OpenShift Security Engineer (Charlotte, NC)

OpenShift Security Engineer

OpenShift Security Engineer needs 3 5 years of experience in cybersecurity as a practitioner experienceOpenShift Security Engineer requires Experience with CIS Benchmarks baseline configuration and hardening principles Experience interpreting scan results into consumable reports for senior leadership Strong Linux and Windows engineering support Proficient in using reporting tools such as Tableau Power BI etc. Strong team leadership experience to help with organizational and team dynamics Experience and skills with container environments specifically OpenShift and Docker be familiar with configuration hardening principles have experience with CIS Benchmarks and IT and security standards OpenShift Security Engineer duties Work in a matrixed team and provide support on configuration baseline development for OpenShift containers. Support repeatable processes for reviewing and evaluating configuration baselines based on CIS Benchmarks and enterprise standards. Assist with development maintenance and utilization of reports (e.g. Tableau Power BI etc.) to support baseline configuration compliance scanning Evaluate the output of baseline configuration compliance scan results and produce consumable reports for management review Partner with Information Technology and asset owners on creation of remediation plans for non-compliance or filing of appropriate exception processes. Attend review meetings and serve as a subject matter expert in providing guidance on baseline configuration and reporting Document formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation. Responsible for reviewing and developing security configuration compliance baselines for OpenShift container environments applying both CIS Benchmarks and enterprise standards Work with Information Technology teams to review and evaluate configuration hardening settings creating formal baselines for compliance scanning reporting and risk governance. Work with engineering teams that conduct periodic compliance scanning of these environments against these baselines using tools such as Twistlock.