Security Engineer – Product

This is a fully remote position, open to applicants in Germany.

📋 Description

• Conduct security assessments, manage vulnerabilities, and oversee detection and response operations within cloud-native settings.

• Collaborate with software development and DevOps teams to enhance the security of Wiz’s products, CI/CD infrastructure, and production systems.

• Utilize Wiz-for-Wiz to evaluate, monitor, and strengthen environments while shaping the product roadmap.

• Lead threat modeling activities and security assessments for Wiz’s products and cloud infrastructure.

• Identify potential attack surfaces and devise scalable mitigation strategies.

• Develop automation, policy-as-code, and security tools to embed comprehensive security into development processes.

• Design and implement secure baselines for cloud resources and Kubernetes-based frameworks.

• Drive efforts in vulnerability management and remediation, prioritizing issues, executing mitigations, and creating preventative controls throughout software supply chains.

• Enhance detection and response capabilities to spot malicious activities, triage alerts, investigate incidents, and resolve them.

• Collaborate with engineering and operations teams to provide secure-by-design solutions.

⛳️ Requirements

• Over 7 years of experience in security engineering or security operations within cloud environments.

• Proficiency in AWS cloud security, or equivalent experience with Azure and GCP, complemented by some AWS exposure.

• Familiarity with cloud-native Kubernetes services (EKS/GKE/AKS) and principles of container security.

• Experience securing IAM and managing cloud identities on a large scale.

• Proven track record in leading technical security evaluations of products and architectures, conducting threat modeling sessions, and converting findings into actionable security measures.

• Solid understanding of web application security principles, such as the OWASP Top-10.

• Practical experience with Infrastructure as Code (IaC) and related tools (Terraform, CloudFormation, Helm, Pulumi).

• Hands-on experience in automation and tool development using languages such as Python, Go, Shell, HCL, or Rego.

• A Bachelor's degree in computer science or a related discipline, or equivalent professional experience in lieu of a degree (preferred).

• Experience collaborating with remote, globally distributed teams (preferred).

• Background in organizations that develop software and/or manage infrastructure and technology services for their customers (preferred).

• Familiarity with CNAPP, CSPM, or CIEM solutions (preferred).

• Applicants must possess the legal right to work in the country where the position is located without requiring visa sponsorship.

🏝️ Benefits

• Equal opportunity employer.

• Wiz processes applicants’ personal data in accordance with its Privacy Policy.