Senior Cyber Security Engineer

We are hiring a Senior Cyber Security Engineer to join the Cyber Security Engineering team at BCBST!

In this role, you’ll operate as a hands-on security engineer with broad influence across the enterprise, embedding security into solution design, deployment, and modernization efforts. This is not a siloed Information Security role—you’ll partner directly with engineering, platform, and business teams to shape secure outcomes across a diverse technology landscape.

Day to day, you’ll provide practical security guidance, assess risk in real-world implementations, and help ensure that new tools, platforms, and integrations are designed and deployed securely. You’ll contribute across multiple areas including security tooling, cloud security, and emerging domains such as AI, helping the organization adopt new technologies safely and confidently.

This role is intentionally broad and dynamic. Success requires the ability to context switch, balance advisory and engineering responsibilities, and deliver practical, scalable solutions rather than theoretical guidance.

To be successful, you’ll bring strong security engineering fundamentals and the ability to operate across a wide range of technologies. We’re looking for candidates who:

• Have experience securing solutions in at least one major cloud platform
• Understand data and database security concepts and their real-world implications
• Can assess and secure architectures without being tied to a single technology stack
• Are comfortable navigating ambiguity and partnering with diverse teams

Experience with AI security, particularly evaluating risks across different vendors and platforms, is a strong plus.

This role is ideal for someone who enjoys solving complex problems, influencing technical direction, and building security into systems as they are designed, not after the fact.

Note:

• This is aremote, work‑from‑home position, but the final round of interviews will take place on‑site in our Chattanooga, TN office.
• Sponsorship is not available for this role.
• This role includes anon‑call rotation approximately once every 7–8 weeks, covering a full week.
• Core working hours align toEastern Time (EST).

Job Responsibilities

• Ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening.
• Ensures and anticipates Application, Cloud, and Platform security integrations with core security technologies.
• Collaborates with the technical teams and cloud service providers to ensure that the results satisfy the needs embodied in the requirements and security best practices are followed.
• Act as technical expert and assess potential systems and process vulnerabilities to determine security infrastructure and cloud requirements.
• Ensure compliance with regulations and privacy laws
• Security automation for testing, identity, cloud, and secure configuration baseline monitoring.
• Develops and enforces cloud security policies and procedures and provides technical support on information security policies, principles, standards, and procedures.
• Implements and manages cloud security solutions to protect cloud-based applications, data, and infrastructure.
• Conducts cloud security assessments and audits to identify and mitigate risks.
• Employees may be required to participate in a weekly on-call rotation.

Job Qualifications

Education

• Bachelor's Degree or equivalent work experience required. Equivalent experience is defined as 4 years of professional work experience in a corporate environment.

Experience

• 5 years - Experience as an information security engineer or in related field required
• Comprehensive experience configuring and leveraging SSO and step-up authentication to support authorization, including federation services.
• Intimate understanding of cloud security technologies and platforms.
• Evident knowledge of cloud security frameworks and compliance standards

Skills/Certifications

• Demonstrated ability to lead, document, and meet deadlines for projects from milestones to tasks and identify ownership per project with implementation knowledge and expectations.
• Demonstrated ability to interpret and translate technical and/or or complex concepts into information meaningful to IAM team members and/or business personnel.
• Proficient in Microsoft Office (Outlook, Word, Excel and PowerPoint).
• Proven analytical and problem-solving skills and ability to perform non-routine analytical tasks.
• Proven ability to provide Security integration, automation, and configuration efforts with Security oversight for software in the BCBST environment.
• Proven ability to determine Technical Security Baselines and ensure the baselines meet BCBST Policy and Standards.
• Proficient understanding of troubleshooting approaches, including knowledge of underlying security tools, networking, server, application, and cloud environments.
• Windows scripting and automation methodology (PowerShell, VBScript, Perl, Batch programming).
• Well-developed understanding of APIs, databases, and file connections for application connections.
• Proven ability to plan, prioritize, organize, configure, and coordinate across multiple applications and systems.
• Ability to work independently with minimal supervision or function in a team environment sharing responsibility, roles, and accountability.
• Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security, Microsoft Azure, CISSP, CISA, CRISC or SANS – Specialty, or equivalent are preferred.

Number of Openings Available

Worker Type:

Company:

Applying for this job indicates your acknowledgement and understanding of the following statements:

BCBST will recruit, hire, train and promote individuals in all job classifications without regard to race, religion, color, age, sex, national origin,citizenship, pregnancy, veteran status, sexual orientation, physical or mental disability, gender identity, or any other characteristic protected by applicable law.

Further information regarding BCBST's EEO Policies/Notices may be found by reviewing the following page:

BCBST's EEO Policies/Notices

BlueCross BlueShield of Tennessee is not accepting unsolicited assistance from search firms for this employment opportunity. All resumes submitted by search firms to any employee at BlueCross BlueShield of Tennessee via-email, the Internet or any other method without a valid, written Direct Placement Agreement in place for this position from BlueCross BlueShield of Tennessee HR/Talent Acquisition will not be considered. No fee will be paid in the event the applicant is hired by BlueCross BlueShield of Tennessee as a result of the referral or through other means.