Role description
Job Role: Security Tools Engineer with Cequence API Security , AWS, Splunk
Location: Remote
Primary Focus
Deployment and integration of Cequence API Security Wiz Federal Splunk and Cribl.
AWS GovCloud federal government telecom or highly regulated cloud environments.
Handson deployment platform engineering integration automation and operational handover.
We are seeking a handson Security Tools Engineer responsible for deploying configuring integrating and operationalizing enterprise security platforms across cloud and regulated environments.
The role will focus on implementing Cequence API Security Wiz Federal Splunk and Cribl to enable API threat protection cloud security posture management centralized logging telemetry optimization security analytics and SOCready monitoring capabilities.
The engineer will work closely with cloud security operations network application and DevSecOps teams to ensure the deployed platforms are secure scalable compliant and ready for transition into steadystate operations.
Key Responsibilities
Cequence API Security Deployment.
Deploy and configure Cequence API Security across applicable cloud application and API environments.
Integrate Cequence with API gateways load balancers application endpoints and relevant traffic sources.
Configure API discovery inventory behavior analytics risk scoring and attack detection policies.
Enable runtime API protection bot mitigation abuse detection and OWASP API Security monitoring use cases.
Integrate Cequence s and findings with SplunkSOC workflows for investigation and response.
Develop deployment documentation integration guides runbooks and handover material for operations teams.
Wiz Federal Deployment CNAPP Engineering.
Deploy and configure Wiz Federal in AWS GovCloud or regulated cloud environments.
Onboard AWS accounts and workloads into Wiz Federal using approved connector and access models.
Configure CSPM CWPP vulnerability exposure management compliance policies and cloud risk dashboards
Support attack path analysis cloud entitlement visibility prioritization of toxic combinations and workload risk reporting.
Integrate Wiz Federal findings with Splunk Cribl ticketing and operational workflows where required.
Support FedRAMP NIST 80053 FIPS CMMC and Zero Trustaligned cloud security controls.
Splunk Deployment SIEM Engineering.
Deploy and configure Splunk components including Indexers Search Heads Heavy Forwarders and Universal Forwarders.
Design and implement log ingestion parsing normalization field extraction indexing and retention strategies.
Onboard security telemetry from cloud network endpoint application API security and CNAPP platforms.
Develop dashboards s correlation searches reports and operational views for SOC and security engineering teams.
Troubleshoot ingestion issues parsing failures data gaps performance bottlenecks and platform health concerns.
Support Splunk integration with Cribl for routing filtering enrichment and ingestion optimization.
Cribl Deployment Telemetry Pipeline Engineering.
Deploy and configure Cribl Stream infrastructure to support secure and scalable telemetry routing.
Build pipelines for filtering enrichment transformation redaction sampling and destinationbased routing.
Integrate Cribl with Splunk cloudnative logging services security platforms and observability destinations.
Optimize data ingestion volumes improve log quality and reduce unnecessary SIEM storage and processing costs.
Configure secure source and destination connectivity certificates access controls and pipeline monitoring.
Create reusable data onboarding patterns and documentation for future tool and log source integrations.
Platform Integration Automation Handover.
Integrate Cequence Wiz Federal Splunk and Cribl into a unified security monitoring and response ecosystem.
Use APIs scripts and InfrastructureasCode practices to standardize repeatable deployments where applicable.
Collaborate with SOC teams to align s dashboards data models and investigation workflows.
Prepare deployment plans configuration workbooks architecture diagrams operational runbooks and knowledge transfer material.
Support testing validation troubleshooting golive readiness and transition to steadystate support teams.
Required Skills
Security Platforms
Cequence API Security
Wiz Federal Wiz CNAPP
Splunk Enterprise Splunk Cloud
Cribl Stream
Cloud Security
AWS GovCloud
AWS CloudTrail Security Hub GuardDuty Security Lake
IAM federation access governance
Zero Trust and cloud security architecture
Engineering Automation
Terraform or CloudFormation
Python PowerShell Bash
REST APIs and platform integrations
CICD and deployment automation
Log parsing normalization route
