Container Security & Exposure Management Analyst
Role details
Job location
Tech stack
Job description
- Support the cybersecurity team in a technical, hands-on role focused on containerized and cloud-native environments.
- Identify, validate, and assess security exposures across enterprise systems, emphasizing Openshift, Kubernetes, Docker, container runtimes, and orchestration platforms.
- Support day-to-day CTEM operations by validating exposure paths, confirming exploit potential, and understanding vulnerabilities impacting containerized workloads, images, clusters, nodes, and supporting services.
- Translate platform knowledge into practical recommendations to reduce exposure and improve security posture of container environments.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or equivalent experience.
- 2+ years in container platform engineering, DevSecOps, or related security roles.
- Experience supporting, securing, or troubleshooting containerized environments such as Kubernetes, Docker, OpenShift, AKS, EKS, GKE, or similar platforms.
- Ability to assess vulnerabilities in container images, base images, package dependencies, Kubernetes manifests, Helm charts, and cluster configurations.
- Working knowledge of container security controls and hardening practices, including image scanning, least privilege, non-root containers, secrets handling, network policies, RBAC, pod security standards, and runtime monitoring.
- Proficiency in scripting languages (Python, PowerShell, Bash; PERL a plus).
- Knowledge of vulnerability management, attack surface management, cloud security posture, and exposure management concepts.
- Familiarity with OWASP testing methodologies and common vulnerabilities.
- Understanding of security threats and vulnerabilities such as buffer overflows, cross-site scripting, code injection, race conditions, and others.
- Competency with Windows and Linux/Unix operating systems.
- Experience with SIEM platforms for detection validation and log analysis.
- Excellent communication skills for translating technical findings into business risk narratives.
- Ability to think creatively and like an attacker, demonstrating persistence and attention to detail.
- Ability to adapt in a fast-paced environment and drive consensus across stakeholders.
- Strong critical thinking, curiosity, and analytical skills.
- Ability to work independently or within a team, managing multiple priorities and meeting schedules.
- Ability to pass NERC CIP and Insider Threat Protection background checks.
Preferred Experience:
- One or more relevant industry certifications (e.g., CKS, CKAD, CKA, OSCP, CEH, GSEC, CISSP, CISA).
- Occasional travel to local and regional locations in pursuit of job duties.
Benefits & conditions
The hourly pay rate range for this position is $50.00 to $75.00 (dependent on factors including but not limited to client requirements, experience, statutory considerations, and location). Benefits available to full-time employees: medical, dental, vision, disability, life insurance, 401k and commuter benefits.
Synergis is proud to be an Equal Opportunity Employer. We value diversity and do not discriminate on the basis of race, color, ethnicity, national origin, religion, age, gender, gender identity, political affiliation, sexual orientation, marital status, disability, military/veteran status, or any other status protected by applicable law.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the requirements of applicable state and local laws, including but not limited to, the San Francisco Fair Chance Ordinance, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.