Security Control Engineer/ Full stack engineer with secruity

Role : Security Control Engineer

Location : Charlotte, NC / Dallas, TX (Hybrid)

Contract

End Client - Banking Sector

Experience - 9+ Years

Look for Profile- Full Stack Engineer (Frontend-heavy) with Security Domain Exposure

Role Summary

Security Control Engineer responsible for supporting the migration of security control rule management from Prisma to the C9 application, leveraging Wiz as the new security data source. The role focuses on React UI development, security policy management, MongoDB integration, and API-based data ingestion to enable security administrators to manage, view, and update security control rules.

The engineer will work closely with application, security, and platform teams to build and enhance the next-generation security control management platform while ensuring feature parity with existing Prisma-based integrations.

Project Overview

Project Purpose

• Migrate security control rule management from Prisma to the C9 application.
• Use Wiz as the primary security data source.
• Build a parallel Wiz-based pipeline to replicate existing Prisma data flows.
• Execute side-by-side validation and testing before retiring Prisma integrations.

Migration Strategy

• Replicate existing Prisma integrations and data flows on Wiz.
• Run Prisma and Wiz pipelines in parallel during validation phases.
• Support testing, reconciliation, policy comparison, and migration activities.
• Ensure seamless transition with no impact to security control operations.

Key Responsibilities

Application Development

• Develop and enhance React-based UI components for security control management.
• Build interfaces for security administrators to:
• View security control rules.
• Create and modify policies.
• Manage list and exception rules.
• Review rule status and audit information.
• Improve usability and performance of security control dashboards.

Security Controls & Policy Management

• Understand and implement security control configurations.
• Manage rule settings including:
• Port closure controls.
• listing policies.
• Security policy exceptions.
• Rule lifecycle management.
• Support policy redesign and redefinition as part of the Wiz migration.

Data & Integration Development

• Integrate Wiz findings and control data into the C9 application.
• Develop and consume REST APIs and GraphQL services.
• Work with JSON-based security data structures.
• Support graph-based security control relationships and data models.
• Design, optimize, and maintain MongoDB collections and queries.

Migration & Validation

• Support Prisma-to-Wiz migration efforts.
• Validate control parity between existing Prisma and new Wiz integrations.
• Troubleshoot data discrepancies and integration issues.
• Participate in DEV, SIT, and UAT testing phases.
• Assist with rollout and decommissioning of legacy Prisma integrations.

Required Skills & Experience

• 6-10 years of software engineering experience.
• Strong hands-on experience with React.js development.
• Experience building enterprise web applications.
• Strong understanding of security controls and policy management.
• Experience working with JSON data structures.
• Hands-on experience with MongoDB.
• Experience developing and consuming REST APIs.
• Experience with GraphQL integrations.
• Understanding of cloud security concepts and CNAPP platforms.
• Strong debugging and problem-solving skills.

Technical Skills

Frontend

• React.js
• JavaScript / TypeScript
• HTML5 / CSS3
• State management frameworks

Backend & Data

• MongoDB
• REST APIs
• GraphQL
• JSON processing

Security

• Security controls and governance
• Port closure and network security rules
• listing and exception management
• Wiz or Prisma Cloud exposure
• Cloud security fundamentals

Preferred Skills

• Experience with Wiz platform.
• Experience with Prisma Cloud.
• Experience in security tooling migrations.
• Exposure to graph-based security control models.
• Banking or financial services domain experience.
• Experience working in large-scale enterprise security environments.