Security Engineer - Product

Stack

Responsibilities

• ▹Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies
• ▹Build automation, policy-as-code and security tooling that enables development teams to shift left and integrate end-to-end security into their workflows
• ▹Design and implement secure baselines for cloud resources and Kubernetes-based infrastructure
• ▹Drive vulnerability management and remediation, prioritizing issues, implementing mitigations and designing strategic preventative controls in software supply chains from development through production
• ▹Extend detection and response capabilities with scalable solutions to identify malicious activity, triage alerts and investigate and remediate incidents
• ▹Build deep partnerships with engineering and operations teams to deliver secure-by-design solutions
• ▹Influence the product roadmap by using Wiz-for-Wiz to assess and monitor the environment

Requirements

• ▹7+ years of experience in security engineering or security operations in cloud environments
• ▹Experience with AWS cloud security (or equivalent experience in Azure and GCP with some AWS experience)
• ▹Experience with cloud-native Kubernetes services (EKS/GKE/AKS) and container security principles
• ▹Experience securing IAM and cloud identities at scale
• ▹Experience leading technical security reviews of products and architectures, conducting threat modeling and translating findings into actionable security controls
• ▹Practical understanding of web application security concepts such as OWASP Top 10
• ▹Hands-on experience with IaC tools (Terraform, CloudFormation, Helm, Pulumi)
• ▹Automation and tooling development experience in Python, Go, Shell, HCL or Rego
• ▹Legal right to work in the country where the position is based; no visa sponsorship is offered

Nice to have

• ▹Bachelor's degree in computer science or a related field, and/or equivalent job experience
• ▹Experience working with remote, globally distributed teams
• ▹Experience in organizations that develop software or operate managed infrastructure for their own customers
• ▹Experience with CNAPP, CSPM or CIEM solutions

Soft skills

About the company

Wiz secures cloud and AI applications by connecting code, cloud and runtime into a single shared context. Now powered by Google, it counts over 65% of the Fortune 100 among its customers and scans more than 230 billion files daily.