Senior Cloud Security & Compliance Engineer

Responsibilities

• Administer the Wiz platform and develop custom security policies and rules.
• Automate FedRAMP and NIST SP 800-53 controls across AWS, Azure, and GCP.
• Improve cloud security posture through scalable policy engineering and secure-by-default infrastructure patterns.
• Reduce false positives, improve detection accuracy, and prioritize findings based on exploitability and blast radius.
• Develop reusable Terraform modules and enable engineering teams to remediate risk through automation and guidance.
• Support regulated cloud environments through technical controls, continuous monitoring, and security integrations.
• Build scalable capabilities for identifying, understanding, and remediating cloud security risk.
• Mentor engineers and lead technical discussions.

Requirements

• U.S. citizenship is required.
• At least five years of hands-on cloud security engineering experience.
• Production experience administering Wiz or an equivalent CNAPP, including custom rules, policies, and integrations.
• Proficiency in Python for scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools.
• Deep AWS experience, strong experience with either Azure or GCP, and working knowledge of all three platforms.
• Experience developing reusable, secure-by-default Terraform/HCL modules.
• Experience with policy as code using OPA/Rego or an equivalent framework.
• Ability to assess exploitability and blast radius, prioritize risk, and tune false positives.
• Preferred experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments.
• Preferred experience with Kubernetes manifests, container security, CI/CD integrations, audits, continuous monitoring, and technical mentoring.
• Relevant security certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP are preferred.