Senior Cybersecurity Systems Engineering Analyst

Duke Energy•Charlotte, NC

1d•Hybrid

About The Position

The Cloud Security Specialist will help secure, monitor, and improve cloud-hosted environments across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. The role designs and implements cloud security measures, manages security tooling, identifies and prioritizes risk, and partners with engineering and cybersecurity teams to remediate vulnerabilities, misconfigurations, excessive permissions, and other security issues. It supports the implementation, configuration, operationalization, and ongoing optimization of the Wiz Cloud-Native Application Protection Platform (CNAPP), using Wiz to analyze cloud risks such as vulnerabilities, misconfigurations, identity risks, attack paths, and toxic combinations and to accelerate remediation across the cloud estate. The position also supports cloud security architecture and engineering, vulnerability and risk management, identity and access management, threat detection and incident response, DevSecOps and automation, and governance, compliance, and reporting. The role is hybrid after the onboarding period: employees must live within a reasonable commute of their designated Duke Energy facility, no more than 50 miles one way, and are expected to report to the facility as directed, averaging three full workdays per regular workweek. Travel is 5–15%.

Requirements

High school diploma or GED.
Minimum 9 years of related work experience.
Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Nice To Haves

Demonstrated experience securing or operating cloud environments in one or more major cloud platforms: AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure.
Experience with cloud security architecture, vulnerability management, security configuration, identity and access management, or security operations.
Working knowledge of cloud-native services, workloads, identities, networking, and security controls.
Experience analyzing vulnerabilities, misconfigurations, permissions, or other cloud security findings.
Ability to communicate security risks and remediation requirements to engineering, application, infrastructure, and cybersecurity teams.
Experience working collaboratively across technical and business teams.
Hands-on experience with Wiz or another Cloud-Native Application Protection Platform.
Experience implementing, configuring, tuning, or operating CNAPP capabilities.
Familiarity with infrastructure as code, CI/CD pipelines, source-code repositories, and orchestration technologies.
Knowledge of NIST guidance, CIS Benchmarks, MITRE ATT&CK, and cloud-native security practices.
Experience with scripting, automation, JSON, security queries, or metrics development.
Experience conducting cloud threat hunting or supporting incident response for cloud workloads.
Experience securing multi-cloud environments.
Associate degree with 7 years of work experience, preferred.
Bachelor's degree with 5 years of work experience, preferred.

Responsibilities

Consult on and implement secure, scalable, and resilient cloud architectures across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
Evaluate cloud security controls involving network security, firewalls, encryption, identity, access, workloads, data, and cloud configurations.
Provide security guidance for cloud deployments and help teams align solutions with cloud security requirements and architectural standards.
Partner with cloud engineering, application, infrastructure, and cybersecurity teams to integrate security throughout the cloud lifecycle.
Configure, maintain, and optimize Wiz policies, rules, integrations, and alert settings.
Monitor and prioritize Wiz findings involving vulnerabilities, misconfigurations, identity risks, exposed resources, attack paths, and toxic combinations.
Tune policies and risk prioritization to reduce noise and focus remediation on material cloud risks.
Support the implementation and ongoing operationalization of Wiz across the organization's multi-cloud environment.
Help technical teams interpret Wiz findings and identify appropriate remediation actions.
Conduct security assessments and reviews of cloud configurations, workloads, access controls, and deployed services.
Identify and prioritize vulnerabilities, insecure configurations, excessive permissions, and deviations from security requirements.
Work with engineering and application teams to track and accelerate remediation.
Support risk-based prioritization using technical severity, exposure, identity relationships, business context, and potential attack paths.
Evaluate cloud identities, roles, permissions, and access relationships, and support least-privilege access across cloud environments.
Identify excessive, unused, or high-risk cloud permissions and work with service owners to reduce unnecessary access.
Review identity-related Wiz findings and cloud entitlement risks.
Monitor cloud environments for suspicious activity, unauthorized access, vulnerabilities, and security anomalies.
Investigate potential attacks and cloud security events using Wiz and other available security technologies.
Support cloud threat hunting, incident investigation, containment, and remediation.
Assist with developing and improving response procedures and playbooks for cloud workloads.
Apply the MITRE ATT&CK framework when investigating threats and developing detection or response approaches.
Review cloud deployments delivered through infrastructure as code and CI/CD pipelines.
Collaborate with engineering teams to integrate cloud security controls into repositories, deployment pipelines, and orchestration processes.
Develop queries, scripts, automated checks, and detection mechanisms to improve cloud risk identification and remediation.
Use CNAPP query languages, JSON, and automation scripts to support security operations.
Help cloud environments align with internal security policies and applicable security frameworks.
Support configuration reviews against NIST guidance, CIS Benchmarks, and cloud-native security practices.
Develop metrics and reporting on cloud security risks, remediation progress, recurring issues, and operational trends.
Provide clear, actionable information to technical teams and cybersecurity stakeholders.