Information Security Engineer 4 - Kubernetes & Cloud Security (CNAPP / Wiz)

Information Security Engineer 4 – Kubernetes & Cloud Security (CNAPP / Wiz)

Seeking a senior Cloud Security Engineer with deep Kubernetes expertise to support enterprise cloud workload protection and vulnerability management initiatives. This role focuses on securing containerized workloads across multi-cloud environments while enabling enterprise adoption of a CNAPP platform (Wiz). The engineer will act as a hands-on technical SME responsible for onboarding Kubernetes environments, implementing security controls, and automating security visibility and vulnerability management at scale.

Core Responsibilities

• Deploy, configure, and operate Wiz CNAPP (CWPP focus) across enterprise environments
• Onboard and secure cloud assets including: AWS, Azure, and Google Cloud environments; Kubernetes clusters (AKS, EKS, GKE, OpenShift)
• Implement and manage Wiz Sensor at scale: Installation and lifecycle automation; Health checks and drift detection; Performance and coverage optimization
• Enable container security capabilities: Registry scanning (ACR, GCR, Artifactory); Runtime vulnerability detection; Attack path and exposure analysis
• Integrate Wiz with enterprise tooling: CI/CD pipelines; DevSecOps workflows; Kubernetes deployment pipelines
• Automate security workflows using Python scripting
• Validate vulnerability findings and reduce false positives
• Troubleshoot CNAPP/CSPM issues and escalations
• Collaborate with DevSecOps, platform engineering, and cloud architecture teams
• Support continuous improvement of cloud security posture
• Contribute to engineering documentation and automation libraries

Required Skills

• 5+ years Information Security Engineering experience
• 4+ years Cloud Security or DevSecOps experience
• 2+ years Azure and Google Cloud experience
• Strong Kubernetes security expertise (primary requirement)
• Hands-on experience with container security and Kubernetes workloads
• Experience implementing or administering Wiz CNAPP
• Strong knowledge of Cloud architecture (AWS, Azure, GCP); Kubernetes networking, IAM, and workload security; Container security best practices
• Advanced Python automation experience
• Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI, Azure DevOps)
• Strong troubleshooting, analytical, and incident response skills
• Ability to work in fast-paced enterprise environments
• Strong communication and collaboration skills
• Agile experience (Scrum or Kanban)

Preferred Skills

• Integration of CNAPP platforms with SIEM/SOAR tools
• Vulnerability management or application security background
• Enterprise or regulated environment experience
• Experience with incident/change management processes
• Familiarity with security frameworks (CIS, NIST, CSA)
• Certifications preferred: CISSP, CISM, CISA, CRISC, CCSK, Kubernetes Security Certification (CKS), Cloud certifications (Azure or Google Cloud)

Ideal Candidate

• Kubernetes-first security engineer with deep cloud-native experience
• Strong hands-on practitioner in CNAPP platforms (Wiz preferred)
• Automation-driven (Python + CI/CD pipelines)
• Comfortable operating in large-scale enterprise cloud environments
• Able to bridge DevSecOps, platform engineering, and security teams
• Strong communicator who can operate independently and at scale