Cloud Security Engineer

Your Job

As the Cloud Security Engineer, you will help strengthen and expand our application security posture with a focus on CNAPP platform implementation and operations (Wiz).

You will partner with development, engineering, product, and platform stakeholders across the software development lifecycle (SDLC) to onboard environments, configure and tune the platform, and mature the processes and guardrails that support secure cloud deployments.

This role will contribute to developing cloud and code enforcement patterns that improve signal quality and drive timely remediation.

As our program continues to mature, you will also spend more time enabling engineers directly in their IDEs and deployment pipelines as part of shift-left initiatives.

Our Team

The Application Security capability within GP Cyber Security is focused on managing risks associated with application development and cloud infrastructure systems through a comprehensive vulnerability management program.

Our goal is to provide valuable insights to business partners, enabling profitable, risk-based cyber security management decisions.

Our team supports operations and remediation across applications, cloud, and infrastructure, while also being involved in cyber tool management and maintenance.

Our team also engages with stakeholders responsible for onboarding applications to our Cyber tools to help identify vulnerabilities and drive remediation through collaboration with various customers and stakeholders.

What You Will Do


* Support Application Security team in managing CNAPP tool, including integrations, connectors, alert creation, account onboarding, and tuning.


* Identify cloud vulnerabilities and misconfigurations, prioritize and risk adjust findings, consult on mitigation strategies, and ensure timely resolution through automated enforcements.


* Demonstrate self-motivation and direction, while utilizing strong organizational and project management skills, to effectively plan, execute, and complete tasks in a timely and efficient manner.


* Design and deliver training sessions to developers and stakeholders on secure cloud deployment practices, threat modeling, and risk assessment.


* Offer specialized application security guidance on projects, system issues, and during stakeholder meetings.

Provide guidance on relevant application security industry standards and practices such as OWASP, ASVS, CIS, SANS, CWE, etc.


* Assist in developing and maintaining an ongoing security assurance program including development of appropriate scripts and monitoring capabilities to; verify security effectiveness, analyze data, develop trend analysis, and ensure compliance to existing standards, policies, and procedures.


* Conduct technical security risk assessments with internal and external resources as needed.

Who You Are (Basic Qualifications)


* Experience managing cyber security tools/platforms.


* Experience scripting using Python for automation an...