Senior Cloud Security & Compliance Engineer

We are seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform. The team member will administer Wiz, develop custom policies as code, and automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments. Experience with FedRAMP or NIST SP 800-53 is preferred but not required; however, candidates must satisfy applicable U.S. regulatory requirements for work in FedRAMP environments. Python and Terraform will be used daily.

Responsibilities

Improve cloud security posture through practical, scalable policy engineering; Increase finding quality by reducing false positives and improving detection accuracy; Deliver reusable Terraform modules and secure-by-default infrastructure patterns; Enable engineering teams to remediate risk efficiently through automation and clear guidance; Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring; Build scalable security capabilities across AWS, Azure, and GCP; Strengthen the organization's ability to identify, understand, and remediate cloud security risk

Requirements

US Citizenship is Required; Cloud security engineering: at least five years of hands-on experience; Wiz or equivalent CNAPP experience: production administration, custom rules or Cloud Configuration Rules, policies, and integrations; Experience with Prisma Cloud, Orca, Microsoft Defender for Cloud, or Lacework is acceptable when paired with a demonstrated ability to ramp quickly on Wiz; Python: proficiency in scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools; Multi-cloud expertise: deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms; Terraform/HCL: experience developing reusable, secure-by-default modules; Policy as code: experience with OPA/Rego or an equivalent framework; Wiz custom rules use Rego; Finding triage: ability to assess exploitability and blast radius, prioritize risk, and tune false positives

Nice to have

Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails; Experience with Kubernetes manifests and container security; Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins; Experience supporting audits and continuous monitoring (ConMon); Experience mentoring engineers and leading technical discussions; Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP