Secure Configuration & Attack Surface Management Engineer

INFOSYS NOVA HOLDINGS LLC; Charlotte (NC); On-site; USD 80,000 - 100,000; Full time

Job summary

Kaleidoscope, an Infosys Company, is seeking a Secure Configuration & Attack Surface Management Engineer in Charlotte, NC. The role focuses on developing security configuration policies, managing vulnerability scans, and mitigating risks across enterprise environments.

The candidate will collaborate with infrastructure and technology teams to implement secure baselines and remediation programs, with an emphasis on compliance and risk reduction.

Qualifications

• 8+ years of experience in information security or risk management.
• Hands-on experience with security configuration compliance, vulnerability management, or attack surface management.
• Experience configuring and managing enterprise security controls.
• Experience with security scanning tools such as Qualys, Tenable, Tanium, or Symantec.
• Knowledge of Windows, Unix/Linux, or workstation administration.
• Familiarity with scripting: Python, Bash, PowerShell, or Regex.
• Understanding of security risk management frameworks and regulatory compliance.
• Strong communication and cross-functional collaboration skills.

Responsibilities

• Develop, test, and implement security configuration compliance policies and controls.
• Support enterprise attack surface management and secure configuration initiatives.
• Partner with infrastructure, security, and technology teams to validate baseline controls.
• Identify configuration vulnerabilities and coordinate remediation of non-compliant systems.
• Manage vulnerability and compliance scanning using Qualys, Tenable, Tanium, and Symantec.
• Ensure accurate security scans, reports, and risk assessments.
• Collaborate across technology platforms to improve security posture.
• Work with stakeholders to implement risk mitigation strategies.

Skills

Security configuration

Vulnerability management

Attack surface management

Windows/Unix/Linux admin

Scripting (Python, Bash, PowerShell, 1

Tools

Qualys

Tenable

Tanium

Symantec

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Secure Configuration & Attack Surface Management Engineer

Charlotte, NC, US

Salary Range: $80,000.00 To $100,000.00 Annually

* Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time. *

Secure Configuration & Attack Surface Management Engineer

Position Overview

We are seeking an experiencedSecurity Configuration & Attack Surface Management Engineer to support enterprise security configuration compliance, vulnerability management, and risk mitigation initiatives.

This role focuses on developing and implementing security configuration policies, managing technical security controls, and working closely with technology teams to identify vulnerabilities, validate compliance, and remediate security risks across enterprise environments.

Key Responsibilities

Develop, test, and implementsecurity configuration compliance policies and technical controls.

Support enterpriseattack surface management and secure configuration initiatives.

Partner with infrastructure, security, and technology teams to validate security baseline controls.

Identify configuration vulnerabilities and coordinate remediation of non-compliant systems.

Manage vulnerability and compliance scanning using tools such asQualys, Tenable, Tanium, and Symantec.

Ensure accurate security scans, compliance reports, and risk assessments.

Work across multiple technology platforms to improve enterprise security posture.

Collaborate with business and technical stakeholders to implement effective risk mitigation strategies.

Required Qualifications

8+ years of experience in information security, technology risk management, or related fields.

Hands-on experience withsecurity configuration compliance, vulnerability management, or attack surface management.

Experience configuring and managing enterprise-level security controls.

Experience with security scanning tools such asQualys, Tenable, Tanium, or Symantec.

Knowledge ofWindows, Unix/Linux, or workstation administration.

Familiarity withPython, Bash, PowerShell, or Regex for scripting and automation.

Understanding of security risk management frameworks and regulatory compliance requirements.

Strong communication, analytical, troubleshooting, and cross-functional collaboration skills.

Preferred Qualifications

CISSP, CISM, or similar security certifications.

Experience supporting security programs within banking or financial services.

Experience working with enterprise security configuration baselines and remediation programs.

Interview Process

Candidates must complete atimed Security Configuration SME assessment before interviewing.

The assessment can only be attempted once.

The timer cannot be paused after starting.

Candidates should prepare before beginning the assessment.

Kaleidoscope, an Infosys Company, is an equal opportunity employer, and all qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, spouse of protected veteran, or disability.