Senior Cybersecurity Systems Engineering Analyst

Important Application Submission Information

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Position Summary

The Cloud Security Specialist will help secure, monitor, and improve cloud-hosted environments across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. This role will design and implement cloud security measures, manage security tooling, identify and prioritize risk, and partner with engineering and cybersecurity teams to remediate vulnerabilities, misconfigurations, excessive permissions, and other security issues. The specialist will support the implementation, configuration, operationalization, and ongoing optimization of the Wiz Cloud-Native Application Protection Platform. The role will use Wiz to analyze cloud risks, including vulnerabilities, misconfigurations, identity risks, attack paths, and toxic combinations, while helping accelerate remediation across the cloud estate.

Key Responsibilities

Cloud Security Architecture and Engineering

• Consult on and implement secure, scalable, and resilient cloud architectures across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
• Evaluate cloud security controls involving network security, firewalls, encryption, identity, access, workloads, data, and cloud configurations.
• Provide security guidance for cloud deployments and help teams align solutions with established cloud security requirements and architectural standards.
• Partner with cloud engineering, application, infrastructure, and cybersecurity teams to integrate security throughout the cloud lifecycle.

Wiz CNAPP Operations

• Configure, maintain, and optimize Wiz policies, rules, integrations, and alert settings.
• Monitor and prioritize Wiz findings involving vulnerabilities, misconfigurations, identity risks, exposed resources, attack paths, and toxic combinations.
• Improve policy tuning and risk prioritization to reduce noise and focus remediation efforts on material cloud risks.
• Support the implementation and continued operationalization of Wiz across the organization’s multi-cloud environment.
• Assist technical teams with interpreting Wiz findings and identifying appropriate remediation actions.

Vulnerability and Risk Management

• Conduct security assessments and reviews of cloud configurations, workloads, access controls, and deployed services.
• Identify and prioritize vulnerabilities, insecure configurations, excessive permissions, and deviations from security requirements.
• Work with responsible engineering and application teams to track and accelerate remediation.
• Support risk-based prioritization by considering technical severity, exposure, identity relationships, business context, and potential attack paths.

Identity and Access Management

• Evaluate cloud identities, roles, permissions, and access relationships.
• Support the implementation and maintenance of least-privilege access across cloud environments.
• Identify excessive, unused, or high-risk cloud permissions and work with service owners to reduce unnecessary access.
• Assist with reviewing identity-related Wiz findings and cloud entitlement risks.

Threat Detection and Incident Response

• Monitor cloud environments for suspicious activity, unauthorized access, vulnerabilities, and security anomalies.
• Investigate potential attacks and cloud security events using Wiz and other available security technologies.
• Support cloud threat hunting, incident investigation, containment, and remediation.
• Assist with developing and improving response procedures and playbooks for cloud workloads.
• Apply knowledge of the MITRE ATT&CK framework when investigating threats and developing detection or response approaches.

DevSecOps and Automation

• Review cloud deployments delivered through infrastructure as code and CI/CD pipelines.
• Collaborate with engineering teams to integrate cloud security controls into repositories, deployment pipelines, and orchestration processes.
• Develop queries, scripts, automated checks, and detection mechanisms to improve cloud risk identification and remediation.
• Use technologies such as CNAPP query languages, JSON, and automation scripts to support security operations.

Governance, Compliance, and Reporting

• Help cloud environments align with internal security policies and applicable security frameworks.
• Support configuration reviews against NIST guidance, CIS Benchmarks, and cloud-native security practices.
• Develop metrics and reporting that communicate cloud security risks, remediation progress, recurring issues, and operational trends.
• Provide clear and actionable information to technical teams and cybersecurity stakeholders.

Basic/Required Qualifications

• High School/GED
• Minimum 9 years related work experience

Desired Qualifications

• Demonstrated experience securing or operating cloud environments in one or more major cloud platforms, including AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure.
• Experience with cloud security architecture, vulnerability management, security configuration, identity and access management, or security operations.
• Working knowledge of cloud-native services, workloads, identities, networking, and security controls.
• Experience analyzing vulnerabilities, misconfigurations, permissions, or other cloud security findings.
• Ability to communicate security risks and remediation requirements to engineering, application, infrastructure, and cybersecurity teams.
• Experience working collaboratively across technical and business teams.

Preferred Qualifications

• Hands-on experience with Wiz or another Cloud-Native Application Protection Platform.
• Experience implementing, configuring, tuning, or operating CNAPP capabilities.
• Familiarity with infrastructure as code, CI/CD pipelines, source-code repositories, and orchestration technologies.
• Knowledge of NIST guidance, CIS Benchmarks, MITRE ATT&CK, and cloud-native security practices.
• Experience with scripting, automation, JSON, security queries, or metrics development.
• Experience conducting cloud threat hunting or supporting incident response for cloud workloads.
• Experience securing multi-cloud environments

Working Conditions

• Hybrid Mobility Classification - Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees must live within a reasonable commute to their designated Duke Energy facility, not greater than 50 miles one way. Employees are expected to report to their assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular workweek.
• Office Environment

Specific Requirements

• HS/GED: 9 yrs work experience {required}Associates: 7 yrs work experience {preferred}Bachelors: 5 yrs work experience {preferred}

Travel Requirements

Relocation Assistance Provided (as applicable)

Represented/Union Position

Visa Sponsored Position

Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility