CVS Health · 2 days ago
Staff Cloud Security Engineer, Vulnerability Management
CVS Health is the nation’s leading health solutions company, reaching millions of Americans through various channels. They are seeking a highly skilled Security Specialist to drive vulnerability remediation efforts across cloud platforms and database environments, ensuring the protection of critical enterprise assets.
Health CareMedicalPharmaceuticalRetailSales
Responsibilities
Oversee the administration, and implementation of the vulnerability and Minimum Security Baseline program
Acts as a SME (subject matter expertise) in Cloud Security area, offering solutions and recommendations to the operation teams
Design, implement, and maintain security measures for cloud-based systems (AWS, Azure, GCP, Openshift)
Develop and enforce security policies and procedures for cloud platforms
Manage cloud security monitoring, incident response, and remediation
Work closely with cross-realm security teams to ensure adequate security solutions and controls are in place to meet business and regulatory requirements
Ensure compliance with regulatory requirements (GDPR, HIPAA, SOC 2, PCI-DSS)
Automate security processes and integrate with CI/CD pipelines
Implement and maintain security controls for enterprise databases (on-premises, cloud, DBaaS)
Lead database security audits, risk assessments, and compliance initiatives
Develop and enforce database access controls, encryption, and authentication solutions
Collaborate with IT and development teams to integrate security throughout the software lifecycle
Manage and secure Openshift/Kubernetes clusters, including deployment, upgrades, and lifecycle management
Implement RBAC, compliance controls, and vulnerability scanning for containerized environments
Troubleshoot and resolve security issues across cluster, OS, network, and storage layers
Support image scanning, import, and registry management in Openshift runtime projects
Lead vulnerability management programs, including regular scans, risk assessments, and remediation tracking
Coordinate cross-functional teams to prioritize and remediate vulnerabilities
Develop and maintain vulnerability management policies, procedures, and reporting
Mentor and guide team members in security best practices and operational workflows
Communicate security issues, risks, and recommendations to management and stakeholders
Qualification
Required
7+ years in cloud security, database security, or related security roles
5+ years of experience with Cloud Platforms (AWS, Azure, GCP) and Database technologies
5+ years of experience in scripting and automation (Python, PowerShell, Bash, Terraform, Ansible)
3+ years of experience with vulnerability scanning tools and security assessment techniques (Wiz, Qualys, Tenable, etc)
2+ years of hands-on experience with Openshift/Kubernetes administration and security
Preferred
Knowledge of regulatory compliance standards and frameworks (GDPR, HIPAA, PCI-DSS, NIST, ISO 27001)
Excellent communication, problem-solving, and team leadership skills
Experience with database activity monitoring solutions (IBM Guardium, SIEM integration)
Familiarity with DevOps practices and CI/CD security integration
Relevant certifications (CISSP, CCSP, AWS/Azure Security, Red Hat OpenShift Security) preferred
Benefits
Affordable medical plan options
401(k) plan (including matching company contributions)
Employee stock purchase plan
No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching
Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility
Company
CVS Health
CVS Health is a health solutions company that provides an integrated healthcare services to its members.
H1B Sponsorship
CVS Health has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2022 (1)
Funding
Current Stage
Public CompanyTotal Funding
$4BKey Investors
Michigan Economic Development CorporationStarboard Value
2025-08-15Post Ipo Debt· $4B
2025-07-17Grant· $1.5M
2019-11-25Post Ipo Equity
Recent News
Digital Commerce 360
2026-01-07
2026-01-07
2026-01-07
Company data provided by crunchbase