Security Engineer – Product

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Execute security assessments and manage vulnerabilities within cloud-native environments.

• Perform threat modeling and security evaluations across Wiz's products and cloud infrastructure.

• Recognize attack surfaces and formulate scalable mitigation strategies.

• Create automation, policy-as-code, and security tools to incorporate end-to-end security into development workflows.

• Design and establish secure baselines for cloud resources and Kubernetes-based infrastructures.

• Oversee vulnerability management and remediation efforts throughout software supply chains from development to production.

• Develop scalable detection and response mechanisms to identify malicious activities, triage alerts, investigate incidents, and address them.

• Collaborate with software development, DevOps, engineering, and operations teams to deliver solutions that are secure by design.

• Evaluate, monitor, and strengthen Wiz environments using Wiz-for-Wiz.

• Shape the product roadmap through security assessments and operational insights.

⛳️ Requirements

• Over 7 years of experience in security engineering or operations within cloud environments.

• Proficient in AWS cloud security, or possess equivalent experience in Azure and GCP, with some familiarity with AWS.

• Familiarity with cloud-native Kubernetes services (EKS/GKE/AKS) and principles of container security.

• Experience in securing IAM and cloud identities on a large scale.

• Proven track record of leading technical security reviews of products and architectures.

• Experience in conducting threat modeling exercises and translating findings into actionable security controls.

• Solid understanding of web application security concepts, including OWASP Top-10 and similar frameworks.

• Practical experience with Infrastructure as Code (IaC) and associated tools: Terraform, CloudFormation, Helm, Pulumi.

• Proficient in automation and tool development in one or more languages: Python, Go, Shell, HCL, Rego.

• Bachelor's degree in computer science or a related field, or equivalent job experience in lieu of a degree.

• Candidates must have the legal authorization to work in the country where the position is located without requiring visa sponsorship.

🏝️ Benefits

• Opportunity to engage with a Google-powered, AI-driven security platform.

• Freedom to think creatively, aspire to big ideas, and utilize a broad skill set.

• Chance to influence the product roadmap using Wiz-for-Wiz.

• Collaborate with teams distributed across the globe.

• Commitment to equal opportunity employment.