[Remote] CNAPP Security Engineer (Remote) - Mid-Atlantic region

Note The job is a remote job and is open to candidates in USA. GuidePoint Security is a rapidly growing cybersecurity firm that provides expertise and solutions to help organizations minimize risk. They are seeking a CNAPP Security Engineer to advise, develop, implement, and run CNAPP Cloud Security tools for various customers, leveraging the latest cloud security technologies. Responsibilities • Perform implementation of CNAPP and CSPM tools in multi-account AWS and Azure environments. • Implement IaC scanning tools within the CI/CD Pipelines. • Develop Infrastructure as code in Cloud Formation or Terraform. • Develop custom control checks within CNAPP Platforms using JSON, REGO, or Terraform. • Analysis – identifies and evaluates potential threats and vulnerabilities to the public cloud environments network, applications, infrastructure, and systems. • Issue Resolution – leads the resolution of identified issues in public cloud environments. • Vulnerabilities – Cloud, System, and Application • Compliance – CIS, NIST, AWS, and Azure best practices. • Cloud Entitlements – Excessive Permissions and various IAM best practices. • Secrets – unprotected secrets on VMs, Containers, and IaC repositories. • IaC – misconfigurations and vulnerabilities within developed IaC. • Deep understanding of Kubernetes and microservices security best practices. • Performs container registry scanning. • Reviewing and creating metrics, KPIs, and KRIs to track overall cloud security posture. • Create, maintain, and update runbooks for cloud configuration checks. • Assess the overall security posture of cloud security infrastructure and workloads. • Advise customers on Cloud security best practices. Skills • At least 3 years of experience working in Cloud Security with Amazon AWS, Microsoft Azure, or GCP. • Experience with Cloud Security tools like Wiz.io, Orca, Lacework, Trivy, Aqua, Ermetic or Prisma Cloud. • Experience with integrating tools into development pipelines such as Azure DevOps, Jenkins, Etc. • Understanding of a broad range of Cloud Security issues as well as their mitigation strategies. • Understanding of Cloud Security-related vulnerabilities. • Experience developing code in Terraform, Python, PowerShell, Rego, and other languages. • Written communication skills for written interactions with clients. • Strong communication skills include articulating thoughts and refining complex problems into digestible information clearly. • Ability to manage time independently while handling multiple projects concurrently. • Bachelor’s degree in computer science or information Security preferred. • Cloud Security certifications are preferred. Benefits • Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) • Group Medical Insurance options Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family) and GPS will contribute in one lump sum ($500 per EE annually / $1000 per family annually (includes spouse/children/family options) • Group Dental Insurance GuidePoint pays 100% of the premium for employees and 75% of family plans • 12 corporate holidays and a Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option Company Overview • GuidePoint Security provides customized, innovative & valuable Information Security solutions that enable commercial federal organizations. It was founded in 2011, and is headquartered in Herndon, Virginia, USA, with a workforce of 1001-5000 employees. Its website is https//www.guidepointsecurity.com/. Company H1B Sponsorship • GuidePoint Security has a track record of offering H1B sponsorships, with 10 in 2025, 15 in 2024, 2 in 2023, 1 in 2022. Please note that this does not guarantee sponsorship for this specific role. Apply To this Job Apply To this Job