Are you looking for more than just a job? Do you want to have a voice and feel a sense of belonging? At ICW Group, we hire innovative people who consistently adapt, grow and deliver. We believe in hard work, a fun work environment, and embracing creativity that only comes about when talented people collaborate to develop solutions. Our mission is to create the best insurance experience possible.

Headquartered in San Diego with regional offices located throughout the United States, ICW Group has been named for seven consecutive years as a Top 50 performing P&C company offering the stability of a large, profitable and growing company combined with a small-company entrepreneurial spirit. Our purpose-driven ethos provides team members with opportunities to contribute, develop, and belong.

Exciting new opportunity for a Cloud Security Engineer III to design secure architectures and develop cybersecurity approaches and techniques for the security of any cloud or SaaS solution. This position will assist with strategic initiatives for short and long-term plans to identify and reduce the attack surface across cloud, SaaS and on premises applications and systems. This position is responsible for keeping the cloud infrastructure current, making recommendations, and participating in the implementation and continuous improvement of technologies and services in cloud-based environments. The position exists to monitor and defend ICW Group’s technology against potential threats that jeopardize the financial growth and security goals of the Company.

WHAT YOU WILL DO

Monitors and defends cloud-based information systems against unauthorized access, modifications and/or destruction.

• Monitors networks and systems for security breaches, using software that detects intrusions and anomalous system behavior and develops strategies to respond to and recover from a security breach. 
• Leads security incident response, including preparation, detection, analysis, containment, eradication, and recovery.
• Researches and implements methods to remediate network and application security vulnerabilities.
• Leads and participates in security architecture controls reporting, compliance audits, monthly and ad-hoc statistics and trends, and risk-focused reports including internal and 3rd party Risk Assessments.
• Utilizes automated tools to identify, assess, and report security concerns, with emphasis placed on effective communication to stakeholders. Takes an active lead to inform, advise, and partner with business units to help better secure operations.
• Provides management of cloud security solutions, coordination of security services, and support during incident cases.
• Directs and influences multi-disciplinary teams in implementing and operating Cyber Security controls.
• Collaborates with application developers and database administrators to deliver creative solutions to difficult technology challenges and business requirements.

Leads and runs complex cloud security related projects and resolves security related issues.

• Resolves complex security projects and issues. Develops a set of security standards to respond to and recover from a security breach focused on cloud and SaaS based options. 
• Provides support by proposing solutions, coordinating implementation, and enforcing information systems security policies, standards, and methodologies.
• Uses advanced technologies including Intrusion Detection & Prevention Systems, Lambda, CloudFront, CloudFormation, AWS Security Hub, S3, Batch, API Gateway, VPC, IAM, KMS, CloudWatch, CloudTrail, SFTP, DynamoDB and Config.
• Prepares and analyses system security reports by collecting, analyzing, and summarizing data and trends and makes recommendations to improve security.
• Maintains cloud operational security posture to ensure information system security policies, standards, and procedures are established and followed. 
• Creates and updates technical security standards for assets and software.
• Provides subject matter expertise on cloud information security architecture and systems engineering to other IT and business teams.
• Executes security architectures for cloud cloud/hybrid systems.

Serves as cloud cyber security technical subject matter expert and trainer and primary resource for the organization.

• Provides cloud information security expertise to system development teams throughout the life cycle process.
• Partners with systems engineering teams to ensure system design and implementation are consistent with company policies, requirements, and directives.
• Leads and conducts information security risk assessments including documenting processes, service level agreements and best practices.
• Develops the overall cloud security design, development, testing, and implementation of security solutions. Recommends compliance strategies that support customer requirements and alignment to company policy.
• Ensures cloud security quality, adherence to security guidelines, profitability, and information security related metrics for self and assigned projects.
• Collaborates with key stakeholders on remediation strategies and follows remediation activities through closure.
• Provides support on Incident Response on security incidents and participates in the development of business cases and presentations on information security technologies of interest to the company.
• Counsels project teams, application owners, and other Information Security teams on information security controls.

Partners with project management and other internal teams in determining overall security solutions.

• Executes technical and process changes required to adopt, maintain, and adjust InfoSec controls as required to manage the company's risks and align with industry best practices.
• Works with peers in other internal groups to drive technical security risk down in targeted areas.
• Takes end-to-end ownership of one or more security tools and metrics, driving risk down actively across the company.
• Contributes to the continual enhancement of the IT security infrastructure program through governance, core processes, leading technology, and enhancement of team’s skill sets.
• Coaches and educates others to increase early detection rates and decrease IT risk and security.

SUPERVISORY RESPONSIBILITIES 

This position has no supervisory responsibility but may mentor and train junior engineers.

WHAT YOU BRING TO THE ROLE

• Bachelor's Degree from four-year college or university required with major or emphasis Engineering, Cybersecurity, Networking, or Computer Science related field. Additional experience may be considered in lieu of degree.
• Minimum 8 years of experience working in a security engineering related role designing secure networks, systems and application architectures or equivalent combination of education and experience required.
• Minimum 3-5 years of experience in AWS Cloud Security services required.
• Experience in cyber security role requiring knowledge of data analysis, risk assessment, risk mitigation, investigation methods, incident management concepts and practices, and policy and procedure development.
• AWS Certified Security – required.
• AWS Developer or Solutions Architect Associate - Security Emphasis preferred. 
• Certification in GSEC, CISSP, and/or Security preferred.

KNOWLEDGE AND SKILLS

• Direct experience using advanced technologies such as Intrusion Detection & Prevention Systems (IDS/IPS), Firewalls, SIEM, Antivirus software, Network Packet Analyzers, content filtering, Malware analysis and forensics tools to detect intrusions.
• Experience with AWS Services such as AWS Identity & Access Management, AWS Organizations, AWS Security HuB, Guard Duty, CloudTrail, AWS CloudTrail.
• Knowledge of enterprise security platforms. 
• Demonstrated experience as a lead engineer in the design, implementation and support in an enterprise IT environment.
• Ability to hypothesize on root cause of inefficiencies and then test out probable solutions against those hypotheses.
• Strong understanding of endpoint security solutions to include File Integrity Monitoring and Data Loss Prevention.
• Ability to effectively communicate/present technical information to a non-technical audience; cross train and share information with team members. 

COMPENSATION

The salary range listed for this position, $113,668.05 to $203,468.21, is exclusive of fringe benefits and potential bonuses. If hired at ICW Group, your final base salary compensation will be determined by factors such as skills, experience and/or education. In addition, we believe in the importance of pay equity and consider internal equity of our current team members as part of any final offer. We typically do not hire towards the maximum of the range in order to allow for future and continued salary growth. We also offer a substantial benefits package outlined below. 

WHY JOIN ICW GROUP? 

• Challenging work and the ability to make a difference
• You will have a voice and feel a sense of belonging
• We offer a competitive benefits package, with generous medical, dental, and vision plans as well as 401K retirement plans and company match
• Bonus potential for all positions
• Paid Time Off with an accrual rate of 5.23 hours per pay period (equal to 17 days per year)
• 10 paid holidays throughout the calendar year
• Want to continue learning? We’ll support you 100%

ICW Group is committed to creating a diverse environment and is proud to be an Equal Opportunity Employer. ICW Group will not discriminate against an applicant or employee on the basis of race, color, religion, national origin, ancestry, sex/gender, age, physical or mental disability, military or veteran status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other characteristic protected by applicable federal, state or local law.

#LI-Hybrid

#LI-JM1