Senior CIS Security Engineer - Cloud, Config & Compliance

KeyCorp; Brooklyn (OH); Hybrid; USD 96,000 - 181,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

KeyCorp's Cyber Defense team seeks a Senior Exposure Management Engineer to design, implement, and maintain secure configurations across on-premises, cloud, and hybrid environments. You will ensure alignment with CIS Benchmarks and organizational baselines, perform vulnerability management with Tenable, and support audit readiness with thorough documentation.

Responsibilities include collaboration with cross-functional teams, automation of configuration and compliance reporting, and continuous

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field, or equivalent experience.
• 8+ years in security engineering or configuration management.
• Proficiency with configuration management tools and scripting languages (PowerShell, Python, Bash).
• Experience with vulnerability management platforms (Tenable, Qualys, Rapid7).
• Strong knowledge of CIS Benchmarks, NIST CSF, and related standards.
• Willingness to travel.

Responsibilities

• Develop, implement, and maintain secure configuration baselines for operating systems, cloud platforms, applications, and network devices.
• Conduct regular configuration assessments and audits using industry tools to validate CIS Benchmarks and standards.
• Perform authenticated and unauthenticated vulnerability scans and coordinate remediation.
• Collaborate with threat intelligence and Red Team to prioritize controls.
• Document changes, exceptions, and remediation activities; support audits.
• Automate configuration management and compliance reporting tools.

Skills

Security engineering

Configuration management

Cross-functional collaboration

Documentation

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Ansible

Chef

Puppet

Tenable

Qualys

Rapid7

ServiceNow Vulnerability Response

ServiceNow Configuration Compliance

Job description

KeyCorp's Cyber Defense team seeks a Senior Exposure Management Engineer to design, implement, and maintain secure configurations across on-premises, cloud, and hybrid environments. You will ensure alignment with CIS Benchmarks and organizational baselines, perform vulnerability management with Tenable, and support audit readiness with thorough documentation.

Responsibilities include collaboration with cross-functional teams, automation of configuration and compliance reporting, and continuous