Senior Attack Surface & Security Configuration Engineer

Kaleidoscope; Charlotte (NC); On-site; USD 80,000 - 100,000; Full time

Job summary

Kaleidoscope in Charlotte, NC seeks a Senior Security Configuration & Attack Surface Management Engineer to enhance enterprise security controls and risk posture. You will lead configuration policy development, vulnerability remediation, and cross‑functional collaboration with infrastructure and technology teams.

Ideal candidates bring 8+ years in information security, experience with scanning tools, and strong scripting skills.

Qualifications

• 8+ years of experience in information security or risk management.
• Experience with security configuration compliance and vulnerability management.
• Experience with enterprise security controls configuration.
• Familiarity with security scanners (Qualys/Tenable/Tanium/Symantec).
• Knowledge of Windows/Unix/Linux administration.
• Scripting in Python/Bash/PowerShell.
• Understanding regulatory compliance frameworks.
• Strong communication and cross-functional collaboration.

Responsibilities

• Develop, test, and implement security configuration compliance policies and technical controls.
• Support enterprise attack surface management and secure configuration initiatives.
• Partner with infrastructure, security, and technology teams to validate security baseline controls.
• Identify configuration vulnerabilities and coordinate remediation of non-compliant systems.
• Manage vulnerability and compliance scanning with Qualys, Tenable, Tanium, and Symantec.
• Ensure accurate security scans, compliance reports, and risk assessments.
• Work across multiple technology platforms to improve enterprise security posture.
• Collaborate with business and technical stakeholders to implement risk mitigation strategies.

Education

CISSP

CISM

Tools

Qualys

Tenable

Tanium

Symantec

Job description

Kaleidoscope in Charlotte, NC seeks a Senior Security Configuration & Attack Surface Management Engineer to enhance enterprise security controls and risk posture. You will lead configuration policy development, vulnerability remediation, and cross‑functional collaboration with infrastructure and technology teams.

Ideal candidates bring 8+ years in information security, experience with scanning tools, and strong scripting skills.