What are the responsibilities and job description for the Findings Management Engineer position at wellsfargo?
Description
Title:Findings Management Engineer
Location: Charlotte, NC
Duration:30 W, 3 D
Work Engagement: W2
Work Schedule: Hybrid 3 days in office/2 days remote
Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits
Summary:
In this contingent resource assignment, you may: Consult on complex initiatives with broad impact and large-scale planning for Information Security Engineering. Review and analyze complex multi-faceted, larger scale or longer-term Information Security Engineering challenges that require in-depth evaluation of multiple factors including intangibles or unprecedented factors. Contribute to the resolution of complex and multi-faceted situations requiring solid understanding of the function, policies, procedures, and compliance requirements that meet deliverables. Strategically collaborate and consult with client personnel. Required Qualifications: Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
Key Responsibilities:
Actively support and perform “hands-on” technical and engineering work with the Wiz product, with a focus on Findings Management
• Define/operationalize alerts in Wiz
• Perform engineering related to Alerts/Findings data analysis and engineering of reporting processes and visualization dashboards (e.g. PowerBI, Tableau)
• Design/develop automation & utility scripts to make team processes more efficient
• Build Python pipelines to download, merge, enrich, and analyze Wiz, cloud, and security datasets
• Collaborate with partners to support the remediation or “burn down” of alerts/findings in Wiz, as well as participating in related analysis work required for the automation of alerts/findings remediation.
• Provide professional expertise relating to Application Lifecycle Security and resolving application vulnerabilities or compliance issues detected via Wiz
• Be a motivated self-starter quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlines.
• Share your Wiz expertise and knowledge with teammates, while completing assigned duties.
Key Requirements:
Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship.
Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• experience with and strong understanding of Azure and Google public cloud – platforms, services, configurations, workloads, and hardening practices
• experience with Wiz or a similar cloud security or “CNAPP” product
• experience with scripting/automation languages such as Python, Bash, Terraform and/or PowerShell
• experience delivering integration between cloud security tools and other enterprise tools such as Splunk Cloud and ServiceNow
• experience with data visualization/reporting tools such as PowerBI, Tableau or similar technologies
• Solid understanding of Identity & Access Management, as well as Information Protection concepts as they apply to monitoring and responding to related alerts/findings
• Strong verbal and written communication skills
• Proven ability to work independently, as well as having strong interpersonal skills to work effectively within a Team and with partners
• Strong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversight
• Intermediate to advanced experience working with Microsoft Office products (e.g. Word, Excel, PowerPoint, Visio, Outlook, MS Teams, SharePoint)
• Ability to handle multiple, high priority deliverables concurrently
• Ability to communicate confidentially, professionally, and effectively, in both written and verbal formats, with stakeholders and partners
• experience working on teams practicing Agile Scrum or Kanban methodologies