Senior Cybersecurity Systems Engineering Analyst

Duke Energy Corporation•Charlotte, NC

1d•Hybrid

About The Position

The Cloud Security Specialist will help secure, monitor, and improve cloud-hosted environments across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. The role designs and implements cloud security measures, manages security tooling, identifies and prioritizes risk, and partners with engineering and cybersecurity teams to remediate vulnerabilities, misconfigurations, excessive permissions, and other security issues. It supports the implementation, configuration, operation, and ongoing optimization of the Wiz Cloud-Native Application Protection Platform (CNAPP), using Wiz to analyze cloud risks such as vulnerabilities, misconfigurations, identity risks, attack paths, and toxic combinations and to accelerate remediation across the cloud estate. The position also supports secure cloud architecture, vulnerability and risk management, identity and access management, threat detection and incident response, DevSecOps automation, and governance, compliance, and reporting. Work is performed in a hybrid arrangement after onboarding, with both remote and onsite work. Employees must live within a reasonable commute of their assigned Duke Energy facility (no more than 50 miles one way) and are expected to report onsite as directed, averaging three full workdays per regular workweek.

Requirements

High school diploma or GED.
Minimum 9 years of related work experience.
Demonstrated experience securing or operating cloud environments in one or more major cloud platforms, including AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure.
Experience with cloud security architecture, vulnerability management, security configuration, identity and access management, or security operations.
Working knowledge of cloud-native services, workloads, identities, networking, and security controls.
Experience analyzing vulnerabilities, misconfigurations, permissions, or other cloud security findings.
Ability to communicate security risks and remediation requirements to engineering, application, infrastructure, and cybersecurity teams.
Experience working collaboratively across technical and business teams.
Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Nice To Haves

Hands-on experience with Wiz or another Cloud-Native Application Protection Platform.
Experience implementing, configuring, tuning, or operating CNAPP capabilities.
Familiarity with infrastructure as code, CI/CD pipelines, source-code repositories, and orchestration technologies.
Knowledge of NIST guidance, CIS Benchmarks, MITRE ATT&CK, and cloud-native security practices.
Experience with scripting, automation, JSON, security queries, or metrics development.
Experience conducting cloud threat hunting or supporting incident response for cloud workloads.
Experience securing multi-cloud environments.
An associate degree with 7 years of work experience, or a bachelor's degree with 5 years of work experience, is listed as preferred.

Responsibilities

Consult on and implement secure, scalable, and resilient cloud architectures across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
Evaluate cloud security controls for network security, firewalls, encryption, identity, access, workloads, data, and cloud configurations.
Provide security guidance for cloud deployments and help teams align solutions with cloud security requirements and architectural standards.
Partner with cloud engineering, application, infrastructure, and cybersecurity teams to integrate security throughout the cloud lifecycle.
Configure, maintain, and optimize Wiz policies, rules, integrations, and alert settings.
Monitor and prioritize Wiz findings involving vulnerabilities, misconfigurations, identity risks, exposed resources, attack paths, and toxic combinations.
Tune policies and prioritize risks to reduce alert noise and focus remediation on material cloud risks.
Support implementation and ongoing operation of Wiz across the multi-cloud environment.
Help technical teams interpret Wiz findings and identify appropriate remediation actions.
Conduct security assessments and reviews of cloud configurations, workloads, access controls, and deployed services.
Identify and prioritize vulnerabilities, insecure configurations, excessive permissions, and deviations from security requirements.
Work with engineering and application teams to track and accelerate remediation.
Prioritize risks using technical severity, exposure, identity relationships, business context, and potential attack paths.
Evaluate cloud identities, roles, permissions, and access relationships; support least-privilege access; and help reduce excessive, unused, or high-risk permissions.
Monitor cloud environments for suspicious activity, unauthorized access, vulnerabilities, and security anomalies.
Investigate potential attacks and cloud security events using Wiz and other available security technologies.
Support cloud threat hunting, incident investigation, containment, and remediation, and improve response procedures and playbooks for cloud workloads.
Apply the MITRE ATT&CK framework when investigating threats and developing detection or response approaches.
Review cloud deployments delivered through infrastructure as code and CI/CD pipelines.
Collaborate with engineering teams to integrate security controls into repositories, deployment pipelines, and orchestration processes.
Develop queries, scripts, automated checks, and detection mechanisms to improve cloud risk identification and remediation.
Use CNAPP query languages, JSON, and automation scripts to support security operations.
Help cloud environments align with internal security policies and applicable security frameworks, including reviews against NIST guidance and CIS Benchmarks.
Develop metrics and reporting on cloud security risks, remediation progress, recurring issues, and operational trends.
Provide clear, actionable information to technical teams and cybersecurity stakeholders.