[Remote] CNAPP Security Engineer (Remote) - Mid-Atlantic region

Note: The job is a remote job and is open to candidates in USA. GuidePoint Security is a rapidly growing cybersecurity firm that provides trusted expertise and solutions to help organizations minimize risk.

They are seeking an experienced CNAPP Security Engineer to join their DevSecOps Security practice, focusing on the implementation and management of CNAPP Cloud Security tools for various clients.

The role involves advising customers on cloud security best practices and implementing security measures in cloud environments.

Responsibilities Perform implementation of CNAPP and CSPM tools in multi-account AWS and Azure environmentsImplement IaC scanning tools within the CI/CD PipelinesDevelop Infrastructure as code in Cloud Formation or TerraformDevelop custom control checks within CNAPP Platforms using JSON, REGO, or TerraformAnalysis – identifies and evaluates potential threats and vulnerabilities to the public cloud environments network, applications, infrastructure, and systemsIssue Resolution – leads the resolution of identified issues in public cloud environmentsVulnerabilities – Cloud, System, and ApplicationCompliance – CIS, NIST, AWS, and Azure best practicesCloud Entitlements – Excessive Permissions and various IAM best practicesSecrets – unprotected secrets on VMs, Containers, and IaC repositoriesIaC – misconfigurations and vulnerabilities within developed IaCDeep understanding of Kubernetes and microservices security best practicesPerforms container registry scanningReviewing and creating metrics, KPIs, and KRIs to track overall cloud security postureCreate, maintain, and update runbooks for cloud configuration checksAssess the overall security posture of cloud security infrastructure and workloadsAdvise customers on Cloud security best practices Skills At least 3 years of experience working in Cloud Security with Amazon AWS, Microsoft Azure, or GCPExperience with Cloud Security tools like: Wiz.io, Orca, Lacework, Trivy, Aqua, Ermetic or Prisma CloudExperience with integrating tools into development pipelines such as Azure DevOps, Jenkins, EtcUnderstanding of a broad range of Cloud Security issues as well as their mitigation strategiesUnderstanding of Cloud Security-related vulnerabilitiesExperience developing code in Terraform, Python, PowerShell, Rego, and other languagesWritten communication skills for written interactions with clientsStrong communication skills include articulating thoughts and refining complex problems into digestible information clearlyAbility to manage time independently while handling multiple projects concurrentlyBachelor's degree in computer science or information Security preferredCloud Security certifications are preferred Benefits Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family).

If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans12 corporate holidays and a Flexible Time Off (FTO) programHealthy mobile phone and home internet allowanceEligibility for retirement plan after 2 months at open enrollmentPet Benefit Option Company Overview GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations minimize risk.

It was founded in 2011, and is headquartered in Reston, Virginia, USA, with a workforce of 1001-5000 employees. Its website is https://www.guidepointsecurity.com/.