Security Network Engineer

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues - caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day. Position Summary CVS Health is looking for a team-oriented network security professional to provide engineering support for multiple controls across a Fortune 100's infrastructure. The successful candidate will have experience with deploying and administering the following four controls: Network Access Control (NAC), Network Detection & Response (NDR), Intrusion Prevention Systems (IPS) and Firewalls.Come join a team of experienced engineers who execute a crucial role in safeguarding company, customer, patient, member and employee data by protecting against cyberattacks. This team makes a tangible impact on the organization's security posture. As a Network Security Engineer, you will engage in hands-on deployments that will build your technical and strategic expertise in cybersecurity. Your work will be an essential part of preventing breaches by driving positive change in the network security space.Responsibilities include:

• Deploying and administering network security controls
• Performing incident response (IR) functions
• Developing policies and producing reports on compliance status
• Developing and enforcing security policies and procedures related to NAC, NDR, IPS, or WAF usage
• Hardening the corporate network
• Providing training to other team members and producing and publishing many different types of documentation

• 3+ years' experience in a network security engineering role
• 3+ years' experience deploying and administering intrusion prevention systems, network access control systems, network detection & response systems or web application firewalls
• 2+ years' hands-on experience with two of the following solutions:(1)Web application firewalls such as f5 ASM, Akamai, Imperva, Cloudflare or Radware, (2) Intrusion Prevention Systems such as Cisco Firepower, Fortinet, or Palo Alto, (3) Network Detection & Response (NDR) systems such as Arista Awake NDR, Cisco Secure Network Analytics, FortiNDR, Trellix, NetWitness or Corelight NDR, (4) Hands on experience with network access control (NAC) systems such as Forescout Continuum, Cisco Identity Services Engine (ISE) or Fortinet FortiNAC

• Familiarity with scripting languages (Python, Perl)
• Strong analytical and critical thinking skills
• Expert understanding of cybersecurity principles and best practices
• Expert communication skills
• Ability to collaborate within a team environment
• An initiative-taking, can-do attitude
• The ability to find innovative solutions to challenges
• Ability to troubleshoot quickly and work under pressure
• Ability to work independently and solve problems through research or by engaging colleagues to find a way to get things done autonomously
• Relevant certifications (CISSP, CEH, CCNA, CompTIA Security+, SANS GIAC, GPEN)

• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.
• No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.
• Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.