Important Application Submission Information In order to ensure your application is successfully received before the job posting expires, please submit your application by 11:59 PM on Friday, November 6, 2026 More than a career - a chance to make a difference in people's lives. Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits. Position Summary The Cloud Security Specialist will help secure, monitor, and improve cloud-hosted environments across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. This role will design and implement cloud security measures, manage security tooling, identify and prioritize risk, and partner with engineering and cybersecurity teams to remediate vulnerabilities, misconfigurations, excessive permissions, and other security issues. The specialist will support the implementation, configuration, operationalization, and ongoing optimization of the Wiz Cloud-Native Application Protection Platform. The role will use Wiz to analyze cloud risks, including vulnerabilities, misconfigurations, identity risks, attack paths, and toxic combinations, while helping accelerate remediation across the cloud estate. Key Responsibilities Cloud Security Architecture and Engineering Consult on and implement secure, scalable, and resilient cloud architectures across AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure. Evaluate cloud security controls involving network security, firewalls, encryption, identity, access, workloads, data, and cloud configurations. Provide security guidance for cloud deployments and help teams align solutions with established cloud security requirements and architectural standards. Partner with cloud engineering, application, infrastructure, and cybersecurity teams to integrate security throughout the cloud lifecycle. Wiz CNAPP Operations Configure, maintain, and optimize Wiz policies, rules, integrations, and alert settings. Monitor and prioritize Wiz findings involving vulnerabilities, misconfigurations, identity risks, exposed resources, attack paths, and toxic combinations. Improve policy tuning and risk prioritization to reduce noise and focus remediation efforts on material cloud risks. Support the implementation and continued operationalization of Wiz across the organization’s multi-cloud environment. Assist technical teams with interpreting Wiz findings and identifying appropriate remediation actions. Vulnerability and Risk Management Conduct security assessments and reviews of cloud configurations, workloads, access controls, and deployed services. Identify and prioritize vulnerabilities, insecure configurations, excessive permissions, and deviations from security requirements. Work with responsible engineering and application teams to track and accelerate remediation. Support risk-based prioritization by considering technical severity, exposure, identity relationships, business context, and potential attack paths. Identity and Access Management Evaluate cloud identities, roles, permissions, and access relationships. Support the implementation and maintenance of least-privilege access across cloud environments. Identify excessive, unused, or high-risk cloud permissions and work with service owners to reduce unnecessary access. Assist with reviewing identity-related Wiz findings and cloud entitlement risks. Threat Detection and Incident Response Monitor cloud environments for suspicious activity, unauthorized access, vulnerabilities, and security anomalies. Investigate potential attacks and cloud security events using Wiz and other available security technologies. Support cloud threat hunting, incident investigation, containment, and remediation. Assist with developing and improving response procedures and playbooks for cloud workloads. Apply knowledge of the MITRE ATT&CK framework when investigating threats and developing detection or response approaches. DevSecOps and Automation Review cloud deployments delivered through infrastructure as code and CI/CD pipelines. Collaborate with engineering teams to integrate cloud security controls into repositories, deployment pipelines, and orchestration processes. Develop queries, scripts, automated checks, and detection mechanisms to improve cloud risk identification and remediation. Use technologies such as CNAPP query languages, JSON, and automation scripts to support security operations. Governance, Compliance, and Reporting Help cloud environments align with internal security policies and applicable security frameworks. Support configuration reviews against NIST guidance, CIS Benchmarks, and cloud-native security practices. Develop metrics and reporting that communicate cloud security risks, remediation progress, recurring issues, and operational trends. Provide clear and actionable information to technical teams and cybersecurity stakeholders. Basic/Required Qualifications High School/GED Minimum 9 years related work experience Desired Qualifications Demonstrated experience securing or operating cloud environments in one or more major cloud platforms, including AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure. Experience with cloud security architecture, vulnerability management, security configuration, identity and access management, or security operations. Working knowledge of cloud-native services, workloads, identities, networking, and security controls. Experience analyzing vulnerabilities, misconfigurations, permissions, or other cloud security findings. Ability to communicate security risks and remediation requirements to engineering, application, infrastructure, and cybersecurity teams. Experience working collaboratively across technical and business teams. Preferred Qualifications Hands-on experience with Wiz or another Cloud-Native Application Protection Platform. Experience implementing, configuring, tuning, or operating CNAPP capabilities. Familiarity with infrastructure as code, CI/CD pipelines, source-code repositories, and orchestration technologies. Knowledge of NIST guidance, CIS Benchmarks, MITRE ATT&CK, and cloud-native security practices. Experience with scripting, automation, JSON, security queries, or metrics development. Experience conducting cloud threat hunting or supporting incident response for cloud workloads. Experience securing multi-cloud environments Working Conditions Hybrid Mobility Classification – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees must live within a reasonable commute to their designated Duke Energy facility, not greater than 50 miles one way. Employees are expected to report to their assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular workweek. Office Environment Specific Requirements HS/GED: 9 yrs work experience {required}Associates: 7 yrs work experience {preferred}Bachelors: 5 yrs work experience {preferred} Travel Requirements 5-15% Relocation Assistance Provided (as applicable) No Represented/Union Position No Visa Sponsored Position No. This is not a Visa Sponsored Position. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future. Please note that in order to be considered for this position, you must possess all of the basic/required qualifications. Privacy Do Not Sell My Personal Information (CA) Terms of Use Accessibility Current Duke Energy Employees Current employees should utilize the internal career page to apply for available job postings Job Alerts Learn how to set up job alerts here. Future Interest Stay connected with Duke Energy by joining our Talent Community. Share your information and take the first step towards a brighter future with us! My Applications Check on the status of your application on your Candidate Home page. Need Assistance? View a step-by-step application guide for assistance in completing the process. Contact our team for questions on our hiring process. Diversity & Inclusion Read about our commitment to supporting a diverse and inclusive workforce. About Duke Energy Terms of Use Brighter opportunities. Brighter futures. Duke Energy values ideas that come from a diverse and inclusive workforce, and we’re dedicated to providing a work environment where all people are valued, respected and able to reach their full potential. Duke Energy is an equal opportunity employer and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, childbirth or related medical conditions, including but not limited to lactation, religion, national origin, ancestry, ethnicity, citizenship, sexual orientation, gender identity, gender expression, age, marital status, physical or mental disability, genetic information, medical condition, military status, or protected veteran status. Duke Energy complies with all applicable state, federal and local laws, regulations and ordinances prohibiting discrimination. Privacy California Consumer Privacy Statement Duke Energy Notice to Employees: Government Contractor Whistleblower Protections Do Not Sell or Share My Personal Information (CA) Terms of Use Accessibility

Senior Cybersecurity Systems Engineering Analyst.

more at Dukeenergy.

System Operations Technical Trainer or Senior System Operations Technical Trainer (Florida)

Senior Stakeholder Engagement Manager

Director - PGO Safety, Human Performance and Corrective Action Program

similar roles.

Senior Database Administrator

Technical Business Analyst

Database Administrator (Fixed-term contract)

Back End Data Infrastructure Engineer

Investment Analyst | Rebels

Safety Advisor