Senior Security Configuration & Compliance Analyst

Kaleidoscope; Charlotte (NC); On-site; USD 75,000 - 90,000; Full time

Job summary

Kaleidoscope, an Infosys Company, seeks an experienced Security Configuration Compliance Analyst to support enterprise security configuration management, vulnerability scanning, and risk mitigation initiatives.

This role focuses on developing and implementing security configuration policies, validating technical controls, and collaborating with technology teams to identify and remediate non-compliant systems across enterprise environments.

Qualifications

• 5+ years of experience in information security, risk management, or related field.
• Hands-on experience with security configuration compliance and vulnerability management.
• Experience configuring and managing enterprise-level technical security controls.
• Experience with security scanning tools such as Qualys, Tenable, Tanium, or Symantec.
• Knowledge of Windows, Unix/Linux, or workstation administration.
• Familiarity with scripting (Python, Bash, PowerShell, or Regex) for automation.

Responsibilities

• Develop, test, and implement security configuration compliance policies and technical controls.
• Support enterprise security configuration and compliance initiatives across multiple platforms.
• Partner with infrastructure, security, and technology teams to validate baseline controls.
• Identify security configuration gaps and coordinate remediation of non-compliant systems.
• Perform vulnerability and configuration compliance scanning using tools such as Qualys, Tenable, Tanium, and Symantec.
• Ensure accurate security scans, compliance reporting, and risk assessments.

Skills

Security configuration

Vulnerability management

OS administration (Windows/Unix/Linux)

Scripting (Python/Bash/PowerShell/Reg

Cross-functional collaboration

Tools

Qualys

Tenable

Tanium

Symantec

Job description

Kaleidoscope, an Infosys Company, seeks an experienced Security Configuration Compliance Analyst to support enterprise security configuration management, vulnerability scanning, and risk mitigation initiatives.

This role focuses on developing and implementing security configuration policies, validating technical controls, and collaborating with technology teams to identify and remediate non-compliant systems across enterprise environments.