Security Control Engineer

Role : Security Control Engineer

Location : Charlotte, NC / Dallas, TX/Iselin, NJ (Hybrid)

Role Summary:

·         We need to assess a Security Control Engineer for the WF-Prisma Project. We need the following mandatory skills.

·         IAM expertise to evaluate access controls, security policies, platforms, compliance frameworks, and governance.

·         CyberArk, PAM, Sailpoint to evaluate security concepts, policy enforcement, governance, enterprise security controls. Vulnerability management and security services.

·         DevSecops.

Project Overview

Project Purpose

·         Migrate security control rule management from Prisma to the C9 application.

·         Use Wiz as the primary security data source.

·         Build a parallel Wiz-based pipeline to replicate existing Prisma data flows.

·         Execute side-by-side validation and testing before retiring Prisma integrations.

Migration Strategy

·         Replicate existing Prisma integrations and data flows on Wiz.

·         Run Prisma and Wiz pipelines in parallel during validation phases.

·         Support testing, reconciliation, policy comparison, and migration activities.

·         Ensure seamless transition with no impact to security control operations.

Key Responsibilities

Application Development

·         Develop and enhance React-based UI components for security control management.

·         Build interfaces for security administrators to:

·         View security control rules.

·         Create and modify policies.

·         Manage list and exception rules.

·         Review rule status and audit information.

·         Improve usability and performance of security control dashboards.

Security Controls & Policy Management

·         Understand and implement security control configurations.

·         Manage rule settings including:

·         Port closure controls.

·         listing policies.

·         Security policy exceptions.

·         Rule lifecycle management.

·         Support policy redesign and redefinition as part of the Wiz migration.

Data & Integration Development

·         Integrate Wiz findings and control data into the C9 application.

·         Develop and consume REST APIs and GraphQL services.

·         Work with JSON-based security data structures.

·         Support graph-based security control relationships and data models.

·         Design, optimize, and maintain MongoDB collections and queries.

Migration & Validation

·         Support Prisma-to-Wiz migration efforts.

·         Validate control parity between existing Prisma and new Wiz integrations.

·         Troubleshoot data discrepancies and integration issues.

·         Participate in DEV, SIT, and UAT testing phases.

·         Assist with rollout and decommissioning of legacy Prisma integrations.

Required Skills & Experience

·         6-10 years of software engineering experience.

·         Strong hands-on experience with React.js development.

·         Experience building enterprise web applications.

·         Strong understanding of security controls and policy management.

·         Experience working with JSON data structures.

·         Hands-on experience with MongoDB.

·         Experience developing and consuming REST APIs.

·         Experience with GraphQL integrations.

·         Understanding of cloud security concepts and CNAPP platforms.

·         Strong debugging and problem-solving skills.

Technical Skills

·         Frontend

·         React.js

·         JavaScript / TypeScript

·         HTML5 / CSS3

·         State management frameworks

·         Backend & Data

·         MongoDB

·         REST APIs

·         GraphQL

·         JSON processing