Attack Surface & Security Configuration Engineer

INFOSYS NOVA HOLDINGS LLC; Charlotte (NC); On-site; USD 80,000 - 100,000; Full time

Job summary

Kaleidoscope, an Infosys Company, is seeking a Secure Configuration & Attack Surface Management Engineer in Charlotte, NC. The role focuses on developing security configuration policies, managing vulnerability scans, and mitigating risks across enterprise environments.

The candidate will collaborate with infrastructure and technology teams to implement secure baselines and remediation programs, with an emphasis on compliance and risk reduction.

Qualifications

• 8+ years of experience in information security or risk management.
• Hands-on experience with security configuration compliance, vulnerability management, or attack surface management.
• Experience configuring and managing enterprise security controls.
• Experience with security scanning tools such as Qualys, Tenable, Tanium, or Symantec.
• Knowledge of Windows, Unix/Linux, or workstation administration.
• Familiarity with scripting: Python, Bash, PowerShell, or Regex.
• Understanding of security risk management frameworks and regulatory compliance.
• Strong communication and cross-functional collaboration skills.

Responsibilities

• Develop, test, and implement security configuration compliance policies and controls.
• Support enterprise attack surface management and secure configuration initiatives.
• Partner with infrastructure, security, and technology teams to validate baseline controls.
• Identify configuration vulnerabilities and coordinate remediation of non-compliant systems.
• Manage vulnerability and compliance scanning using Qualys, Tenable, Tanium, and Symantec.
• Ensure accurate security scans, reports, and risk assessments.
• Collaborate across technology platforms to improve security posture.
• Work with stakeholders to implement risk mitigation strategies.

Skills

Security configuration

Vulnerability management

Attack surface management

Windows/Unix/Linux admin

Scripting (Python, Bash, PowerShell, 1

Tools

Qualys

Tenable

Tanium

Symantec

Job description

Kaleidoscope, an Infosys Company, is seeking a Secure Configuration & Attack Surface Management Engineer in Charlotte, NC. The role focuses on developing security configuration policies, managing vulnerability scans, and mitigating risks across enterprise environments.

The candidate will collaborate with infrastructure and technology teams to implement secure baselines and remediation programs, with an emphasis on compliance and risk reduction.