Security Configuration Compliance Analyst
About the job
Kaleidoscope, an Infosys Company, is an equal opportunity employer, and all qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, spouse of protected veteran, or disability.
Security Configuration Compliance Analyst
Position Overview
We are seeking an experienced Security Configuration Compliance Analyst to support enterprise security configuration management, vulnerability scanning, and risk mitigation initiatives.
This role focuses on developing and implementing security configuration policies, validating technical security controls, and collaborating with technology teams to identify and remediate non-compliant systems across enterprise environments.
Key Responsibilities
Develop, test, and implement security configuration compliance policies and technical controls.
Support enterprise secure configuration and compliance initiatives across multiple technology platforms.
Partner with infrastructure, security, and technology teams to validate security baseline controls.
Identify security configuration gaps and coordinate remediation of non-compliant systems.
Perform vulnerability and configuration compliance scanning using tools such as Qualys, Tenable, Tanium, and Symantec.
Ensure accurate security scans, compliance reporting, and risk assessments.
Work across multiple technology products to improve enterprise security compliance.
Collaborate with business and technical stakeholders to implement effective risk mitigation strategies.
Required Qualifications
5+ years of experience in information security, technology risk management, or a related field.
Hands-on experience with security configuration compliance and vulnerability management.
Experience configuring and managing enterprise-level technical security controls.
Experience with security scanning tools such as Qualys, Tenable, Tanium, or Symantec.
Knowledge of Windows, Unix/Linux, or workstation administration.
Familiarity with Python, Bash, PowerShell, or Regex for scripting and automation.
Understanding of security risk management frameworks and financial industry regulatory requirements.
Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.
Preferred Qualifications
Experience supporting security compliance programs within banking or financial services.
Experience with enterprise security configuration baselines, compliance scanning, and remediation.
Experience collaborating with infrastructure and application teams to resolve security findings.
"We are unable to sponsor or take over sponsorship of an employment visa at this time."