GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services

Information Technology

251-1K (750)

Founded 2011

45 open positions

Links

View All Jobs

CNAPP Cloud Security Engineer (Remote) - Northeast region

1 month ago

United States

Full-time

Mid Level

Cloud Engineer

DevOps and Infrastructure

AWS Azure CI/CD CloudFormation GCP Jenkins JSON Kubernetes Microservices PowerShell Python Terraform

Apply Now

GuidePoint Security

Internet Software & Services

251-1K

Founded 2011

View All Jobs 45

Description

Implement CNAPP and CSPM tools in multi-account AWS and Azure environments.
Implement IaC scanning tools within CI/CD pipelines.
Develop infrastructure as code in CloudFormation or Terraform.
Develop custom control checks within CNAPP platforms using JSON, REGO, or Terraform.
Identify and evaluate threats and vulnerabilities in public cloud networks, applications, infrastructure, and systems.
Lead resolution of cloud security issues involving vulnerabilities, compliance, entitlements, secrets, and IaC misconfigurations.
Perform container registry scanning.
Review and create metrics, KPIs, and KRIs to track cloud security posture.
Create, maintain, and update runbooks for cloud configuration checks.
Advise customers on cloud security best practices and assess the security posture of cloud security infrastructure and workloads.

Requirements

At least 3 years of experience working in cloud security with AWS, Microsoft Azure, or GCP.
Experience with cloud security tools such as Wiz.io, Orca, Lacework, Trivy, Aqua, Ermetic, or Prisma Cloud.
Experience integrating tools into development pipelines such as Azure DevOps or Jenkins.
Understanding of a broad range of cloud security issues and mitigation strategies.
Understanding of cloud security-related vulnerabilities.
Experience developing code in Terraform, Python, PowerShell, Rego, and other languages.
Strong written communication skills for client interactions.
Ability to communicate complex problems clearly and concisely.
Ability to manage time independently while handling multiple projects concurrently.
Bachelor’s degree in computer science or information security preferred.
Cloud security certifications are preferred.

Benefits

Remote workforce primarily, U.S.-based only.
Group medical insurance options with substantial employer premium contributions.
Group dental insurance with employer-paid employee premiums and partial family coverage.
12 corporate holidays and a Flexible Time Off (FTO) program.
Healthy mobile phone and home internet allowance.
Eligibility for a retirement plan after 2 months at open enrollment.
Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Saviynt IAM Specialist

The Missing Link 51-250 Internet Software & Services

The Missing Link is seeking a Security Engineer - Saviynt to support large enterprise identity governance initiatives, design and deliver Saviynt-based solutions, and strengthen its growing cyber security practice.

India Full-time Mid Level Security Engineer

Active Directory Azure Cybersecurity JavaScript PowerShell REST API SAP SQL

17 hours, 24 minutes ago

Apply

17 hours, 24 minutes ago

AI Security Architect (REMOTE - United States)

EnableComp 251-1K Insurance

EnableComp is seeking a remote AI Security Architect to secure and govern its AI and machine learning initiatives within its healthcare revenue cycle management environment.

United States Full-time Senior AI Engineer Security Engineer

Azure Cybersecurity HIPAA LLM Machine Learning

17 hours, 39 minutes ago

Apply

17 hours, 39 minutes ago

Senior Infrastructure Security Engineer

Dropbox 1K-5K Internet Software & Services

Dropbox is hiring a Security Engineer to secure its AI and agentic infrastructure while helping protect products and users across cloud and on-prem environments.