SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Wiz is seeking a Security Engineer to secure its products and production infrastructure. The role involves leading threat modeling and security reviews across Wiz's cloud and product environments, identifying attack surfaces, and developing scalable mitigation strategies. You'll collaborate with software development and DevOps teams to integrate security into CI/CD pipelines and production systems.
Key responsibilities include building automation, policy-as-code, and security tooling to enable development teams to shift left and embed security into workflows. You'll design and implement secure baselines for cloud resources and Kubernetes-based infrastructure, drive vulnerability management and remediation efforts across the software supply chain, and extend detection and response capabilities by building scalable solutions to identify malicious activity, triage alerts, and investigate incidents.
You'll also build deep functional partnerships with engineering and operations teams to help them deliver secure-by-design solutions and influence the product roadmap using Wiz's own platform to assess, monitor, and harden environments.
Required qualifications include 7+ years of security engineering or security operations experience in cloud environments, hands-on AWS cloud security expertise (or equivalent Azure/GCP with AWS), experience with Kubernetes services (EKS/GKE/AKS) and container security, IAM and cloud identity management at scale, and the ability to lead technical security reviews and threat modeling exercises. You should have practical knowledge of web application security (OWASP Top-10), hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation, Helm, Pulumi), and automation/tooling development skills in Python, Go, Shell, HCL, or Rego.
