Cloud Security Engineer I

$101,600 - $113,500/Yr

Weill Cornell Medicine - New York, NY

Full-time - Entry Level

New York, NY

Educational Services

About the position

The Cloud Security Engineer I position at Weill Cornell Medicine offers a unique opportunity to engage in various aspects of IT cloud infrastructure. This role emphasizes the application of risk analysis techniques, industry knowledge, and security best practices to develop and implement robust security solutions tailored for the organization. The ideal candidate will demonstrate a strong passion for collaboration, working closely with fellow engineers and architects to design and deploy security measures within a dynamic, cloud-centric environment. This position encompasses all technical aspects of security, requiring active participation in project-oriented tasks that contribute to the overall security posture of Weill Cornell Medicine. In this role, the engineer will assist architects and engineers in identifying, implementing, and maintaining Azure-related security and identity solutions, ensuring their optimal performance and effectiveness. The engineer will also identify opportunities for improvements and lead efforts through automation and orchestration of repeatable security tasks within Azure. A key responsibility will be to champion security best practices while fostering a positive and collaborative work environment that aligns with the mission of the medical college and hospital. Additionally, the engineer will participate in event monitoring and incident response activities, including the creation and execution of Azure-related playbooks. The position also involves contributing to the development and maintenance of metrics and reports that provide senior management with insights into the effectiveness of Azure security infrastructure, controls, projects, and processes. Staying updated on evolving cyber threats is crucial, as the engineer will continuously enhance their skillset to maintain proficiency in Azure security. Other related duties may be assigned as necessary, making this a versatile and engaging role within the organization.

Responsibilities

• Assist architects and engineers in identifying, implementing, and maintaining Azure-related security and identity solutions, ensuring their optimal performance and effectiveness.
• Identify opportunities for improvements and lead efforts through automation and orchestration of repeatable security tasks within Azure.
• Champion security best practices while fostering a positive, collaborative work environment conducive to the overall mission of the medical college and hospital.
• Participate in event monitoring and incident response activities, including the creation and execution of Azure-related playbooks.
• Contribute to developing and maintaining metrics and reports to provide senior management with insights into the effectiveness of Azure security infrastructure, controls, projects, and processes.
• Stay abreast of evolving cyber threats, continuously updating skillsets as required to maintain proficiency in Azure security.
• Perform other related duties as assigned.

Requirements

• Bachelor's Degree in a related field.
• Three years of hands-on experience implementing and managing security controls according to best practices.
• Experience with Azure security controls, particularly Microsoft Entra, Azure Policy, Azure Key Vault, Azure Monitor, and Azure Firewall.
• Experience configuring and analyzing logs from Azure infrastructure, focusing on seamless integration into event monitoring systems to enrich incident response capabilities.
• Experience in one or more common scripting and/or programming languages (e.g., Python, PowerShell, Bash, Java, etc.).
• Understanding of common networking and service protocols (e.g., TCP/IP, HTTPS, SSH).

Nice-to-haves

• Passion for building cloud environments while maintaining a pragmatic and balanced approach to security and privacy.
• Experience with infrastructure as code principles and tools such as Terraform.
• Experience with multiple cloud approaches (SaaS, PaaS, IaaS) and the ability to provide recommendations on their use and security.
• Experience working with Information Technology processes in healthcare or academic institutions and knowledge of related regulatory requirements (e.g., HIPAA, FERPA, PCI, etc.).
• Relevant information security or Azure certifications, such as Microsoft Azure Security Engineer Associate or others from CompTIA, (ISC)², or SANS/GIAC.
• Comfortable working with technologies across all layers of the OSI model.