Job Description
Cybersecurity Engineer – WAS & WAF
Guaynabo, PR
ABOUT US
At Triple S, we are committed to provide meaningful job experiences for Valuable People (Gente Valiosa). We encourage an environment of very high ethical standards, always excelling in service, collaboration among the company, agility to deliver timely, and embracing accountability for results.
When you join Triple S, you will be key to our efforts on delivering high-quality and affordable healthcare as well as contribute to our purpose to enable healthier lives. We serve more than 1 million consumers in Puerto Rico through our Medicare Advantage, Medicaid, Commercial, Life and Property & Casualty Businesses.
Let’s build healthier communities together, join now!
ABOUT THE ROLE
Develops and manages next generation application security systems and assets that support the business and its subsidiaries. Has fundamental hands-on experience with application vulnerability scanning, web application protection, and secure digital communication. Base knowledge configuring security systems. Has experience with fast paced, incentivized business operations that need to be agile while adhering to diverse regulatory and security framework expectations.
WHAT YOU’LL DO
- Research, evaluation, validation and recommendation of technical security solutions while assisting with Build, Test, and Implementing for the enterprise and its subsidiaries
- Coordinates with product vendors and service providers supporting technical security capabilities and processes.
- Manage system/application environment, configuration, policy and required operational activities on assigned technical security solutions.
- Monitors, reports on, and enhances performance of assigned technical security solutions.
- Provides security technology incident response and problem management. Troubleshoots software and/or hardware issues/failures on assigned technical security solutions. Resolves alerts and performs remediation activities as required for return-to-operation.
- Accountable for follow-up of all security work requests including collaborating with other IT areas to ensure timely completion/resolution and obtainment of appropriate approval levels.
- Supports escalations, known issues and out of cycle requests on multiple security solutions for the enterprise and its subsidiaries.
- Supports the development and maintenance of operational documentation for technical security solutions (e.g. procedures, engineering diagrams, knowledge base, etc.).
- Collects, analyzes, synthesizes and presents data on technical security solutions and processes to peers, leadership and business stakeholders.
- Assists the migration, upgrade and disposal of complex security capabilities and evaluates risks and impacts.
- Collaborates with other business areas to deliver on work group initiatives for the enterprise and its subsidiaries.
- Assists with developing continuous testing and validation of product performance and gap analysis for continuous security hardening processes.
- Assists execution and alignment to security reference architecture standards and published blueprints.
- Assists Disaster Recovery planning, design, implementation and exercises on security technology solutions.
- Assists remediation actions as a result of threat and vulnerability assessments or audits.
- Provide training to others on security capabilities, processes, procedures and operational task.
WHAT YOU’LL BRING
Bachelor degree in Computer Science, Information Technology, Cybersecurity, or related fields. +4 or more years of related experience. Exposure to Project Management methodologies like Waterfall, Agile, Lean or SAFe methodologies. Systems Security Certified Practitioner (SSCP) Certification, preferable. As a condition of employment, must complete the certification within six months.
Preferred experience in:
Scripting and application development background (software development, scripting, Python, JavaScript, PowerShell) specifically around process improvement, automation capabilities to provide developer assistance will be heavily considered
Web Application Security (WAS) & Web application firewall (WAF), knowledgeable and understanding of OWASP Top 10
Bot protection
Identify proofing
PKI
Specific application vulnerability scanning tool experience.
It is company policy to seek for the qualified applicants for positions throughout the company without distinction of race, color, national origin, religion, sex, gender identity, real or perceived sexual orientation, civil status, social condition, political ideologies, age, physical or mental disability, veteran status or any other characteristic protected by law. Drug-free company.
Equality Employment Opportunity/Affirmative Action for People with Disabilities/Veterans”. Employer with E-Verify to verify the eligibility of employment of all the new employees.
We encourage Veterans and Disabled to Apply
