Senior Cloud Security Engineer - Hybrid On-Campus Requirement

Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures.

Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company — not just insurers. 

We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo.

Unum is changing, and we’re excited about what’s next. Join us.

General Summary:

Unum’s Information Security team is expanding and looking for a Senior Cloud Security Engineer to join the team. This role will primarily focus on securing AWS Cloud environments and requires the ability to clearly communicate security and risk-related topics to both technical and non-technical audiences. The ideal candidate will bring creativity, initiative, and strong problem-solving skills to identify and address security threats and vulnerabilities within Unum’s cloud infrastructure.

This role follows a hybrid work model, requiring a minimum of two days per week on-site at one of our campus locations: Portland, ME; Chattanooga, TN; Atlanta, GA; or Columbia, SC.

Principal Duties and Responsibilities

• Support the administration and management of native cloud security services and other solutions that are deployed to secure cloud infrastructure
• Serve as an escalation path for team members to trouble shoot security related inquiries
• Partnering with peers to find an appropriate balance between DevOps and security
• Design, build and deliver cloud threat analytics by leveraging cloud log correlation, AI & machine learning engines
• Design, configure, implement, and leverage cloud services models such as SaaS, PaaS, and IaaS
• Build and operate automated security operations, including experience scripting configuration automation
• Develop guidelines and review security configurations related to AWS and/or Azure deployments and common web application frameworks
• Design, plan, and implement security tools, controls, policies, and processes
• Integrate cloud security technologies into security operations center (SOC) standard operating procedures
• Integrate enterprise scale security solutions in AWS and/or Azure, including user, security, and networking configurations

Job Specifications

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or related field, or Similar field with related work experience (5+ years)
• Cloud systems engineering and operational experience in IT (AWS and/or Azure)
• Familiarity with Information Security frameworks and standards (i.e., CIS, NIST, MITRE, ITIL)
• Experience in scripting or programming languages such as Python, PowerShell, JSON, Chef/Puppet/Terraform/Ansible to design security as code
• Knowledge of web application security, browser security models
• Working experience with AWS Security Hub, Inspector, GuardDuty and Trusted Advisor.
• Ability to handle both hands-on technical work, and consulting and advising on cloud and data security risk across the organization
• Proven ability to utilize experiences in AWS or Azure cloud environments to assist developer teams in efforts to maintain the security of environments throughout deployment
• Hands-on expertise operating in an AWS and/or Azure environment with mastery of architecture and security capabilities in the cloud
• Understanding of network attacks, DDoS, Phishing, email protocols/security/spam, encryption, authentication, logging and log analysis, IP and device reputation, and security rules and policies
• Broad-based working knowledge of cloud platforms, identity federation, networking, application, database, infrastructure, and/or server administration
• Experience liaising with peers to find an appropriate balance between DevOps and security
• Understanding of IT security best practices
• Strong knowledge of industry trends in security techn