Cloud Security Engineer - Evinova

Job Title: Cloud Security Engineer – Evinova
Location: Gaithersburg, MD

At AstraZeneca, we pride ourselves on crafting a collaborative culture that champions knowledge-sharing, ambitious thinking and innovation – ultimately providing employees with the opportunity to work across teams, functions and even the globe. 

Recognizing the importance of individualized flexibility, our ways of working allow employees to balance personal and work commitments while ensuring we continue to create a strong culture of collaboration and teamwork by engaging face-to-face in our offices 3 days a week. Our head is purposely designed with collaboration in mind, providing space where teams can come together to strategize, brainstorm and connect on key projects. 

Are you ready to be part of the future of healthcare? Can you think big, be bold, and harness the power of digital and AI to tackle longstanding life sciences challenges?  Then Evinova, a global health tech business might be for you!  

Transform patients’ lives through technology, data, and innovative ways of working. You’re disruptive, decisive, and transformative. Someone excited to use technology to improve patients’ health. We’re building a new Health-tech business – Evinova, a fully-owned subsidiary of AstraZeneca Group.

Evinova delivers market-leading digital health solutions that are science-based, evidence-led, and human experience-driven. Thoughtful risks and quick decisions come together to accelerate innovation across the life sciences sector. Be part of a diverse team that pushes the boundaries of science by digitally empowering a deeper understanding of the patients we’re helping. Launch pioneering digital solutions that improve the patients’ experience and deliver better health outcomes. Together, we have the opportunity to combine deep scientific expertise with digital and artificial intelligence to serve the wider healthcare community and create new standards across the sector. 

Introduction to Role:

The Cloud Security Engineer role at Evinova is a unique opportunity to join a global team of skilled cybersecurity professionals using next generation technologies to advance our cybersecurity risk management program on a global scale. This role operates at the intersection of Cloud Security Engineering and Cybersecurity Compliance - ensuring that our cloud environments are secure by default, compliant with regulatory requirements, and aligned to industry leading practices. Success in this role requires an analytical and threat-informed approach, attention to detail, and execution precision. This role will collaboratemulti-functionallyy across each cyber domain, product engineering squads, and business partners.

In this hands-on position, you’ll dive deep into AWS native services, designing hardened architectures, building compliance driven guardrails in code, partnering with DevOps, Platform Operations to keep our platform secure and audit ready. The ideal candidate excels at distilling cybersecurity concepts into clear and concise advisory, tailored for non-cyber audiences, and ultimately contributing to an increased cyber literacy across Evinova. Reporting directly to the Head of Cloud Security Architecture and with near daily interactions with the Head of Cybersecurity, this role provides continuous professional development opportunities through leadership visibility and exposure to strategic decision making.  

Accountabilities:

Platform Security Engineering

• Design and harden AWS Native Infrastructure such as VPC, IAM, KMS, EKS to meet the Evinova Cyber Baseline and CIS/NIST benchmarks
• Perform cloud security posture risk reviews by using our Cloud Security Posture Management (CSPM) tool, CI/CD pipeline scanners, and other cloud-centric vulnerability detection solutions
• Collaborate with DevOps and engineering teams to embed compliance checks into the CI/CD pipeline, enabling proactive identification and resolution of compliance issues
• Coordinate vulnerability remediation efforts with the Platform Operations Team to ensure security relevant issues are addressed in a timely manner and in compliance with internal policies / risk metrics
• Support the Head of Cloud Security Architecture with evaluating cybersecurity risks related to our AWS Infrastructure, Kubernetes workloads, serverless functions, and Infrastructure-as-Code (IaC) deployments
• Conduct research and information gathering to enrich risk exception responses and advising technical teams on mitigation strategies and leading practices
• Collaborate with the Platform Engineering teams to provide cybersecurity risk advisory on proposed architectural changes, new platform features / services, and third-party integrations – to ensure alignment with secure design prin