CNAPP -Implementation Engineer

Job Description

CNAPP -Implementation Engineer

Experience Level: 7 - 12 Years

Qualifications-Computer Science/IT Graduate

Job Profile-

• Seeking a highly skilled and Hands-on implementation experience in any one or more of these solutions- Palo Alto Networks Prisma cloud /Wiz/Lacework/Crowdstrike CNAPP
• The ideal candidate will be responsible for the end-to-end deployment, configuration, integration, and optimization of the chosen CNAPP platform across multi-cloud environments (AWS, Azure, GCP).
• This role requires deep technical expertise in cloud security principles, a strong understanding of cloud-native architectures, and a proven ability to translate security requirements into effective CNAPP controls to enhance our organization's cloud security posture.

Preferred qualifications:

• Lead the full lifecycle implementation of either Prisma Cloud /Wiz/Lacework/Crowstrike CNAPP

• Including initial setup, cloud account onboarding, and agent/connector deployment across various cloud providers (AWS, Azure, GCP,OCI).
• Configure and fine-tune policies for Cloud Security Posture Management (CSPM), ensuring compliance with industry benchmarks (CIS, NIST) and internal security standards.
• Implement Cloud Workload Protection Platform (CWPP) capabilities, including host and container vulnerability scanning, runtime protection, and compliance checks for virtual machines, containers (Docker, Kubernetes), and serverless functions.
• Experience in CWPP agents deployment with policies enforcement
• Configure Cloud Infrastructure Entitlement Management (CIEM) features to identify and remediate excessive permissions and privilege escalation risks.
• Set up and manage IaC (Infrastructure as Code) security scanning within the CNAPP platform to identify misconfigurations and vulnerabilities pre-deployment.
• Integrate the CNAPP platform with existing security tools and workflows, including SIEM/SOAR systems (e.g., Splunk, Sentinel, Cortex XSOAR), ticketing systems (e.g., Jira, ServiceNow), and identity providers.
• Implement automated remediation actions and playbooks within the CNAPP platform or via external orchestration tools.
• Integrate CNAPP security scanning into CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps, GitHub Actions) to shift security left.

• Education & Certifications
• Prisma Certified Cloud Security Engineer (PCCSE) certification

CNAPP -Manage Services Engineer

• Experience Level: 6 - 9 Years
• Qualifications-Computer Science/IT Graduate
• Job Profile-

• Seeking a highly skilled and hands-on CNAPP (Cloud Native Application Protection Platform) Manage Services Engineer with 6-9 years of experience, Palo Alto Networks Prisma Cloud /Wiz/Lacework/Crowstrike CNAPP

• The ideal candidate will be responsible for the end-to-end CNAPP platform like CSPM, CWPP, CIEM and IAC across multi-cloud environments (AWS, Azure, GCP,OCI).
• This role requires deep technical expertise in cloud security principles, a strong understanding of cloud-native architectures, and a proven ability to translate security requirements into effective CNAPP controls to enhance our organization's cloud security posture.

͏

Preferred qualifications:

• Lead the full lifecycle management of either Prisma Cloud /Wiz/Lacework/Crowstrike CNAPP

• Configure and fine-tune policies for Cloud Security Posture Management (CSPM), ensuring compliance with industry benchmarks (CIS, NIST) and internal security standards.
• Manage Cloud Workload Protection Platform (CWPP) capabilities, including host and container vulnerability scanning, runtime protection, and compliance checks for virtual machines, containers (Docker, Kubernetes), and serverless functions.
• Experience in CWPP agents Management with policies enforcement
• Manage Cloud Infrastructure Entitlement Management (CIEM) features to identify and remediate excessive permissions and privilege escalation risks and do the remediation of those alerts.
• Manage IaC (Infrastructure as Code) security scanning within the CNAPP platform to identify misconfigurations and vulnerabilities pre-deployment.
• Integrate the CNAPP platform with existing security tools and workflows, including SIEM/SOAR systems (e.g., Splunk, Sentinel, Cortex XSOAR), ticketing systems (e.g., Jira, ServiceNow), and identity providers.
• Implement automated remediation actions and playbooks within the CNAPP platform or via external orchestration tools.
• Manage CNAPP security scanning into CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps, GitHub Actions) to shift security left.

• Education & Certifications
• Prisma Certified Cloud Security Engineer (PCCSE) certification