Sr Cloud Security Engineer

Senior Cloud Security Engineer

At Blue Cross and Blue Shield of Nebraska, we are a mission-driven organization dedicated to championing the health and well-being of our members and the communities we serve.

Our team is the power behind that promise. And, as the industry rapidly evolves and we seek ways to optimize business processes and customer experiences, there's no greater time for forward-thinking professionals like you to join us in delivering on it! As a member of Team Blue, you'll find purpose, opportunities and the support you need to build a meaningful career and make a powerful impact in our community.

The Senior Cloud Security Engineer is a hands-on technical leader responsible for designing, implementing, and operating cloud security capabilities across the enterprise. We are looking for an experienced technologist who can operate independently, take ownership of outcomes, and translate strategy into actionable solutions, while leading and mentoring junior team members. You will partner closely with engineering, architecture, and risk teams to deliver practical, scalable security capabilities that work in real-world environments. You will also play a key role in enabling the secure adoption of AI technologies, establishing guardrails, securing AI-enabled platforms, and ensuring that AI-driven capabilities are implemented responsibly and in alignment with security and compliance requirements.

The ideal candidate will live within driving distance of the Omaha, Nebraska office. This position allows remote flexibility but will have 1 day per week in the office.

If living in one of our approved states (Florida, Iowa, Kansas, Minnesota, Missouri, Nebraska, North Dakota, and Texas) – this person may travel to our headquarters based on business needs.

What you'll do:

• Design and implement secure Azure configurations, guardrails, and reference architectures across identity, network, compute, and data
• Build and enforce policy-as-code and secure-by-default deployment patterns using Azure Policy and infrastructure-as-code
• Own and mature Cloud Security Posture Management (CSPM), including risk prioritization, remediation, and baseline alignment
• Implement, tune, operate, and optimize cloud security tooling and core security platforms, including Microsoft Defender, WAF, Microsoft Sentinel, Entra ID, CyberArk, CrowdStrike, and related capabilities
• Define and enforce security guardrails for AI usage and secure adoption of AI platforms
• Identify, assess, and mitigate cloud and AI security risks, including misconfigurations, access risks, and emerging threats
• Partner with platform and application security teams to integrate security into CI/CD pipelines and enable secure AI-assisted development practices
• Build automation to improve remediation, monitoring, and compliance reporting at scale
• Partner with engineering teams to translate security strategy into practical, implemented solutions
• Mentor junior engineers and provide technical leadership while serving as a senior escalation point for complex issues

To be considered for this position, you must have:

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
• 6+ years of experience in cloud security, cybersecurity engineering, or related fields
• Hands-on experience securing Azure environments, including identity, network, and platform services
• Experience implementing and operating cloud security controls and tooling
• Strong understanding of cloud security risks and misconfiguration patterns, including identity and access risks
• Experience with Infrastructure as Code (Terraform, Bicep, ARM) and policy-as-code
• Proven ability to assess risk, prioritize remediation, and drive issues to resolution
• Comfort working independently, taking ownership, and delivering outcomes with minimal oversight
• Experience partnering with engineering teams to implement practical, scalable security solutions
• Strong communication skills with the ability to engage effectively with engineers, architects, and leadership

The strongest candidates for this position will also possess:

• Experience securing AI/ML or AI-enabled platforms and implementing guardrails for enterprise AI usage
• Familiarity with AI-related threats (e.g., prompt injection, data leakage, model misuse)
• Scripting or automation experience (PowerShell, Python, or similar)
• Familiarity with compliance frameworks (NIST, CIS, HIPAA)
• Experience in healthcare or other regulated industries

We are unable to sponsor or take over sponsorship of an employment visa at this time.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Other duties may be assigned.

Learn more about what makes BCBSNE such an exceptional place to work by visiting NebraskaBlue.com/Careers.

We strongly believe that diversity of experience, perspective and background will lead to a better workplace for our employees and a better product for our customers and members.