Security Engineer - Product

Overview

Security Engineer (Product & Production Infrastructure) responsible for securing Wiz’s products and cloud/CI/CD infrastructure with security reviews, vulnerability management, and detection & response in cloud-native environments.

What you'll do

• Lead threat modeling and security reviews across Wiz products and cloud infrastructure.
• Build automation, policy-as-code, and security tooling to shift security left.
• Design and implement secure baselines for cloud resources and Kubernetes-based infrastructure.
• Drive vulnerability management, remediation, and preventative controls across the software supply chain.
• Extend detection and response capabilities to identify malicious activity, triage alerts, and remediate incidents.
• Collaborate with engineering and operations teams on secure-by-design solutions.

What you'll need

• 7+ years of experience in security engineering or security operations in cloud environments.
• Experience with AWS cloud security (or equivalent Azure/GCP experience with some AWS).
• Experience securing Kubernetes services and applying container security principles.
• Experience securing IAM and cloud identities at scale.
• Experience leading technical security reviews and threat modeling, translating findings into controls.
• Practical understanding of web application security concepts (e.g., OWASP Top-10).
• Hands-on experience with IaC tools (Terraform, CloudFormation, Helm, Pulumi).