SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Wiz is seeking a Security Engineer for Product & Production Infrastructure to secure its cloud-native platform and infrastructure. The role involves performing security reviews, vulnerability management, and detection/response operations across Wiz's products, CI/CD pipelines, and production environments.
Key responsibilities include leading threat modeling and security reviews across products and cloud infrastructure to identify attack surfaces and develop scalable mitigation strategies. You'll build automation, policy-as-code, and security tooling that enables development teams to shift left and integrate security into their workflows. The role requires designing and implementing secure baselines for cloud resources and Kubernetes-based infrastructure, and driving vulnerability management and remediation efforts across the software supply chain from development through production.
You'll extend detection and response capabilities by building scalable solutions to identify malicious activity, triage alerts, and investigate/remediate incidents. Close collaboration with engineering and operations teams is essential to help them deliver secure-by-design solutions.
Minimum qualifications include 7+ years of security engineering or security operations experience in cloud environments, with strong AWS expertise (or equivalent Azure/GCP experience with some AWS knowledge). You need hands-on experience with cloud-native Kubernetes services (EKS/GKE/AKS), container security, IAM and cloud identity management at scale, and technical security reviews including threat modeling. Practical understanding of web application security (OWASP Top-10) and hands-on experience with Infrastructure-as-Code tools (Terraform, CloudFormation, Helm, Pulumi) are required. Automation and tooling development experience in Python, Go, Shell, HCL, or Rego is expected.
