Cloud Security Engineer

University Hospitals - Beachwood, OH

Full-time - Mid Level

Beachwood, OH

Hospitals

About the position

The Cloud Security Engineer (CSE) is responsible for ensuring the security of Azure environments by implementing security controls, managing identity and access, and responding to security incidents. This role involves designing and maintaining a secure infrastructure in a hybrid cloud setup, focusing on data protection and regulatory compliance.

Responsibilities

• Monitor security events daily, performing investigations and collaborating with teams to develop solutions for critical security concerns.
• Maintain and improve the security posture of the Azure platform by identifying and remediating vulnerabilities using various security tools.
• Provide cyber security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures.
• Implement and configure security controls and policies, manage access to data, and monitor threats to protect applications, containers, infrastructure, and networks.
• Respond to security incident escalations and implement threat protection measures.
• Automate security controls, data, and processes to enhance metrics and operational support using security-as-code.
• Configure access within a cloud solution environment using the defense-in-depth principle.
• Configure network security in a hybrid context with traditional network-centric controls to ensure data protection.
• Manage operations within a cloud solution environment using cloud-native tools like Log Analytics, Azure Monitor, and Azure Security Center.
• Support cloud engineers in implementing security best practices and enabling secure development and release processes.

Requirements

• Hands-on experience with Azure security controls and threat protection.
• Strong knowledge of identity and access management in Azure.
• Experience in defining organizational structure and policies related to cloud security.
• Proficiency in configuring network security defenses in a hybrid cloud setup.
• Ability to collect and analyze Azure logs for security monitoring.
• Experience in managing incident responses and understanding regulatory concerns.
• Deep understanding of configuring security policies and securing applications and data.

Nice-to-haves

• Experience with security-as-code practices.
• Familiarity with traditional network security controls in a hybrid environment.
• Knowledge of compliance requirements related to healthcare data.

Benefits

• Health insurance coverage
• 401k retirement savings plan
• Paid holidays
• Professional development opportunities