security engineer in cloud infrastructure

Enfint; Berlin; Vor Ort; EUR 110.000 - 160.000; Vollzeit

Zusammenfassung

Wiz ищет опытного инженера по безопасности в Берлине для обеспечения безопасной разработки и эксплуатации облачных сервисов. Ваша работа охватывает моделирование угроз, проведение security reviews и внедрение мер защиты на уровне архитектуры и инфраструктуры.

Вы будете работать с IaC инструментами (Terraform, CloudFormation, Helm, Pulumi), управлять безопасностью Kubernetes и облачных идентификаторов, а также развивать автоматизированные решения для обнаружения угроз и реагирования.

Qualifikationen

• 7+ лет опыта в области security engineering или operations в облачных средах.
• Опыт работы с безопасностью облаков AWS, Azure или GCP.
• Опыт руководства техническими обзорами безопасности и моделированием угроз.
• Понимание OWASP Top 10 и связанных стандартов безопасности веб-приложений.
• Практическое владение IaC и инструментами Terraform, CloudFormation, Helm, Pulumi.

Aufgaben

• Ведение threat modeling и security reviews продуктов и облачной инфраструктуры.
• Разработка автоматизации, policy-as-code и инструментов безопасности.
• Проектирование безопасных базовых конфигураций для ресурсов облака и Kubernetes.
• Управление уязвимостями и разработка превентивных контролей в цепочках поставок ПО.
• Расширение возможностей обнаружения и реагирования на инциденты в масштабируемых решениях.

Kenntnisse

Threat modeling

Security reviews

Web app security concepts

Security automation

AWS/Azure/GCP expertise

Ausbildung

Bachelor’s degree in CS or related field

Tools

Terraform

CloudFormation

Helm

Pulumi

Kubernetes security

Jobbeschreibung

Описание:

Wiz secures cloud and AI applications by connecting code, cloud, and runtime into a shared context. Its AI-powered platform uses Google’s Threat Intelligence and Security Operations to help organizations detect, prevent, and respond to threats across environments.

Задачи:

• Lead threat modeling and security reviews across products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies;
• Build automation, policy-as-code, and security tooling that enables development teams to shift left and integrate end-to-end security into workflows;
• Design and implement secure baselines for cloud resources and Kubernetes-based infrastructure;
• Drive vulnerability management and remediation efforts by prioritizing issues, implementing mitigations, and designing preventative controls across software supply chains from development through production;
• Extend detection and response capabilities by building scalable solutions to identify malicious activity, triage alerts, investigate incidents, and remediate them;
• Build functional partnerships with engineering and operations teams to help deliver secure-by-design solutions;
• Influence the product roadmap by using Wiz-for-Wiz to assess, monitor, and harden environments.

Требования:

• 7+ Years of experience in security engineering or security operations in cloud environments;
• Experience with AWS cloud security or equivalent experience in Azure and GCP with some AWS experience;
• Experience with cloud-native Kubernetes services, including EKS, GKE, or AKS, and container security principles;
• Experience securing IAM and cloud identities at scale;
• Experience leading technical security reviews of products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls;
• Practical understanding of web application security concepts, including OWASP Top 10 and similar standards;
• Hands-on experience with IaC and related tools, including Terraform, CloudFormation, Helm, or Pulumi;
• Experience developing automation and tooling with one or more of Python, Go, Shell, HCL, or Rego;
• Applicants must have the legal right to work in Germany without visa sponsorship;
• Nice to have: Bachelor’s degree in computer science or a related field or equivalent job experience, experience with remote globally distributed teams, experience in organizations that develop software or operate managed infrastructure and technology services for their own customers, experience with CNAPP, CSPM, or CIEM solutions.

Условия:

The role does not offer visa sponsorship.