Senior Cloud Security Engineer: Policy-as-Code & Multi-Cloud

OpenKrill; United States; Remote; USD 120.000 - 160.000; Vollzeit

Zusammenfassung

UltraViolet Cyber is seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform, administering Wiz, developing policies as code, and automating FedRAMP and NIST SP 800-53 controls across multi-cloud environments.

You will work with AWS, Azure, and GCP, write Python and Terraform, and help engineering teams remediate risk through automation and clear guidance while supporting regulated environments.

Qualifikationen

• US Citizenship required.
• 5+ years hands-on cloud security engineering.
• Experience with Wiz or equivalent CNAPP and multi-cloud (AWS + Azure or GCP).
• Proficiency in Python and API integrations (Wiz GraphQL, boto3).
• Terraform/HCL modules and policy-as-code (OPA/Rego).
• Finding triage and risk prioritization.

Aufgaben

• Improve cloud security posture through policy engineering.
• Increase finding quality by reducing false positives.
• Deliver Terraform modules and secure-by-default infrastructure patterns.
• Enable engineering teams to remediate risk through automation and guidance.
• Support FedRAMP and regulated cloud environments with effective controls and monitoring.
• Build scalable security capabilities across AWS, Azure, and GCP.
• Strengthen ability to identify, understand, and remediate cloud security risk.

Kenntnisse

Cloud security

Hands-on engineering

Python scripting

Automation

Ausbildung

Bachelor's degree in related field

Tools

Wiz

Prisma Cloud

Orca

Microsoft Defender for Cloud

Lacework

Terraform

GitHub Actions

Kubernetes

Jobbeschreibung

UltraViolet Cyber is seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform, administering Wiz, developing policies as code, and automating FedRAMP and NIST SP 800-53 controls across multi-cloud environments.

You will work with AWS, Azure, and GCP, write Python and Terraform, and help engineering teams remediate risk through automation and clear guidance while supporting regulated environments.