Job Description

Your Role

The Information Security team partners with IT and business teams to provide support and guidance to build products with sustained security and compliance through industry best practices. The Security Engineer, Consultant will report to the Senior Manager of Security Engineering. In this role you will be designing, implementing, and maintaining security technologies using Agile methodologies in a collaborative environment. You will be responsible for system enhancements, process improvement, and creative solutioning to solve complex problems and improve the effectiveness of our cyber security technologies.

The cloud security engineer helps architect, deploy and operate a secure cloud application infrastructure that aligns with business needs. The position is responsible for supporting operational innovation and providing security direction to the business to elevate the company’s security posture within a cloud computing infrastructure. An advanced role, the cloud security engineer helps deliver applications at scale and with resiliency to support business initiatives. The cloud security engineer is also expected to possess advanced administrative and troubleshooting skills, and be knowledgeable about architecture, engineering and design principles. The cloud security engineer should be adept at dealing with disparate applications and data systems to maintain the level of rigor required to adhere to business direction. Along with depth of system coverage, the role requires planning and design of policies and maintenance.

In tandem with security leadership, cloud security engineers consistently assess the threat landscape and adapt quickly to protect the business from risk. They must be highly technical and possesses at least 5-7+ years’ experience in security and systems administration across a wide variety of cloud infrastructure, including software as a service (SaaS), infrastructure as a service (IaaS) and platform as a service (PaaS). They are also expected to have a strong work ethic, leverage analytical and critical thinking, and be skillful at meeting change requests at a moment’s notice. Because the role often interfaces with other business units, strong listening and communication skills are expected.

Your Work

In this role, you will:

Be responsible for the design, deployment, and ongoing maintenance of Information Security & Risk Management platforms and controls including perimeter, cloud, data, network, automation/orchestration, and endpoint security.
Identify areas for automation and implement security tool integration.
Design and develop automation capabilities to reduce or eliminate manual tasks related to both application infrastructure delivery and the operations of the resulting solution.
Develop and maintain written procedures, engineering drawings and other technical documentation for accuracy of operational capabilities and knowledge across the team.
Be responsible for entire projects / programs or processes as industry knowledgeable lead within IT Security Engineering.
Work with cross-functional teams to influence priority of security features and controls, with minimal authority or supervision.
Design and advocate the adoption of new security technologies and solutions to support emerging enterprise business and customer needs.
Troubleshoot issues across the entire stack – hardware, software, applications, network, and cloud.
Engage with the business to provide advanced subject matter expertise and consultancy for IT Security controls.
Provide support, advice, and advocacy to Security teams on technical solutions; resolving issues and finding options to meet new business requirements.
Contribute to the achievement of strategic and operational goals established by Information Security & Risk Management leadership.
Establish metrics and implement reporting to track coverage and effectiveness of Security tools.
Provide security guidance, coaching and training to other employees across the company across a broad area of expertise.
Other duties as assigned.

Qualifications

Your Knowledge and Experience

Requires a bachelor's degree or equivalent experience
Requires at least 5 years of prior relevant experience
Requires working knowledge of Microsoft Windows, Red Hat Linux (RHEL)
Requires working knowledge of Azure, desired familiarity with GCP
Requires working knowledge of TCP/IP, HTTP, SSL, DNS, LDAP, Active Directory and one or more of: XML, IIS, Web Services/SOAP/REST, authentication protocols, SSH, SFTP
Requires familiarity with CI/CD tools such as Jenkins, BitBucket, Git
Requires scripting language such as Python, Shell
Requires configuration management tools such as Ansible, SCCM
Requires experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA).
Requires understanding of one or more security frameworks including: NIST 800-53, CSF.
Desired familiarity with Kubernetes and OpenShift
Desired 1+ years of experience in implementing Cloud based DevOps practices and Infrastructure as Code
Desired 1+ years of experience in rolling out container-based solutions (Docker, Kubernetes)
Desired experience with cloud transformation.
Desired familiarity with Microsoft Reference Architecture (MSRA)

About Us

At Blue Shield of California we are parents, leader, students, visionaries, heroes, and providers. Everyday we come together striving to fulfill our mission, to ensure all Californians have access to high-quality health care at a sustainably affordable price. For more than 80 years, Blue Shield of California has been dedicated to transforming health care by making it more accessible, cost-effective, and customer-centric. We are a not-for-profit, independent member of the Blue Cross Blue Shield Association with 6,800 employees, more than $20 billion in annual revenue and 4.3 million members. The company has contributed more than $500 million to Blue Shield of California Foundation since 2002 to have a positive impact on California communities. Blue Shield of California is headquartered in Oakland, California with 18 additional locations including Sacramento, Los Angeles, and San Diego. We're excited to share Blue Shield of California has received awards and recognition for LGBT diversity, quality improvement, most influential women in corporate America, Bay Area's top companies in volunteering & giving, and one of the world's most ethical companies. Here at Blue Shield of California, we're striving to make a positive change across our industry and the communities we live in , Join us!

Blue Shield of California

New Jobs

Information Security Engineer, Consultant