CNAAP Consultant
Position: CNAAP Consultant Location: Remote Key Requirement Highlights: The primary requirement is to identify engineers with strong expertise in cloud security, policy-as-code, and cloud security posture management who can independently investigate security findings and implement preventive controls. Core Skills Being Sought · Google Cloud Platform (GCP) security experience · Strong hands-on expertise in HashiCorp Sentinel · Policy-as-Code implementation experience · Cloud Security Posture Management (CSPM), CNAPP & WIZ · Palo Alto Cortex experience · Terraform and Infrastructure as Code (IaC) · Kubernetes Security · Vault · Open Policy Agent (OPA) · Ability to investigate findings and implement preventive controls Technology Landscape Preventative Security Controls (Policy-as-Code) · HashiCorp Sentinel · Terraform (Infrastructure as Code) · Vault · Kubernetes Security · Open Policy Agent (OPA) · WIZ & Cortex Detective Security Controls · Palo Alto Cortex Open Roles and Hiring Requirements 1. Policy-as-Code Engineers (Preventative Security Workstream) Required Skills · Strong HashiCorp Sentinel experience · Policy-as-Code development · Security control development · GCP security expertise · Terraform · Cloud governance Desired Qualities · Strong understanding of security controls · Experience implementing enterprise security controls · Multi-cloud exposure · Ability to translate security policies into automated enforcement mechanisms 2. Detective Security Engineers Required Skills One or more of the following: · Palo Alto Cortex expertise · Google security platform experience · Cloud Security Posture Management (CSPM) Additional Skills · SQL knowledge · Understanding of cloud misconfigurations · Ability to interpret security findings · Familiarity with Policy-as-Code concepts · Root cause analysis and remediation experience 3. Security Automation Engineers Desired Skills · Python · Security automation · Remediation scripting · Security operations automation Skill Weightage Preventative Security Engineer · 80%-90% HashiCorp Sentinel · 10%-20% Cortex awareness · Strong Policy-as-Code development experience · Terraform proficiency · GCP security exposure Detective Security Engineer · 80%-90% Cortex / Google security capabilities · 20%-30% Sentinel understanding SQL familiarity · Working knowledge of Sentinel · Strong capability to investigate findings and identify root causes Thanks and Regards Akash Verma Raas Infotek Corporation. 262 Chapman Road, Suite 105A, Newark, DE -19702 E-Mail: [email protected]|Website: www.raasinfotek.com Linkedin: linkedin.com/in/akash-verma-b72471224