Security Engineer – Cloud & AI Security Platform

Wiz, Inc.; United States; Remote; USD 150,000 - 220,000; Full time

Job summary

Wiz, Inc. is seeking a Security Engineer for Product & Production Infrastructure to lead threat modeling, vulnerability management, and secure-by-design practices across Wiz’s cloud and Kubernetes environments.

You’ll collaborate with software development and DevOps teams to integrate security into CI/CD pipelines, design secure baselines, and extend detection and response capabilities while influencing the product roadmap and enabling secure software delivery.

Qualifications

• 7+ years in security engineering or security operations in cloud.
• Experience with AWS security (or Azure/GCP with AWS exposure).
• Experience with cloud-native Kubernetes services (EKS/GKE/AKS) and container security.
• Experience securing IAM at scale.
• Experience leading security reviews and threat modeling.
• Familiarity with web app security concepts (OWASP Top-10).
• Hands-on IaC tooling (Terraform, CloudFormation, Helm, Pulumi).
• Programming with Python/Go/Shell.

Responsibilities

• Lead threat modeling and security reviews across Wiz’s products and cloud infrastructure.
• Build automation and policy-as-code to shift security left.
• Design secure baselines for cloud resources and Kubernetes infrastructure.
• Drive vulnerability management and remediation across development to production.
• Extend detection and response capabilities and triage alerts.
• Partner with engineering and operations to deliver secure-by-design solutions.

Skills

Cloud security

Kubernetes security

IAM security

Threat modeling

Automation tooling

Python

Go

IaC

Education

Bachelor's degree

Tools

Terraform

CloudFormation

Helm

Pulumi

Job description

Wiz, Inc. is seeking a Security Engineer for Product & Production Infrastructure to lead threat modeling, vulnerability management, and secure-by-design practices across Wiz’s cloud and Kubernetes environments.

You’ll collaborate with software development and DevOps teams to integrate security into CI/CD pipelines, design secure baselines, and extend detection and response capabilities while influencing the product roadmap and enabling secure software delivery.