Bring your heart to CVS Health. Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand - with heart at its center - our purpose sends a personal message that how we deliver our services is just as important as what we deliver.

Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable.Position Summary

CVS Health is looking for a team-oriented Network Security professional to provide engineering support for multiple controls across our infrastructure. The successful candidate will have experience with designing, deploying, and administering the following controls: Network Access Control (NAC), Network Detection & Response (NDR), Intrusion Prevention Systems (IPS) and Web Application Firewalls (WAF).Come join a team of experienced engineers who execute a crucial role in safeguarding company, customer, patient, member, and employee data. As a Security Engineer, you will be responsible for designing, implementing, and maintaining robust security measures to protect an organization's systems, networks, and data from cyber threats. You will work closely with IT teams and other departments to ensure the organization's security infrastructure meets the highest standards, safeguarding sensitive data and ensuring regulatory compliance. Your work will be an essential part of driving positive change in the network security space. This team makes a powerful impact on the organization's security posture.Responsibilities include

• Deploying and administering network security controls
• Performing incident response (IR) functions
• Developing policies and producing reports on compliance status
• Developing and enforcing security policies and procedures related to NAC, NDR, IPS, or WAF usage
• Hardening the corporate network
• Providing training to other team members and producing documentation
• Ensure adherence to legal, regulatory, and industry standards, such as GDPR, HIPAA, and PCI-DSS

• 5+ years' experience in a network security engineering role
• 5+ years' experience designing, deploying and administering intrusion prevention systems, network access control systems, network detection & response systems and web application firewalls
• 5+ years' hands-on experience with the following solutions: Web application firewalls such as, Akamai, Imperva, Cloudflare or Radware, Intrusion Prevention Systems such as Cisco Firepower, Fortinet, or Palo Alto
• 5+ years' hands-on experience with; Network Detection & Response (NDR) systems such as Arista Awake NDR, Cisco Stealth Watch, FortiNDR, or Corelight, Network access control (NAC) systems such as Forescout, Cisco Identity Services Engine (ISE) or Fortinet FortiNAC

• Familiarity with scripting languages (Python, Ansible, Bash)
• Strong analytical and critical thinking skills
• Expert understanding of cybersecurity principles and best practices
• Ability to collaborate within a team environment as well as independently
• Ability to troubleshoot effectively and work under pressure
• Keen attention to detail and commitment to maintaining high standards of security
• Relevant certifications (CISSP, CEH, CCNA, CompTIA Security+, SANS GIAC, GPEN)

• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)