Application Security Engineer with AWS, Cequence ,API Security(Remote)
Houston - Texas - USAOn-siteFull-timeCybersecurity
Description
Job Role: Application Security Engineer with AWS, Cequence ,API Security(Remote) Location: Remote Primary Focus Deployment and integration of Cequence API Security Wiz Federal Splunk and Cribl. AWS Gov Cloud federal government telecom or highly regulated cloud environments. Hands-on deployment platform engineering integration automation and operational handover. We are seeking a hands-on Security Tools Engineer responsible for deploying configuring integrating and operationalizing enterprise security platforms across cloud and regulated environments. The role will focus on implementing Cequence API Security Wiz Federal Splunk and Cribl to enable API threat protection cloud security posture management centralized logging telemetry optimization security analytics and SOCready monitoring capabilities. The engineer will work closely with cloud security operations network application and DevSecOps teams to ensure the deployed platforms are secure scalable compliant and ready for transition into steadystate operations. Key Responsibilities Cequence API Security Deployment. Deploy and configure Cequence API Security across applicable cloud application and API environments. Integrate Cequence with API gateways load balancers application endpoints and relevant traffic sources. Configure API discovery inventory behavior analytics risk scoring and attack detection policies. Enable runtime API protection bot mitigation abuse detection and OWASP API Security monitoring use cases. Integrate Cequence s and findings with Splunk SOC workflows for investigation and response. Develop deployment documentation integration guides runbooks and handover material for operations teams. Wiz Federal Deployment CNAPP Engineering. Deploy and configure Wiz Federal in AWS Gov Cloud or regulated cloud environments. Onboard AWS accounts and workloads into Wiz Federal using approved connector and access models.
Configure CSPM CWPP vulnerability exposure management compliance policies and cloud risk dashboards
Support attack path analysis cloud entitlement visibility prioritization of toxic combinations and workload risk reporting.
Integrate Wiz Federal findings with Splunk Cribl ticketing and operational workflows where required.
Support Fed RAMP NIST 80053 FIPS CMMC and Zero Trustaligned cloud security controls.
Splunk Deployment SIEM Engineering.
Deploy and configure Splunk components including Indexers Search Heads Heavy Forwarders and Universal Forwarders.
Design and implement log ingestion parsing normalization field extraction indexing and retention strategies.
Onboard security telemetry from cloud network endpoint application API security and CNAPP platforms.
Develop dashboards s correlation searches reports and operational views for SOC and security engineering teams. Troubleshoot ingestion issues parsing failures data gaps performance bottlenecks and platform health concerns. Support Splunk integration with Cribl for routing filtering enrichment and ingestion optimization. Cribl Deployment Telemetry Pipeline Engineering. Deploy and configure Cribl Stream infrastructure to support secure and scalable telemetry routing. Build pipelines for filtering enrichment transformation redaction sampling and destinationbased routing. Integrate Cribl with Splunk cloudnative logging services security platforms and observability destinations. Optimize data ingestion volumes improve log quality and reduce unnecessary SIEM storage and processing costs. Configure secure source and destination connectivity certificates access controls and pipeline monitoring. Create reusable data onboarding patterns and documentation for future tool and log source integrations. Platform Integration Automation Handover. Integrate Cequence Wiz Federal Splunk and Cribl into a unified security monitoring and response ecosystem. Use APIs scripts and Infrastructureas Code practices to standardize repeatable deployments where applicable. Collaborate with SOC teams to align s dashboards data models and investigation workflows. Prepare deployment plans configuration workbooks architecture diagrams operational runbooks and knowledge transfer material. Support testing validation troubleshooting golive readiness and transition to steadystate support teams. Required Skills Security Platforms Cequence API Security Wiz Federal Wiz CNAPP Splunk Enterprise Splunk Cloud Cribl Stream Cloud Security AWS Gov Cloud AWS Cloud Trail Security Hub Guard Duty Security Lake IAM federation access governance Zero Trust and cloud security architecture Engineering Automation Terraform or Cloud Formation Python PowerShell Bash REST APIs and platform integrations CICD and deployment automation Log parsing normalization route
Requirements
Mandatory Skills : Application Security - API Security testing, AWS Cloud Architecture
Good to Have Skills : Performance Monitoring- Cloud Native (Aws CloudWatch, Azure Cloud Monitor) - Testing