Senior Information Security Engineer

• Implement, configure, and administer the organization's enterprise CNAPP platform across cloud environments
• Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform
• Configure integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools
• Maintain CNAPP policies, rules, connectors, permissions, integrations, and platform configurations
• Monitor platform health, coverage, data ingestion, scanning status, and integration failures
• Evaluate and implement new CNAPP capabilities as the organization's cloud environment and security requirements evolve
• Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services
• Work with cloud engineering teams to establish secure cloud configuration baselines
• Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services
• Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context
• Work with infrastructure and application teams to drive remediation
• Use CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and exploitable attack paths
• Collaborate with Cloud Platform, DevOps/DevSecOps, Application Security, Security Operations, Vulnerability Management, and application teams to improve cloud security posture

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience
• 7+ years of Information Security experience, including significant hands-on cloud security experience
• Strong hands-on experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP
• Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or equivalent technologies
• Strong understanding of cloud security architecture, cloud IAM and least privilege, cloud networking and exposure, vulnerability management, containers and Kubernetes security, Infrastructure-as-Code security, cloud logging and monitoring, and security configuration management
• Experience analyzing and remediating cloud security findings
• Experience working with APIs and automation using Python, PowerShell, or equivalent scripting languages
• Familiarity with CI/CD pipelines and DevSecOps practices
• Ability to troubleshoot complex security integrations and cloud configurations
• Strong analytical, problem-solving, documentation, and communication skills
• Familiarity with MITRE ATT&CK, particularly cloud-related attack techniques
• Relevant certifications such as CCSP, CCSK, AWS Security Specialty, Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer, or CISSP/equivalent

• Equal Opportunity Employer committed to an inclusive, non-discriminatory workplace
• Best Workplaces for Women and Workplace with Inclusive Practices certifications
• Fortune 100 Best Companies to Work For recognition