Secure Configuration and Attack Surface Management Engineer

Job overview

The Secure Configuration and Attack Surface Management Engineer role is onsite in Charlotte, NC. Salary is $80,000–$100,000 annually. The role supports enterprise security configuration compliance, vulnerability management, and risk mitigation initiatives. The engineer develops and implements security controls, identifies configuration vulnerabilities, and coordinates remediation across enterprise environments. Accurate scanning and compliance reporting help technology teams validate controls and improve security posture.

What you'll do

• Develop, test, and implement security configuration compliance policies and technical controls
• support attack surface management initiatives
• partner with infrastructure, security, and technology teams to validate baseline controls
• identify configuration vulnerabilities and coordinate remediation
• manage vulnerability and compliance scanning using Qualys, Tenable, Tanium, and Symantec
• prepare security scans, compliance reports, and risk assessments
• collaborate with stakeholders on risk mitigation.

What we're looking for

Skills & competencies

security configuration engineer

attack surface management

charlotte nc

infosys

vulnerability management

security compliance

qualys

tenable

tanium

symantec

windows

linux

$80k–$100k

no visa sponsorship

Work arrangement

• Weekend coverage required

Why this role

Requires 8+ years of information security, technology risk, or related experience; security scanning tools and Windows or Unix/Linux administration experience sought; visa sponsorship is not available; timed Security Configuration SME assessment required before interview.

About the employer

INFOSYS NOVA HOLDINGS LLC is hiring for this role. Industry: Custom Computer Programming Services. Sector: 54.