Senior Cybersecurity Systems Engineering Analyst

Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

• →Consult on and implement secure, scalable, and resilient cloud architectures across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
• →Evaluate cloud security controls involving network security, firewalls, encryption, identity, access, workloads, data, and cloud configurations.
• →Provide security guidance for cloud deployments and help teams align solutions with established cloud security requirements and architectural standards.
• →Partner with cloud engineering, application, infrastructure, and cybersecurity teams to integrate security throughout the cloud lifecycle.

• Configure, maintain, and optimize Wiz policies, rules, integrations, and alert settings.
• Monitor and prioritize Wiz findings involving vulnerabilities, misconfigurations, identity risks, exposed resources, attack paths, and toxic combinations.
• Improve policy tuning and risk prioritization to reduce noise and focus remediation efforts on material cloud risks.
• Support the implementation and continued operationalization of Wiz across the organization’s multi-cloud environment.
• Assist technical teams with interpreting Wiz findings and identifying appropriate remediation actions.

• Conduct security assessments and reviews of cloud configurations, workloads, access controls, and deployed services.
• Identify and prioritize vulnerabilities, insecure configurations, excessive permissions, and deviations from security requirements.
• Work with responsible engineering and application teams to track and accelerate remediation.
• Support risk-based prioritization by considering technical severity, exposure, identity relationships, business context, and potential attack paths.

• Evaluate cloud identities, roles, permissions, and access relationships.
• Support the implementation and maintenance of least-privilege access across cloud environments.
• Identify excessive, unused, or high-risk cloud permissions and work with service owners to reduce unnecessary access.
• Assist with reviewing identity-related Wiz findings and cloud entitlement risks.

• Monitor cloud environments for suspicious activity, unauthorized access, vulnerabilities, and security anomalies.
• Investigate potential attacks and cloud security events using Wiz and other available security technologies.
• Support cloud threat hunting, incident investigation, containment, and remediation.
• Assist with developing and improving response procedures and playbooks for cloud workloads.
• Apply knowledge of the MITRE ATT&CK framework when investigating threats and developing detection or response approaches.

• Review cloud deployments delivered through infrastructure as code and CI/CD pipelines.
• Collaborate with engineering teams to integrate cloud security controls into repositories, deployment pipelines, and orchestration processes.
• Develop queries, scripts, automated checks, and detection mechanisms to improve cloud risk identification and remediation.
• Use technologies such as CNAPP query languages, JSON, and automation scripts to support security operations.

• Help cloud environments align with internal security policies and applicable security frameworks.
• Support configuration reviews against NIST guidance, CIS Benchmarks, and cloud-native security practices.
• Develop metrics and reporting that communicate cloud security risks, remediation progress, recurring issues, and operational trends.
• Provide clear and actionable information to technical teams and cybersecurity stakeholders.

• Demonstrated experience securing or operating cloud environments in one or more major cloud platforms, including AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure.
• Experience with cloud security architecture, vulnerability management, security configuration, identity and access management, or security operations.
• Working knowledge of cloud-native services, workloads, identities, networking, and security controls.
• Experience analyzing vulnerabilities, misconfigurations, permissions, or other cloud security findings.
• Ability to communicate security risks and remediation requirements to engineering, application, infrastructure, and cybersecurity teams.
• Experience working collaboratively across technical and business teams.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility