Cybersecurity Specialist 3

seeking a Cloud Security Engineer to support cloud security initiatives and ongoing cybersecurity programs. This role will focus on securing Azure environments, automating security processes, and supporting enterprise security monitoring.

Scope

The scope includes working with members of the IT&S (Information Technology and Services) Department to:

• Reduce fragmentation across multiple remote access tools, creating consistent controls, deduplicating capabilities, and reducing operational complexity

-- Configure Azure Cloud Application Security Broker (CASB)

-- Evaluate and secure other access methods in the context of CASB

-- Review vulnerabilities, triage issues, and partner with technology and business teams to drive remediation

-- Ensure secure design, deployment, and documentation for applications and services

-- Collaborate with other technology teams and business units on secure remote access practices

• Extend automation capabilities to define, prioritize, and develop standardized incident response activities

-- Configure Azure score manager to track historical score data

-- Automate log collection from new Azure subscriptions

-- Normalize Event Hub log collection

-- Automate baseline security configuration and utility deployment using Ansible

• Scripting KPI and metrics collection and presentation
• Develop new integrations and vulnerability related alerts in Splunk

Deliverables

• Documentation

-- Architectural Review Board (ARB)

-- Technical Review Board (TRB)

-- Change Management Review Board (CMRB)

-- Change Advisory Board (CAB)

-- Other documentation as required (e.g., for audits and inspections, updates to standards and procedures, etc.)

• Consult with project team and other stakeholders, e.g., IT practitioners, the Cybersecurity and Compliance teams, Enterprise Architecture, Applications, Infrastructure, Network, Database, OCM, etc. during testing and implementation.

Requirements

• 4+ years of practical application security experience.
• 2+ years of practical information security experience.
• Practical experience using Security Information and Event Management (SIEM) tools to sort, analyze, view, and report on data.
• Knowledge of technology protocols and security concepts.
• Industry cybersecurity and technology certifications are a plus.
• Experience working in a regulated utility environment is a plus.
• Experience working in a remote, cross functional team, with the ability to drive the scope of work.
• Ability to lead work effort with little day to day supervision. Ability to work through ambiguity and escalate issues to maintain project momentum.
• Excellent interpersonal skills, including collaboration, facilitation, and negotiation.