We are seeking a highly skilled CNAPP Security Engineer to support the organization's multi-cloud security transformation initiative. The engineer will be responsible for establishing end-to-end visibility across cloud and SaaS environments by integrating enterprise systems into the Cloud-Native Application Protection Platform (CNAPP). The role focuses on providing actionable security insights, reducing risk exposure, enforcing secure-by-default controls, and driving cloud security at scale across AWS, Azure, GCP, and OpenShift environments.

Working within a DevSecOps model, the engineer will collaborate with Technology Risk & Information Security (TRIS), Cloud Security Governance, Cloud Security Operations, DevOps, and Engineering teams to implement and enhance cloud security capabilities that enable secure cloud adoption while maintaining governance and compliance standards.

CNAPP Platform Management

• Administer and optimize CNAPP platforms such as Palo Alto Cortex Cloud, Prisma Cloud, Wiz, or equivalent solutions.
• Monitor, investigate, and remediate cloud security findings, identity risks, and alerts.
• Manage onboarding of cloud accounts, Kubernetes clusters, and applications into CNAPP platforms.

Multi-Cloud Security Operations

• Analyze and correlate security events across AWS, Azure, GCP, and OpenShift environments.
• Identify cloud misconfigurations, vulnerabilities, identity risks, and runtime threats.
• Prioritize remediation efforts based on exploitability, business impact, and risk exposure.

Policy-as-Code & Cloud Governance

• Collaborate with governance teams to implement Policy-as-Code controls using OPA, Sentinel, and native cloud policies.
• Enforce cloud security guardrails and secure-by-default configurations.
• Develop and maintain cloud security standards and governance frameworks.

Kubernetes & Container Security

• Secure Kubernetes/OpenShift environments through workload protection, network policy enforcement, container image scanning, and runtime security controls.
• Implement container security best practices and cloud-native workload protections.

DevSecOps Integration

• Embed security controls into CI/CD pipelines and developer workflows.
• Support shift-left security initiatives and continuous compliance monitoring.
• Integrate security testing and scanning capabilities into application delivery processes.

Security Analytics & Automation

• Leverage XQL, automation playbooks, and analytics tools to investigate and prioritize security risks.
• Automate remediation workflows and operational processes.
• Improve detection and response capabilities through workflow automation.

Incident Response & Integration

• Integrate CNAPP signals with SIEM, SOAR, and observability platforms.
• Participate in incident triage, root cause analysis, and post-incident reviews.
• Develop detection rules, response playbooks, and operational runbooks.

Architecture & Advisory

• Provide cloud security guidance to engineering and application teams.
• Support the design of secure cloud-native architectures.
• Evaluate emerging CNAPP features and cloud security technologies through proofs of concept.