Security Engineer - Product

The role

You will perform threat modeling and security reviews of Wiz's products and cloud infrastructure. You will build security automation and tooling for development teams, and run vulnerability management and detection and response work.

What you will do

• Lead threat modeling and security reviews across Wiz's products and cloud infrastructure
• Build automation, policy-as-code, and security tooling so development teams can integrate security into their workflows
• Design and implement secure baselines for cloud resources and Kubernetes infrastructure
• Drive vulnerability management and remediation, including software supply chain controls
• Extend detection and response capabilities: triage alerts, investigate and remediate incidents
• Build partnerships with engineering and operations teams to deliver secure-by-design solutions

Required qualifications

• 7+ years of experience in security engineering or security operations in cloud environments
• Experience with AWS cloud security (or Azure and GCP with some AWS experience)
• Experience with cloud native Kubernetes services (EKS/GKE/AKS) and container security
• Experience securing IAM and cloud identities at scale
• Experience leading technical security reviews, threat modeling, and translating findings into security controls
• Practical understanding of web application security (such as OWASP Top-10)
• Hands-on experience with IaC tools (Terraform, CloudFormation, Helm, Pulumi)
• Experience with automation and tooling development in Python, Go, Shell, HCL, or Rego
• Legal right to work in the country where the position is based

Nice to have

• Bachelor's degree in computer science or a related field, or equivalent job experience
• Experience working with remote, globally distributed teams
• Experience in organizations that develop software or operate managed infrastructure for their customers
• Experience with CNAPP, CSPM, or CIEM solutions

Benefits

• Freedom to think creatively and use a full range of skills
• Work alongside a global team of Wizards

Before you apply

• Applicants must have the legal right to work in the country where the position is based
• This role does not offer visa sponsorship
• Applicants' personal data is processed under Wiz's Privacy Policy when they apply

About the company

Wiz is a fast-growing startup that enables teams to secure cloud and AI applications, and is now powered by Google. The company says it is trusted by over 65% of the Fortune 100.