CNAPP Cloud Security Engineer (Remote) - Northeast region

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. As a CNAPP Cloud Security Engineer, you will advise, develop, implement, and run CNAPP Cloud Security tools while partnering with customers across various verticals.

Responsibilities:

• Perform implementation of CNAPP and CSPM tools in multi-account AWS and Azure environments
• Implement IaC scanning tools within the CI/CD Pipelines
• Develop Infrastructure as code in Cloud Formation or Terraform
• Develop custom control checks within CNAPP Platforms using JSON, REGO, or Terraform
• Analysis – identifies and evaluates potential threats and vulnerabilities to the public cloud environments network, applications, infrastructure, and systems
• Issue Resolution – leads the resolution of identified issues in public cloud environments
• Vulnerabilities – Cloud, System, and Application
• Compliance – CIS, NIST, AWS, and Azure best practices
• Cloud Entitlements – Excessive Permissions and various IAM best practices
• Secrets – unprotected secrets on VMs, Containers, and IaC repositories
• IaC – misconfigurations and vulnerabilities within developed IaC
• Deep understanding of Kubernetes and microservices security best practices
• Performs container registry scanning
• Reviewing and creating metrics, KPIs, and KRIs to track overall cloud security posture
• Create, maintain, and update runbooks for cloud configuration checks
• Assess the overall security posture of cloud security infrastructure and workloads
• Advise customers on Cloud security best practices

Requirements:

• At least 3 years of experience working in Cloud Security with Amazon AWS, Microsoft Azure, or GCP
• Experience with Cloud Security tools like: Wiz.io, Orca, Lacework, Trivy, Aqua, Ermetic or Prisma Cloud
• Experience with integrating tools into development pipelines such as Azure DevOps, Jenkins, Etc
• Understanding of a broad range of Cloud Security issues as well as their mitigation strategies
• Understanding of Cloud Security-related vulnerabilities
• Experience developing code in Terraform, Python, PowerShell, Rego, and other languages
• Written communication skills for written interactions with clients
• Strong communication skills include articulating thoughts and refining complex problems into digestible information clearly
• Ability to manage time independently while handling multiple projects concurrently
• Bachelor's degree in computer science or information Security preferred
• Cloud Security certifications are preferred