworks like AWS WAF, CDK, and threat modeling methodologies
• • Experience with APIs and DevSec practices
• • Participate in, adhere to, and support compliance program objectives
• • The ability to consistently interact cooperatively and respectfully with other employees
• • Candidates with certification in information security (Azure Fundamentals/AZ-900, CISSP, CISM, etc.) or comparable work experience preferred
• • Risk analysis/assessment experience a plus. Knowledge of healthcare industry practices, HIPAA, and applicable data privacy practices preferred