Cyber Security Engineer III

As a Security Engineer III at Global Healthcare Exchange (GHX), your role will involve focusing on designing, automating, and enhancing security controls across cloud-native environments, with a specific emphasis on AWS, intelligent threat detection, and the responsible use of AI/LLM technologies. Key Responsibilities: - Design, implement, and maintain security controls for AWS cloud environments. - Develop Python-based automation for security monitoring, alert enrichment, and incident response. - Integrate and enhance AI-driven security analytics for threat detection, anomaly detection, and behavioral analysis. - Build and maintain integrations with SIEM, SOAR, EDR, and cloud-native security tools. - Automate vulnerability management, compliance checks, and security posture monitoring. - Perform threat modeling and risk assessments for cloud workloads and architectures. - Collaborate with DevOps teams to implement DevSecOps and CI/CD security controls. - Support incident response, threat hunting, and root cause analysis activities. - Document security designs, automation workflows, and response playbooks. Required Skills & Experience: - 4+ years of experience in Cybersecurity Engineering, Cloud Security, or Security Operations. - Strong hands-on experience securing AWS (IAM, networking, logging, encryption, monitoring). - Advanced Python skills for automation, APIs, and data analysis. - Experience with SIEM, SOAR, EDR, and cloud security platforms. - Solid understanding of incident response, threat detection, and MITRE ATT&CK. - Experience working in hybrid or cloud-native enterprise environments. - Strong analytical and problem-solving skills. AI & Automation Focus: - Practical understanding of AI/ML concepts applied to cybersecurity use cases. - Experience using AI for: - Alert correlation and prioritization. - Anomaly and behavior-based detection. - Threat intelligence enrichment. - Familiarity with LLM security considerations, including data protection and prompt safety. Good to Have Qualifications: - Hands-on experience with Claude (Anthropic) or other LLM platforms in security use cases. - Experience securing or integrating AI/LLM-powered applications. - Knowledge of CSPM, CWPP, and CIEM tools. - Exposure to Kubernetes and container security. - Infrastructure-as-Code experience (Terraform, CloudFormation). - Security certifications such as CISSP, CCSP, AWS Security Specialty, GCED, or GCIH. By joining GHX, you will have the opportunity to work on modern cloud and AI-driven security challenges, shape automation-first and intelligence-led security, collaborate with experienced security, cloud, and engineering teams, and have a high impact role with visibility across the organization. GHX is a healthcare business and data automation company that enables better patient care and saves billions for the healthcare community through automation, efficiency, and accuracy of business processes. Please note that GHX provides equal employment opportunities to all employees and applicants without regard to various protected statuses. The company believes in providing a working environment that enables each employee to be productive and work to the best of their ability while maintaining a discrimination and harassment-free atmosphere. As a Security Engineer III at Global Healthcare Exchange (GHX), your role will involve focusing on designing, automating, and enhancing security controls across cloud-native environments, with a specific emphasis on AWS, intelligent threat detection, and the responsible use of AI/LLM technologies. Key Responsibilities: - Design, implement, and maintain security controls for AWS cloud environments. - Develop Python-based automation for security monitoring, alert enrichment, and incident response. - Integrate and enhance AI-driven security analytics for threat detection, anomaly detection, and behavioral analysis. - Build and maintain integrations with SIEM, SOAR, EDR, and cloud-native security tools. - Automate vulnerability management, compliance checks, and security posture monitoring. - Perform threat modeling and risk assessments for cloud workloads and architectures. - Collaborate with DevOps teams to implement DevSecOps and CI/CD security controls. - Support incident response, threat hunting, and root cause analysis activities. - Document security designs, automation workflows, and response playbooks. Required Skills & Experience: - 4+ years of experience in Cybersecurity Engineering, Cloud Security, or Security Operations. - Strong hands-on experience securing AWS (IAM, networking, logging, encryption, monitoring). - Advanced Python skills for automation, APIs, and data analysis. - Experience with SIEM, SOAR, EDR, and cloud security platforms. - Solid understanding of incident response, threat detection, and MITRE ATT&CK. - Experience working in hybrid or cloud-native enterprise environments. - Strong analytical and problem-solving skills.