Position: CNAAP Consultant
Location: Remote
Key Requirement Highlights:
The primary requirement is to identify engineers with strong expertise in cloud security, policy-as-code, and cloud security posture management who can independently investigate security findings and implement preventive controls.
Core Skills Being Sought
· Google Cloud Platform (GCP) security experience
· Strong hands-on expertise in HashiCorp Sentinel
· Policy-as-Code implementation experience
· Cloud Security Posture Management (CSPM), CNAPP & WIZ
· Palo Alto Cortex experience
· Terraform and Infrastructure as Code (IaC)
· Kubernetes Security
· Vault
· Open Policy Agent (OPA)
· Ability to investigate findings and implement preventive controls
Technology Landscape
Preventative Security Controls (Policy-as-Code)
· HashiCorp Sentinel
· Terraform (Infrastructure as Code)
· Vault
· Kubernetes Security
· Open Policy Agent (OPA)
· WIZ & Cortex
Detective Security Controls
· Palo Alto Cortex
Open Roles and Hiring Requirements
1. Policy-as-Code Engineers (Preventative Security Workstream)
Required Skills
· Strong HashiCorp Sentinel experience
· Policy-as-Code development
· Security control development
· GCP security expertise
· Terraform
· Cloud governance
Desired Qualities
· Strong understanding of security controls
· Experience implementing enterprise security controls
· Multi-cloud exposure
· Ability to translate security policies into automated enforcement mechanisms
2. Detective Security Engineers
Required Skills
One or more of the following:
· Palo Alto Cortex expertise
· Google security platform experience
· Cloud Security Posture Management (CSPM)
Additional Skills
· SQL knowledge
· Understanding of cloud misconfigurations
· Ability to interpret security findings
· Familiarity with Policy-as-Code concepts
· Root cause analysis and remediation experience
3. Security Automation Engineers
Desired Skills
· Python
· Security automation
· Remediation scripting
· Security operations automation
Skill Weightage
Preventative Security Engineer
· 80%-90% HashiCorp Sentinel
· 10%-20% Cortex awareness
· Strong Policy-as-Code development experience
· Terraform proficiency
· GCP security exposure
Detective Security Engineer
· 80%-90% Cortex / Google security capabilities
· 20%-30% Sentinel understanding SQL familiarity
· Working knowledge of Sentinel
· Strong capability to investigate findings and identify root causes
Thanks and Regards
Akash Verma
Raas Infotek Corporation.
262 Chapman Road, Suite 105A,
Newark, DE -19702
E-Mail: akash.verma@raasinfotek.com|Website: www.raasinfotek.com
Linkedin: linkedin.com/in/akash-verma-b72471224