Secure Configuration & Attack Surface Management Engineer

INFOSYS NOVA HOLDINGS • Charlotte, NC

7d

About The Position

We are seeking an experienced Security Configuration & Attack Surface Management Engineer to support enterprise security configuration compliance, vulnerability management, and risk mitigation initiatives. The role focuses on developing and implementing security configuration policies, managing technical security controls, and partnering with technology teams to identify vulnerabilities, validate compliance, and remediate security risks across enterprise environments.

Candidates must be authorized to work for any employer in the United States. Visa sponsorship or transfer is not available. Candidates must complete a timed Security Configuration SME assessment before interviewing. The assessment can only be attempted once, and its timer cannot be paused after it begins, so candidates should prepare before starting.

Requirements

• At least 8 years of experience in information security, technology risk management, or related fields.
• Hands-on experience with security configuration compliance, vulnerability management, or attack surface management.
• Experience configuring and managing enterprise-level security controls.
• Experience with security scanning tools such as Qualys, Tenable, Tanium, or Symantec.
• Knowledge of Windows, Unix/Linux, or workstation administration.
• Familiarity with Python, Bash, PowerShell, or Regex for scripting and automation.
• Understanding of security risk management frameworks and regulatory compliance requirements.
• Strong communication, analytical, troubleshooting, and cross-functional collaboration skills.
• Authorization to work for any employer in the United States; visa sponsorship or transfer is unavailable.
• Completion of a timed Security Configuration SME assessment before interviewing; it can be attempted only once and cannot be paused after starting.

Nice To Haves

• CISSP, CISM, or similar security certifications.
• Experience supporting security programs within banking or financial services.
• Experience working with enterprise security configuration baselines and remediation programs.

Responsibilities

• Develop, test, and implement security configuration compliance policies and technical controls.
• Support enterprise attack surface management and secure configuration initiatives.
• Partner with infrastructure, security, and technology teams to validate security baseline controls.
• Identify configuration vulnerabilities and coordinate remediation of non-compliant systems.
• Manage vulnerability and compliance scanning using tools such as Qualys, Tenable, Tanium, and Symantec.
• Ensure accurate security scans, compliance reports, and risk assessments.
• Work across multiple technology platforms to improve enterprise security posture.
• Collaborate with business and technical stakeholders to implement risk mitigation strategies.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed