{"id":3762131,"url":"https://alion.io/job/duke-energy-senior-cybersecurity-systems-engineering-analyst","title":"Senior Cybersecurity Systems Engineering Analyst","company":{"id":1754510,"name":"Duke Energy","domain":"duke-energy.com","url":"https://alion.io/company/duke-energy","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":15,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":9,"visa_sponsorship":true,"relocation_package":true,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"Least Privilege","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Wiz","optional":false}],"status":"closed","first_seen_at":"2026-11-04T18:54:31Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-07T10:15:42Z","board_verified":false,"closed_at":"2026-11-07T10:15:42Z","days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Important Application Submission Information\nIn order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Friday, November 6, 2026More than a career - a chance to make a difference in people's lives.\nBuild an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.\nPosition Summary\nThe Cloud Security Specialist will help secure, monitor, and improve cloud-hosted environments across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. This role will design and implement cloud security measures, manage security tooling, identify and prioritize risk, and partner with engineering and cybersecurity teams to remediate vulnerabilities, misconfigurations, excessive permissions, and other security issues. The specialist will support the implementation, configuration, operationalization, and ongoing optimization of the Wiz Cloud-Native Application Protection Platform. The role will use Wiz to analyze cloud risks, including vulnerabilities, misconfigurations, identity risks, attack paths, and toxic combinations, while helping accelerate remediation across the cloud estate.\nKey Responsibilities\nCloud Security Architecture and Engineering\nConsult on and implement secure, scalable, and resilient cloud architectures across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.\nEvaluate cloud security controls involving network security, firewalls, encryption, identity, access, workloads, data, and cloud configurations.\nProvide security guidance for cloud deployments and help teams align solutions with established cloud security requirements and architectural standards.\nPartner with cloud engineering, application, infrastructure, and cybersecurity teams to integrate security throughout the cloud lifecycle.\nWiz CNAPP Operations\nConfigure, maintain, and optimize Wiz policies, rules, integrations, and alert settings.\nMonitor and prioritize Wiz findings involving vulnerabilities, misconfigurations, identity risks, exposed resources, attack paths, and toxic combinations.\nImprove policy tuning and risk prioritization to reduce noise and focus remediation efforts on material cloud risks.\nSupport the implementation and continued operationalization of Wiz across the organization’s multi-cloud environment.\nAssist technical teams with interpreting Wiz findings and identifying appropriate remediation actions.\nVulnerability and Risk Management\nConduct security assessments and reviews of cloud configurations, workloads, access controls, and deployed services.\nIdentify and prioritize vulnerabilities, insecure configurations, excessive permissions, and deviations from security requirements.\nWork with responsible engineering and application teams to track and accelerate remediation.\nSupport risk-based prioritization by considering technical severity, exposure, identity relationships, business context, and potential attack paths.\nIdentity and Access Management\nEvaluate cloud identities, roles, permissions, and access relationships.\nSupport the implementation and maintenance of least-privilege access across cloud environments.\nIdentify excessive, unused, or high-risk cloud permissions and work with service owners to reduce unnecessary access.\nAssist with reviewing identity-related Wiz findings and cloud entitlement risks.\nThreat Detection and Incident Response\nMonitor cloud environments for suspicious activity, unauthorized access, vulnerabilities, and security anomalies.\nInvestigate potential attacks and cloud security events using Wiz and other available security technologies.\nSupport cloud threat hunting, incident investigation, containment, and remediation.\nAssist with developing and improving response procedures and playbooks for cloud workloads.\nApply knowledge of the MITRE ATT&CK framework when investigating threats and developing detection or response approaches.\nDevSecOps and Automation\nReview cloud deployments delivered through infrastructure as code and CI/CD pipelines.\nCollaborate with engineering teams to integrate cloud security controls into repositories, deployment pipelines, and orchestration processes.\nDevelop queries, scripts, automated checks, and detection mechanisms to improve cloud risk identification and remediation.\nUse technologies such as CNAPP query languages, JSON, and automation scripts to support security operations.\nGovernance, Compliance, and Reporting\nHelp cloud environments align with internal security policies and applicable security frameworks.\nSupport configuration reviews against NIST guidance, CIS Benchmarks, and cloud-native security practices.\nDevelop metrics and reporting that communicate cloud security risks, remediation progress, recurring issues, and operational trends.\nProvide clear and actionable information to technical teams and cybersecurity stakeholders.\nBasic/Required Qualifications\nHigh School/GED\nMinimum 9 years related work experience\nDesired Qualifications\nDemonstrated experience securing or operating cloud environments in one or more major cloud platforms, including AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure.\nExperience with cloud security architecture, vulnerability management, security configuration, identity and access management, or security operations.\nWorking knowledge of cloud-native services, workloads, identities, networking, and security controls.\nExperience analyzing vulnerabilities, misconfigurations, permissions, or other cloud security findings.\nAbility to communicate security risks and remediation requirements to engineering, application, infrastructure, and cybersecurity teams.\nExperience working collaboratively across technical and business teams.\nPreferred Qualifications\nHands-on experience with Wiz or another Cloud-Native Application Protection Platform.\nExperience implementing, configuring, tuning, or operating CNAPP capabilities.\nFamiliarity with infrastructure as code, CI/CD pipelines, source-code repositories, and orchestration technologies.\nKnowledge of NIST guidance, CIS Benchmarks, MITRE ATT&CK, and cloud-native security practices.\nExperience with scripting, automation, JSON, security queries, or metrics development.\nExperience conducting cloud threat hunting or supporting incident response for cloud workloads.\nExperience securing multi-cloud environments\nWorking Conditions\nHybrid Mobility Classification - Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees must live within a reasonable commute to their designated Duke Energy facility, not greater than 50 miles one way. Employees are expected to report to their assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular workweek.\nOffice Environment\nSpecific Requirements\nHS/GED: 9 yrs work experience {required}Associates: 7 yrs work experience {preferred}Bachelors: 5 yrs work experience {preferred}\nTravel Requirements\n5-15%Relocation Assistance Provided (as applicable)\nNoRepresented/Union Position\nNoVisa Sponsored Position\nNo. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.\nPrivacy\nDo Not Sell My Personal Information (CA)\nTerms of Use\nAccessibility","description_format":"text","description_chars":7724,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[]},"benefits":["Relocation assistance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","Information Security","Industrial Engineering","Cloud Security"],"lifecycle":[{"event":"open","at":"2026-11-04T18:54:31Z"},{"event":"close","at":"2026-11-07T10:15:42Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/duke-energy-senior-cybersecurity-systems-engineering-analyst","json_url":"https://alion.io/job/duke-energy-senior-cybersecurity-systems-engineering-analyst.json","meta":{"generated_at":"2026-11-14T01:43:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1679,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754510},"rest":"https://alion.io/mcp/rest/get_company?id=1754510"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fduke-energy-senior-cybersecurity-systems-engineering-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fduke-energy-senior-cybersecurity-systems-engineering-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fduke-energy-senior-cybersecurity-systems-engineering-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/duke-energy-senior-cybersecurity-systems-engineering-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fduke-energy-senior-cybersecurity-systems-engineering-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3762131}},{"tool":"search_jobs","arguments":{"company":"duke-energy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3762131},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}