Medline Industries is looking for a senior cloud security engineer to serve as a key member of our network security team. This position will help mentor other team members in the day-to-day operations including but not limited to: troubleshooting, monitoring, detecting, analyzing, and determining remediation efforts for security risks, events, and incidents. This position will also be involved in developing Medline’s cloud and network security strategies, which includes hybrid cloud, DevSecOps, co-locations, etc. This position requires a high degree of technical skill, innovation, and creativity. It also requires staying current with new and emerging trends, theories, standards, and technologies.

MAJOR RESPONSIBILITIES

Advanced understanding of and experience with fundamental cloud computing concepts.

Building and operating automated security operations in cloud environment.

Develop security automation and APIs in the public cloud across the key pillars of security namely IAM, CI/CD security, security logging, incident response, data protection, compliance validation, security analytics, vulnerability management, platform and application threat modeling, etc.

PaaS/SaaS/IaaS security evaluation and design.

Parsing through event logs/files analyzing and determining security related issues.

Provide a process driven approach which ensures accuracy and consistency.

Create, maintain, and update technical and architectural documentation.

Excellent communication skills and the ability to partner and collaborate with both engineers, architects, business users, and leaders on architecture and security models.

Present to and educate team members on new and existing tools, concepts, and procedures.

Participates in other security operations duties as requested, including an on call schedule.

MINIMUM JOB REQUIREMENTS

Education

Bachelor’s Degree in Computer Science, Information Systems, or other related field or an equivalent combination of education, training, and experience

Certification / Licensure

Work Experience

A minimum of 3 years of Cloud experience within the IT field.

5 or more years of experience in infrastructure and/or information security

Must have broad technical services experience in support of application, systems, storage, network/telecom, and cloud

Knowledge / Skills / Abilities

Expert level knowledge of networking, information systems, security controls, and information security concepts (CIA, defense in depth, etc.)

Advanced experience with perimeter security and firewall technologies on Azure and AWS

Experience with container technologies (Docker, Kubernetes)

Proven experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM) and network security

Advanced knowledge of troubleshooting, log analysis, event correlation, and data analysis with a strong understanding of TCP/IP and networking

Experience with creating automation scripts (Python, Bash, Powershell, Ansible, Terraform, ARM/Bicep etc.)

Excellent verbal and written communication skills

Experience in healthcare and/or manufacturing domains

Education

Bachelor’s degree in Networking, Computer Science, Information Security or equivalent related work experience.

Certification / Licensure

Preferred security certifications: CompTIA Security+, CISSP, CCSP, CCNA Security, CCNP, GNFA, GSEC, GSE

Microsoft Azure and/or AWS certification

Work Experience

Knowledge of HITRUST and the HITRUST CSF framework is preferred

Knowledge / Skills / Abilities

DISCLAIMER

All duties and requirements are subject to possible modification to reasonably accommodate individuals with disabilities.

This position description in no way states or implies that these are the only duties to be performed by an employee occupying this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by their supervisor(s)/manager(s).

This document does not create an employment contract, implied or otherwise, other than an "at will" employment relationship.