Cloud Security Engineer

Core Responsibilities:

• Improve cloud security posture through practical, scalable policy engineering.

• Increase finding quality by reducing false positives and improving detection accuracy.

• Deliver reusable Terraform modules and secure-by-default infrastructure patterns.

• Enable engineering teams to remediate risk efficiently through automation and clear guidance.

• Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring.

• Build scalable security capabilities across AWS, Azure, and GCP.

• Strengthen the organization’s ability to identify, understand, and remediate cloud security risk.

Key Requirements:

• US Citizenship is Required.

• At least five years of hands-on experience in cloud security engineering.

• Wiz or equivalent CNAPP experience, including production administration, custom rules, policies, and integrations. Experience with Prisma Cloud, Orca, Microsoft Defender for Cloud, or Lacework is acceptable.

• Proficiency in Python, including scripting, automation, and API integrations (e.g., Wiz GraphQL API, boto3).

• Deep AWS experience plus strong experience with either Azure or GCP, with working knowledge of all three platforms.

• Experience developing reusable, secure-by-default Terraform/HCL modules.

• Experience with Policy as Code, including OPA/Rego or equivalent frameworks (Wiz custom rules use Rego).

• Ability to assess exploitability, blast radius, prioritize risk, and tune false positives.

Preferred Qualifications:

• Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails.

• Experience with Kubernetes manifests and container security.

• Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins.

• Experience supporting audits and continuous monitoring (ConMon).

• Experience mentoring engineers and leading technical discussions.

• Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP.