Lead Information Security Engineer (Posture Management) - Hybrid

Lead Information Security Engineer (Posture Management)

Genesis10 is currently seeking a Lead Information Security Engineer (Posture Management) for a 7 month contract position with a Global Financial Institution located in Charlotte, NC, Chandler, AZ, or Irving, TX.

This role will join the Cloud Workload Lifecycle Security (CWLS) team within the Cybersecurity organization, focusing on the client's digital transformation and enterprise cloud migration. The engineer will support the migration to the Wiz CNAPP (Cloud Native Application Protection Platform) tool, with a specific focus on Cloud Security Posture Management (CSPM). The position specializes in engineering and support for public cloud misconfiguration and configuration drift detective scanning.

Responsibilities:

• Leverage deep expertise with automation to semi-automate Rego Policy as Code development for monitoring cloud resource misconfigurations
• Engineer and support the migration of CSPM capabilities to Wiz
• Act as the subject matter expert (SME) for Wiz capabilities, roadmap features, and best practices specific to CSPM
• Enable and tune Wiz detection for public cloud misconfigurations, config drift, and ad-hoc scanning for developers
• Efficiently transform security requirements into Rego policies for Wiz CSPM
• Collaborate with teammates, vendors, and partners to ensure the success of policy development automation
• Lead technical requirement gathering discussions and design/develop complex solutions
• Troubleshoot and resolve support escalation cases related to Wiz CSPM
• Contribute to internal code repositories to continuously improve overall code quality
• Provide high-quality documentation of delivered solutions
• Train other team members on utilizing established automation tooling for policy development

Requirements:

• 5 years of Information Security Engineering experience
• 4 years of intermediate to advanced experience with Terraform/automation
• 2 years of practical experience and strong understanding of Azure & Google public cloud platforms, services, configurations, and hardening practices
• 1 year of experience with Resource Query Language (RQL) and/or Rego policy development
• Experience with extracting, transforming, and loading data via REST API endpoints
• Advanced experience with Python programming/automation
• Familiarity with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps)
• Strong verbal, written, analytical, and problem-solving skills
• Proven ability to work independently and effectively within a virtual team
• Intermediate to advanced experience with Microsoft Office products
• Ability to handle multiple, high-priority deliverables concurrently
• 1 year of experience working on teams practicing Agile Scrum or Kanban methodologies

Desired Skills:

• 1 year of deep Wiz experience, in either an engineering or support role
• Advanced experience with Rego policy automation
• Knowledge and understanding of DevSecOps and deployment automation to cloud environments
• Expertise with API-driven automation of policy creation
• Expertise with Infrastructure as Code (IaC) and/or Policy as Code concepts/tools
• Expertise with automated testing
• Intermediate to advanced experience with Kubernetes, preferably AKS/GKE/OCP
• Familiarity with various cloud security and related risk frameworks (CSA, CIS, NIST, etc)
• Experience with change and incident management practices in large enterprises
• Security certifications such as CISSP, GIAC, CISA, CISM, CRISC, or CCSK
• Microsoft Azure and/or Google Cloud Certifications

Pay range: $59.53 - $67.53 per hour

Only candidates available and ready to work directly as Genesis10 employees will be considered for this position.

If you have the described qualifications and are interested in this exciting opportunity, please apply!