Job Description

Location Designation: Hybrid - 3 days per quarter

The Senior Cloud Security Engineer helps architect, deploy and operate a secure cloud application infrastructure that aligns with business needs. The position is responsible for supporting operational innovation and providing security direction to the business to elevate the company’s security posture within a cloud computing infrastructure. An advanced role, the cloud security engineer helps deliver applications at scale and with resiliency to support business initiatives. The cloud security engineer is also expected to possess advanced administrative and troubleshooting skills, and be knowledgeable about architecture, engineering and design principles. The cloud security engineer should be adept at dealing with disparate applications and data systems to maintain the level of rigor required to adhere to business direction. Along with depth of system coverage, the role requires planning and design of policies and maintenance.

In tandem with security leadership, cloud security engineers consistently assess the threat landscape and adapt quickly to protect the business from risk. They must be highly technical and possesses at least 5-7+ years’ experience in security and systems administration across a wide variety of cloud infrastructure, including software as a service (SaaS), infrastructure as a service (IaaS) and platform as a service (PaaS). They are also expected to have a strong work ethic, leverage analytical and critical thinking, and be skillful at meeting change requests at a moment’s notice. Because the role often interfaces with other business units, strong listening and communication skills are expected.

What You’ll Do:

• Develop and maintain secure, resilient enterprise-grade cloud processes in tandem with architects and system engineers.

• Secure business applications and computing environments across public, private or hybrid cloud infrastructures.

• Protect business applications in compliance with privacy, security, business resiliency and compliance frameworks as defined in corporate policies.

• Maintain a consistent, secure environment using configuration management solutions (e.g., Puppet, Chef, Ansible, etc.). Conduct rigorous oversight of security systems and security configuration administration to reduce risk to enterprise systems and accounts.

• Deploy strong identity and access management (IAM) controls across applications and computing environments.

• Attend regular technical project and implementation meetings, and serve as the security consultant to help guide secure application and infrastructure configurations.

• Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments.

• Manage remediation efforts after security assessment findings outline weaknesses requiring attention.

• Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.

• Assist in maintaining strong oversight with cloud computing vendors and solution providers to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered.

• Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practice guidance. Apply learned knowledge across key lines of business, including products, practices and procedures.

• Act as a key figure in incident response to track occurrence and resolution, with strict documentation and reporting as well as engagement with security operations and incident response teams.

• Attend and fully engage in change and project management meetings.

• Perform other duties as assigned.

What You’ll Bring:

• At least 5-7+ years’ experience in cybersecurity as a practitioner and with at least 2-3+ years exposure with Amazon Web Services (AWS), Microsoft Azure or VMware.

• Strong Linux and Windows support skills.

• Experienced in cloud networking architecture and cloud operations, with cloud access security broker (CASB) experience preferred.

• Familiarity with tools such as Git, Jenkins, Chef, Puppet and Salt.

• Network and encryption experience, including virtual private networks (VPNs), IPsec, SSL/TLS, LDAP and public key infrastructure (PKI).

• IAM experience, including familiarity with authentication protocols (e.g., OAuth, SAML and OpenID) and privileged access management (e.g., secrete manager, cyberARK) is preferred.

• Familiarity with security solutions such as Wiz and SentinelOne, as well as tool such as Docker, Kubernetes and AWS CloudTrail.

• Experience with scripting languages such as Python, Ruby, PowerShell and JavaScript.

• Experienced in the use of threat intelligence services in a production environment.

• Experience and understanding of various regulatory requirements and laws is a plus. Relevant regulations include but are not limited to: Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), New York State Department of Financial Services.

• Experience achieving compliance with established framework (e.g., ITIL, NIST, CSA, ISO).

• Up-to-date understanding of a wide-range of incident response, system configuration, vulnerability management and hardening guidelines.

• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.

• Team leadership experience to help with the organizational and team dynamics in a growing field.

Pay Transparency

Salary Range: $147,500-$211,000

Overtime eligible: Exempt

Discretionary bonus eligible: Yes

Sales bonus eligible: No

Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.

Our Benefits

We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Click hereto discover more about our comprehensive benefit options or visit our NYL Benefits Site

Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities. Click here to learn more about New York Life’s leadership in this space.​

Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation We're proud that due to our mutuality, we operate in the best interests of our policy owners. To learn more about career opportunities at New York Life, please visit the Careers page of www.NewYorkLife.com

​Visit our LinkedIn to see how our employees and agents are leading the industry and impacting communities.

Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees’ needs.

Job Requisition ID: 94175