Findings Management Engineer (contract)

Description Title:Findings Management Engineer Location: Charlotte, NC Alternative Location: Chandler, AZ - Irving, TX Duration: 6 months Work Engagement: W2 Work Schedule: Onsite Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits Summary: In this contingent resource assignment, you may: Consult on complex initiatives with broad impact and large-scale planning for Information Security Engineering. Review and analyze complex multi-faceted, larger scale or longer-term Information Security Engineering challenges that require in-depth evaluation of multiple factors including intangibles or unprecedented factors. Contribute to the resolution of complex and multi-faceted situations requiring solid understanding of the function, policies, procedures, and compliance requirements that meet deliverables. Strategically collaborate and consult with client personnel. Required Qualifications: Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education Key Responsibilities: • Actively support and perform “hands-on” technical and engineering work with the Wiz product, with a focus on Findings Management • Define/operationalize alerts in Wiz • Perform engineering related to Alerts/Findings data analysis and engineering of reporting processes and visualization dashboards (e.g. PowerBI, Tableau) • Design/develop automation & utility scripts to make team processes more efficient • Build Python pipelines to download, merge, enrich, and analyze Wiz, cloud, and security datasets • Collaborate with partners to support the remediation or “burn down” of alerts/findings in Wiz, as well as participating in related analysis work required for the automation of alerts/findings remediation. • Provide professional expertise relating to Application Lifecycle Security and resolving application vulnerabilities or compliance issues detected via Wiz • Be a motivated self-starter quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlines. • Share your Wiz expertise and knowledge with teammates, while completing assigned duties. Key Requirements: • Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship. • Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education • Experience with and strong understanding of Azure and Google public cloud – platforms, services, configurations, workloads, and hardening practices • Experience with Wiz or a similar cloud security or “CNAPP” product • Experience with scripting/automation languages such as Python, Bash, Terraform and/or PowerShell • Experience delivering integration between cloud security tools and other enterprise tools such as Splunk Cloud and ServiceNow • Experience with data visualization/reporting tools such as PowerBI, Tableau or similar technologies • Solid understanding of Identity & Access Management, as well as Information Protection concepts as they apply to monitoring and responding to related alerts/findings • Strong verbal and written communication skills • Proven ability to work independently, as well as having strong interpersonal skills to work effectively within a Team and with partners • Strong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversight • Intermediate to advanced experience working with Microsoft Office products (e.g. Word, Excel, PowerPoint, Visio, Outlook, MS Teams, SharePoint) • Ability to handle multiple, high priority deliverables concurrently • Ability to communicate confidentially, professionally, and effectively, in both written and verbal formats, with stakeholders and partners • Experience working on teams practicing Agile Scrum or Kanban methodologies DESIRED QUALIFICATIONS: • Experience supporting Cloud implementation/migrations and/or Cloud Security engineering and/or operations • Experience with databases such as MongoDB or similar • Experience with Microsoft Defender, Google Security Command Center, Aqua Security, Microsoft Sentinel or HashiCorp Sentinel • Experience with change and incident management practices in large enterprises • Understanding of information security threats, trends and industry best practices and security tools • Finance sector security experience or other regulated industry (e.g., utilities, health care, government) • Familiarity with various cloud security and related risk frameworks (Cloud Security Alliance (CSA), CIS, NIST, etc.) • Security certifications such as Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), or equivalent, CISA, CISM, CISSP, CRISC, CCSK • Microsoft Azure and/or Google Cloud Certifications • Kubernetes Security (CKS) certification