Findings Management Engineer - AZ, NC, TX

Job#: 3022931

Job Description:

Client: Financial Services
Team: Security Engineering
Job Title: Findings Management Engineer
Location: Phoenix, AZ, Charlotte, NC, Dallas, TX | Hybrid 3x/week
Contract Length: 6+ months
Rate: $69-73/hr

• 5+ years of Information Security Engineering experience, or equivalent
• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 2+ years of experience with and strong understanding of Azure and Google public cloud – platforms, services, configurations, workloads, and hardening practices
• 1+ years of experience with Wiz or a similar cloud security or “CNAPP” product
• 1+ years of experience with scripting/automation languages such as Python, Bash, Terraform and/or Power Shell
• 1+ year of experience delivering integration between cloud security tools and other enterprise tools such as Splunk Cloud and Service Now
• 1+ year experience with data visualization/reporting tools such as Power
  
  BI, Tableau or similar technologies

• Experience supporting Cloud implementation/migrations and/or Cloud Security engineering and/or operations
• Experience with databases such as Mongo
  
  DB or similar
• Experience with Microsoft Defender, Google Security Command Center, Aqua Security, Microsoft Sentinel or Hashi Corp Sentinel
• Experience with change and incident management practices in large enterprises
• Understanding of information security threats, trends and industry best practices and security tools
• Finance sector security experience or other regulated industry (e.g., utilities, health care, government)

This manager is looking for a Findings Management Engineer to join their Cloud Workload Lifecycle Security (CWLS) team, within the Cybersecurity – Vulnerability & Patch Management organization. The Findings Management Engineer will support the migration from Prisma Cloud Enterprise to the Wiz CNAPP (Cloud Native Application Protection Platform) tool, with specific focus on Alerts/Findings generated by both the Cloud Workload Protection Platform (CWPP) and Cloud Security Posture Management (CSPM) modules of the Wiz product.

This area of our team specializes in Findings Management for Public Cloud configuration drift and misconfiguration detection, as well as compliance & vulnerability scanning Findings follows-up for containers/Kubernetes envs. Findings management requires working with engineering and app partners company wide as our team empowers/enables partners to remediate risk across our Public & Private cloud envs.

• Actively support and perform “hands‑on” technical and engineering work with the Wiz product, with a focus on Findings Management
• Define/operationalize alerts in Wiz
• Perform engineering related to Alerts/Findings data analysis and engineering of reporting processes and visualization dashboards (e.g. Power
  
  BI, Tableau)
• Design/develop automation & utility scripts to make team processes more efficient
• Build Python pipelines to download, merge, enrich, and analyze Wiz, cloud, and security datasets
• Collaborate with partners to support the remediation or “burn down” of alerts/findings in Wiz, as well as participating in related analysis work required for the automation of alerts/findings remediation.
• Provide professional expertise relating to Application Lifecycle Security and resolving application vulnerabilities or compliance issues detected via Wiz
• Be a motivated self‑starter quick to adapt and stay focused on delivering results in a fast‑paced environment with aggressive deadlines.
• Share your Wiz expertise and knowledge with teammates, while completing assigned duties.

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status,…