Security Engineer – Product

This is a fully remote position, open to applicants in France.

📋 Description

• Conduct security assessments, manage vulnerabilities, and execute detection and response operations within cloud-native environments.

• Collaborate with software development and DevOps teams to ensure the security of Wiz’s products, CI/CD infrastructure, and production systems.

• Shape the product roadmap by leveraging Wiz-for-Wiz to evaluate, monitor, and enhance security in environments.

• Lead threat modeling initiatives and security assessments across Wiz's products and cloud infrastructure.

• Identify potential attack vectors and create scalable strategies for mitigation.

• Develop automation, policy-as-code, and security tools to seamlessly integrate security throughout development workflows.

• Design and implement secure baselines for cloud resources and Kubernetes environments.

• Oversee vulnerability management and remediation processes, including the prioritization of issues, implementation of mitigations, and design of preventive controls for software supply chains.

• Enhance detection and response capabilities to recognize malicious activities, manage alerts, investigate incidents, and execute remediation efforts.

• Foster partnerships with engineering and operations teams to provide solutions that are secure by design.

⛳️ Requirements

• Over 7 years of experience in security engineering or security operations within cloud environments.

• Proficiency in AWS cloud security, or equivalent experience with Azure and GCP, supplemented by some familiarity with AWS.

• Experience with cloud-native Kubernetes services (EKS/GKE/AKS) and principles of container security.

• Expertise in securing IAM and cloud identities at scale.

• Proven track record of leading technical security reviews of products and architectures, conducting threat modeling sessions, and translating findings into actionable security measures.

• Solid understanding of web application security concepts, including OWASP Top-10 and similar frameworks.

• Hands-on experience with Infrastructure as Code (IaC) and associated tools such as Terraform, CloudFormation, Helm, and Pulumi.

• Experience in automation and tool development using one or more programming languages including Python, Go, Shell, HCL, or Rego.

• Bachelor’s degree in computer science or a related field, or equivalent work experience in lieu of a degree (preferred).

• Experience collaborating with remote, globally distributed teams (preferred).

• Background in organizations that develop software and/or provide managed infrastructure and technology services for clients (preferred).

• Familiarity with CNAPP, CSPM, or CIEM solutions (preferred).

• Legal authorization to work in the country where the position is located without requiring visa sponsorship.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and flexible work arrangements.

• Opportunities for professional development and career advancement.