Note: The job is a remote job and is open to candidates in USA. Wiz is a cloud and AI security company that helps teams secure applications by connecting code, cloud, and runtime into a shared context. The Security Engineer will secure Wiz’s products, CI/CD infrastructure, and production infrastructure through security reviews, vulnerability management, threat detection, incident response, and collaboration with engineering, DevOps, and Federal teams.
Responsibilities
- Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies
- Build automation, policy-as-code, and security tooling that enables development teams to "shift left" and integrate end-to-end security into their workflows
- Design and implement secure baselines for cloud resources and Kubernetes based infrastructure
- Drive vulnerability management and remediation efforts – prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production
- Extend our detection and response capabilities – building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents
- Collaborate with our Wiz Federal team – extending our DevSecOps and Product Security practices to Wiz's FedRAMP environment and ensure it meets key security requirements
- Build deep functional partnerships with Wiz's engineering and operations teams – helping them deliver secure-by-design solutions
Skills
- 7+ years of experience in security engineering or security operations work in cloud environments
- Experience with AWS cloud security, or equivalent experience in Azure and GCP with some level of AWS experience
- Experience with cloud-native Kubernetes services (such as EKS, GKE, or AKS) and strong container security principles
- Experience securing IAM and cloud identities at scale
- Experience leading technical security reviews of products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls
- Practical understanding of web application security concepts (such as OWASP Top-10 and similar)
- Experience with Infrastructure as Code (IaC) and related tools (such as Terraform, CloudFormation, Helm, or Pulumi)
- Experience with automation and tooling development in Python, Go, Shell, HCL, or Rego
- Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship
- Bachelor's degree in computer science or a related field, and/or equivalent job experience in lieu of a degree
- Experience working with remote, globally distributed teams
- Experience working in organizations that develop software and/or operate managed infrastructure and technology services for their own customers
- Experience with CNAPP, CSPM, or CIEM solutions
Benefits
- Bonus
- Equity
- Benefits
Company Overview