Note: The job is a remote job and is open to candidates in USA. CVS Health is committed to building a world of health around every individual, and they are seeking a highly skilled Security Specialist with expertise in cloud and database security. The role involves driving vulnerability remediation efforts across cloud platforms and database environments, serving as a technical advisor, and fostering collaboration between security, operations, and development teams to deliver robust security solutions.
Responsibilities
- Oversee the administration, and implementation of the vulnerability and Minimum Security Baseline program
- Acts as a SME (subject matter expertise) in Cloud Security area, offering solutions and recommendations to the operation teams
- Design, implement, and maintain security measures for cloud-based systems (AWS, Azure, GCP, Openshift)
- Develop and enforce security policies and procedures for cloud platforms
- Manage cloud security monitoring, incident response, and remediation
- Work closely with cross-realm security teams to ensure adequate security solutions and controls are in place to meet business and regulatory requirements
- Ensure compliance with regulatory requirements (GDPR, HIPAA, SOC 2, PCI-DSS)
- Automate security processes and integrate with CI/CD pipelines
- Implement and maintain security controls for enterprise databases (on-premises, cloud, DBaaS)
- Lead database security audits, risk assessments, and compliance initiatives
- Develop and enforce database access controls, encryption, and authentication solutions
- Collaborate with IT and development teams to integrate security throughout the software lifecycle
- Manage and secure Openshift/Kubernetes clusters, including deployment, upgrades, and lifecycle management
- Implement RBAC, compliance controls, and vulnerability scanning for containerized environments
- Troubleshoot and resolve security issues across cluster, OS, network, and storage layers
- Support image scanning, import, and registry management in Openshift runtime projects
- Lead vulnerability management programs, including regular scans, risk assessments, and remediation tracking
- Coordinate cross-functional teams to prioritize and remediate vulnerabilities
- Develop and maintain vulnerability management policies, procedures, and reporting
- Mentor and guide team members in security best practices and operational workflows
- Communicate security issues, risks, and recommendations to management and stakeholders
Skills
- 7+ years in cloud security, database security, or related security roles
- 5+ years of experience with Cloud Platforms (AWS, Azure, GCP) and Database technologies
- 5+ years of experience in scripting and automation (Python, PowerShell, Bash, Terraform, Ansible)
- 3+ years of experience with vulnerability scanning tools and security assessment techniques (Wiz, Qualys, Tenable, etc)
- 2+ years of hands-on experience with Openshift/Kubernetes administration and security
- Knowledge of regulatory compliance standards and frameworks (GDPR, HIPAA, PCI-DSS, NIST, ISO 27001)
- Excellent communication, problem-solving, and team leadership skills
- Experience with database activity monitoring solutions (IBM Guardium, SIEM integration)
- Familiarity with DevOps practices and CI/CD security integration
- Relevant certifications (CISSP, CCSP, AWS/Azure Security, Red Hat OpenShift Security) preferred
Benefits
- Eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above
- Includes an award target in the company’s equity award program
- Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families
- Medical, dental, and vision coverage
- Paid time off
- Retirement savings options
- Wellness programs
- Other resources, based on eligibility
Company Overview
Company H1B Sponsorship