Senior Security Engineer: Cloud & Production Infra (Equity)

Cacheflow; United States; On-site; USD 207,000 - 283,000; Full time

Job summary

Wiz is seeking a Security Engineer for Product & Production Infrastructure to perform security reviews, vulnerability management, and detection and response in cloud-native environments. You’ll collaborate with software development and DevOps teams to secure Wiz’s products, CI/CD, and production infra.

You’ll influence the product roadmap by using threat modeling and implementing scalable security controls across cloud resources and Kubernetes, while building automation and policy-as-code to

Qualifications

• 7+ years of experience in security engineering or security operations work in cloud environments.
• Experience with AWS cloud security, or equivalent experience in Azure and GCP with some level of AWS experience.
• Experience with cloud-native Kubernetes services (such as EKS, GKE, or AKS) and strong container security principles.
• Experience securing IAM and cloud identities at scale.
• Experience leading technical security reviews of products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls.
• Practical understanding of web application security concepts (such as OWASP Top-10 and similar).
• Experience with Infrastructure as Code (IaC) and related tools (such as Terraform, CloudFormation, Helm, or Pulumi).
• Experience with automation and tooling development in Python, Go, Shell, HCL, or Rego.

Responsibilities

• Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
• Build automation, policy-as-code, and security tooling that enables development teams to "shift left" and integrate end-to-end security into their workflows.
• Design and implement secure baselines for cloud resources and Kubernetes based infrastructure.
• Drive vulnerability management and remediation efforts – prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.
• Extend our detection and response capabilities – building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
• Collaborate with our Wiz Federal team – extending our DevSecOps and Product Security practices to Wiz's FedRAMP environment and ensure it meets key security requirements.
• Build deep functional partnerships with Wiz's engineering and operations teams – helping them deliver secure-by-design solutions.

Skills

Threat modeling

Security reviews

Cloud security

Kubernetes security

IaC tools

Automation tooling

Python/Go

Vulnerability management

Education

Bachelor's degree in CS or related field

Tools

Terraform

CloudFormation

Helm

Pulumi

Kubernetes (EKS/GKE/AKS)

Job description

Wiz is seeking a Security Engineer for Product & Production Infrastructure to perform security reviews, vulnerability management, and detection and response in cloud-native environments. You’ll collaborate with software development and DevOps teams to secure Wiz’s products, CI/CD, and production infra.

You’ll influence the product roadmap by using threat modeling and implementing scalable security controls across cloud resources and Kubernetes, while building automation and policy-as-code to