SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Wiz is seeking a Security Engineer for Product & Production Infrastructure to secure its cloud-native platform and infrastructure. The role involves performing security reviews, vulnerability management, and detection/response operations across Wiz's products, CI/CD pipelines, and production environments.
Key responsibilities include leading threat modeling and security reviews across products and cloud infrastructure to identify attack surfaces and develop scalable mitigations; building automation, policy-as-code, and security tooling to enable development teams to shift left and integrate security into workflows; designing and implementing secure baselines for cloud resources and Kubernetes infrastructure; driving vulnerability management and remediation efforts with strategic preventative controls across the software supply chain; extending detection and response capabilities to identify malicious activity and investigate incidents; and building functional partnerships with engineering and operations teams to deliver secure-by-design solutions.
Required qualifications: 7+ years of security engineering or security operations experience in cloud environments; AWS cloud security expertise (or equivalent Azure/GCP with some AWS experience); experience with cloud-native Kubernetes services (EKS/GKE/AKS) and container security; experience securing IAM and cloud identities at scale; proven ability to lead technical security reviews, conduct threat modeling, and translate findings into actionable controls; practical understanding of web application security (OWASP Top-10); hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation, Helm, Pulumi); and automation/tooling development experience in Python, Go, Shell, HCL, or Rego.
Wiz is one of the fastest-growing startups, recently acquired by Google, and trusted by over 65% of the Fortune 100 to scan and secure over 230 billion files daily. The company is redefining security for the AI era by connecting code, cloud, and runtime into a single shared context.
