Senior Security Engineer, Security Operations Center

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

Position Summary

As a Senior Security Operations Center (SOC) Engineer you will be responsible for the identification and tracking of potential security incidents across the CVS Health enterprise. The Senior SOC Engineer is essential, as you are part of the first line of defense for CVS Health's Information Security. The Senior SOC Engineer position is responsible for training new SOC analysts, assisting in intricate cyber security investigations as part of Threat Response activities, facilitating escalation of cyber security Incidents according to a well-documented Incident Response plan, creating, maintaining & updating SOP documentation for SOC Threat Response playbooks, metrics reporting, and ensuring correct analysis for the cyber security investigations.

Additional Responsibilities

• Perform thorough investigative analysis of potential cyber security threats based on log review and correlating events which requires the documenting of results that create a timeline that can be read and understood by both technical and non-technical personnel.
• Review ongoing or completed investigations performed by Level 1/L2 SOC Analysts for potential escalation and / or provide analysis feedback to Analyst and SOC Manager.
• Work alongside other senior security engineers and architects to deliver superior security services to CVS Health business units.
• Develop, enhance, and operationalize processes to ensure quality of triage.
• Assist with the development, measurement, analysis, and maintenance of internal and external service metrics for Security Operations, providing timely reports to leadership teams.
• Leverage the metrics to make better informed decisions on improving the organization's capability and functionality.
• Lead, coordinate, and train others on effective analysis of security alerts.
• Work with Alert & Detection engineers (OCE) on the new alert creation, validation and tuning.
• Collaborate across various business units to deliver the most comprehensive security response to internal customers.

Required Qualifications

• 5+ years of experience with networking concepts & protocols (TCP/IP, UDP, DNS, DHCP, HTTP, HTTPS, VPN, etc.)
• 3+ years of experience with operating system architecture (Windows, UNIX, Linux, MacOS)
• 3+ years of experience in Cybersecurity / InfoSec concepts (Phishing, Malware, Vulnerabilities, DDoS)
• 3+ years of experience in various identity and access management / authentication concepts and technologies

Preferred Qualifications

• Working experience and knowledge of two or more of the following security related technologies: Intrusion Prevention systems, Web Proxies, SIEM, SOAR, EDR, Firewalls, Web Application Scanner, Vulnerability Scanners, Malware Research Tools or Forensics Tools
• Previous experience providing input on policy direction & best practices

Education

• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)

Anticipated Weekly Hours

Time Type

Pay Range

The typical pay range for this role is:

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls.  The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors.  This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
 

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in our comprehensive and competitive mix of pay and benefits – investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.

• No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.

• Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.

For more information, visit 

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.