Staff Cloud Security Engineer- Vulnerability Management

CVS Health is a healthcare company focused on creating a more connected, convenient, and compassionate health experience. The Staff Cloud Security Engineer will lead cloud, database, container, and vulnerability management security efforts across AWS, Azure, GCP, and OpenShift environments, while advising teams, automating security processes, and coordinating remediation initiatives.

Responsibilities:

• Oversee the administration, and implementation of the vulnerability and Minimum Security Baseline program
• Acts as a SME (subject matter expertise) in Cloud Security area, offering solutions and recommendations to the operation teams
• Design, implement, and maintain security measures for cloud-based systems (AWS, Azure, GCP, Openshift)
• Develop and enforce security policies and procedures for cloud platforms
• Manage cloud security monitoring, incident response, and remediation
• Work closely with cross-realm security teams to ensure adequate security solutions and controls are in place to meet business and regulatory requirements
• Ensure compliance with regulatory requirements (GDPR, HIPAA, SOC 2, PCI-DSS)
• Automate security processes and integrate with CI/CD pipelines
• Implement and maintain security controls for enterprise databases (on-premises, cloud, DBaaS)
• Lead database security audits, risk assessments, and compliance initiatives
• Develop and enforce database access controls, encryption, and authentication solutions
• Collaborate with IT and development teams to integrate security throughout the software lifecycle
• Manage and secure Openshift/Kubernetes clusters, including deployment, upgrades, and lifecycle management
• Implement RBAC, compliance controls, and vulnerability scanning for containerized environments
• Troubleshoot and resolve security issues across cluster, OS, network, and storage layers
• Support image scanning, import, and registry management in Openshift runtime projects
• Lead vulnerability management programs, including regular scans, risk assessments, and remediation tracking
• Coordinate cross-functional teams to prioritize and remediate vulnerabilities
• Develop and maintain vulnerability management policies, procedures, and reporting
• Mentor and guide team members in security best practices and operational workflows
• Communicate security issues, risks, and recommendations to management and stakeholders

Requirements:

• 7+ years in cloud security, database security, or related security roles
• 5+ years of experience with Cloud Platforms (AWS, Azure, GCP) and Database technologies
• 5+ years of experience in scripting and automation (Python, PowerShell, Bash, Terraform, Ansible)
• 3+ years of experience with vulnerability scanning tools and security assessment techniques (Wiz, Qualys, Tenable, etc)
• 2+ years of hands-on experience with Openshift/Kubernetes administration and security
• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)
• Knowledge of regulatory compliance standards and frameworks (GDPR, HIPAA, PCI-DSS, NIST, ISO 27001)
• Excellent communication, problem-solving, and team leadership skills
• Experience with database activity monitoring solutions (IBM Guardium, SIEM integration)
• Familiarity with DevOps practices and CI/CD security integration
• Relevant certifications (CISSP, CCSP, AWS/Azure Security, Red Hat OpenShift Security) preferred