Senior Cloud Security, Compliance Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as the primary technical resource for administering the Wiz platform.

• Create customized policies in code format.

• Automate the implementation of FedRAMP and NIST SP 800-53 controls across various cloud environments.

• Enhance the cloud security posture through effective and scalable policy engineering.

• Improve the quality of findings by minimizing false positives and enhancing detection accuracy.

• Provide reusable Terraform modules and infrastructure patterns that are secure by default.

• Assist engineering teams in efficiently addressing risks through automation and clear guidance.

• Facilitate support for FedRAMP and other regulated cloud environments by implementing effective technical controls and continuous monitoring.

• Develop scalable security capabilities across AWS, Azure, and GCP.

• Reinforce the organization’s capacity to identify, comprehend, and mitigate cloud security risks.

• Utilize Python and Terraform on a daily basis.

⛳️ Requirements

• U.S. Citizenship is mandatory.

• Minimum of five years of hands-on experience in cloud security engineering.

• Experience in production administration, custom rules, or Cloud Configuration Rules, as well as policies and integrations with Wiz or similar CNAPP platforms.

• Expertise in Python scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or comparable tools.

• Extensive experience with AWS along with solid knowledge of either Azure or GCP, and a working understanding of all three platforms.

• Proven experience in developing reusable, secure-by-default Terraform/HCL modules.

• Familiarity with OPA/Rego or an equivalent policy-as-code framework.

• Ability to evaluate exploitability and blast radius, prioritize risks, and fine-tune false positives.

• Preferred experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails.

• Preferred experience with Kubernetes manifests and container security.

• Preferred experience in integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins.

• Preferred experience in supporting audits and continuous monitoring (ConMon).

• Preferred experience in mentoring engineers and leading technical discussions.

• Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP, are preferred.

• Candidates must meet applicable U.S. regulatory requirements for working in FedRAMP environments.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday leave.

• Opportunities for professional development and career advancement.

• Flexible work environment and remote work options.