Cloud Security Engineer

Blue Cross and Blue Shield of Nebraska is a mission-driven organization dedicated to championing the health and well-being of its members and communities. The Cloud Security Engineer will be responsible for implementing and improving cloud security capabilities, partnering with various teams to ensure secure adoption of technologies and compliance with security requirements.

Responsibilities:

• Implement and maintain secure Azure configurations, guardrails, and reference architectures across identity, network, compute, and data
• Implement policy-as-code and secure-by-default deployment patterns using Azure Policy and infrastructure-as-code
• Support the operation and continued improvement of Cloud Security Posture Management (CSPM), including risk prioritization, remediation, and baseline alignment
• Implement, tune, operate, and improve cloud security tooling and core security platforms, including Microsoft Defender, WAF, Microsoft Sentinel, Entra ID, CyberArk, CrowdStrike, and related capabilities
• Implement and maintain security guardrails for AI usage and the secure adoption of AI platforms
• Identify, assess, and help mitigate cloud and AI security risks, including misconfigurations, access risks, and emerging threats
• Partner with platform and application security teams to integrate security into CI/CD pipelines and support secure AI-assisted development practices
• Develop automation to improve remediation, monitoring, and compliance reporting at scale
• Partner with engineering teams to translate security requirements into practical, implemented solutions
• Troubleshoot cloud security issues, document solutions, and collaborate with senior engineers on complex problems

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience)
• 3+ years of experience in cloud security, cybersecurity engineering, cloud engineering, or related fields
• Hands-on experience supporting or securing Azure environments, including identity, network, and platform services
• Experience implementing or operating cloud security controls and tooling
• Working knowledge of cloud security risks and misconfiguration patterns, including identity and access risks
• Experience with or working knowledge of Infrastructure as Code (Terraform, Bicep, ARM) and policy-as-code
• Ability to assess risk, prioritize remediation activities, and drive assigned issues to resolution
• Ability to work independently with general guidance, take ownership of assigned responsibilities, and deliver reliable outcomes
• Experience collaborating with engineering teams to implement practical, scalable security solutions
• Strong communication skills with the ability to work effectively with engineers, architects, risk partners, and leadership
• Experience supporting AI/ML or AI-enabled platforms or implementing guardrails for enterprise AI usage
• Familiarity with AI-related threats (e.g., prompt injection, data leakage, model misuse)
• Scripting or automation experience (PowerShell, Python, or similar)
• Familiarity with compliance frameworks (NIST, CIS, HIPAA)
• Experience in healthcare or other regulated industries