CWLS - Findings Management Engineer

Title:

CWLS-Findings Management Engineer

Locations:
• Charlotte: 300 S. Brevard St., Charlotte, NC

* Phoenix: 2600 S. Price Rd., Chandler, AZ

* Dallas: 401 Las Colinas Blvd W Bldg A, Irving, Texas 75039

Duration: 6 months

Work Engagement: W2

Work Schedule:

Hybrid 3 days in office/2 days remote

Benefits on offer for this contract position:
Health Insurance, Life insurance, 401K and Voluntary Benefits

Summary:

In this contingent resource assignment, you may:
Consult on complex initiatives with broad impact and large-scale planning for Information Security Engineering. Review and analyze complex multi-faceted, larger scale or longer-term Information Security Engineering challenges that require in-depth evaluation of multiple factors including intangibles or unprecedented factors. Contribute to the resolution of complex and multi-faceted situations requiring solid understanding of the function, policies, procedures, and compliance requirements that meet deliverables.

Strategically collaborate and consult with client personnel.

Wells Fargo is seeking an experienced Lead Information Security Engineer (Information security Engineer 4 - Contingent) to join our Cloud Workload Lifecycle Security (CWLS) team, within the Cybersecurity
- Vulnerability & Patch Management organization. Be a part of one of the core teams working on Wells Fargo's digital transformation; join our dynamic, diverse, fast-paced team environment where we secure and reduce risk for our Enterprise cloud migration. The Information security Engineer 4 - Contingent
- Findings Management Engineer will support the WF migration from Prisma Cloud Enterprise to the Wiz CNAPP (Cloud Native Application Protection Platform) tool, with specific focus on Alerts/Findings generated by both the Cloud Workload Protection Platform (CWPP) and Cloud Security Posture Management (CSPM) modules of the Wiz product. This area of our team specializes in Findings Management for Public Cloud configuration drift and misconfiguration detection, as well as compliance & vulnerability scanning Findings follows-up for containers/Kubernetes envs.

Findings management requires working with engineering and app partners company wide as our team empowers/enables partners to remediate risk across our Public & Private cloud envs.

KEY RESPONSIBILITIES:

* Actively support and perform "hands-on" technical and engineering work with the Wiz product, with a focus on Findings Management

* Define/operationalize alerts in Wiz

* Perform engineering related to Alerts/Findings data analysis and engineering of reporting processes and visualization dashboards (e.g. PowerBI, Tableau)

* Design/develop automation & utility scripts to make team processes more efficient

* Build Python pipelines to download, merge, enrich, and analyze Wiz, cloud, and security datasets

* Collaborate with partners to support the remediation or "burn down" of alerts/findings in Wiz, as well as participating in related analysis work required for the automation of alerts/findings remediation.

* Provide professional expertise relating to Application Lifecycle Security and resolving application vulnerabilities or compliance issues detected via Wiz

* Be a motivated self-starter quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlines.

* Share your Wiz expertise and knowledge with teammates, while completing assigned duties.

Qualifications:

Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship.

* 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

* 2+ years of experience with and strong understanding of Azure and Google public cloud - platforms, services, configurations, workloads, and hardening practices

* 1+ years of experience with Wiz or a similar cloud security or "CNAPP" product

* 1+ years of experience with scripting/automation languages such as Python, Bash, Terraform and/or Power Shell

* 1+ year of experience delivering integration between cloud security tools and other enterprise tools such as Splunk Cloud and Service Now

* 1+ year experience with data visualization/reporting tools such as PowerBI, Tableau or similar technologies

* Solid understanding of Identity & Access Management, as well as Information Protection concepts as they apply to monitoring and responding to related alerts/findings

* Strong verbal and written communication skills

* Proven ability to work independently, as well as having strong interpersonal skills to work effectively within a Team and with partners

* Strong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversight

* Intermediate to advanced experience working with Microsoft Office products (e.g. Word, Excel, PowerPoint, Visio, Outlook, MS Teams, SharePoint)

* Ability to handle multiple, high priority deliverables…