Wiz security engineer

Wiz Cloud Security Engineer Position Summary The Wiz Cloud Security Engineer is responsible for leading the migration and operationalization of Wiz of gaintech enterprise Cloud-Native Application Protection Platform (CNAPP), replacing existing Prisma Cloud capabilities. This is a hands-on engineering role focused on cloud security posture management, policy-as-code, automation, platform integrations, and cloud risk reduction across Azure, GCP, and multi-cloud environments. The role sits at the intersection of cloud security engineering, automation, infrastructure as code, and enterprise governance. The engineer will design, implement, tune, and maintain security controls within Wiz while developing scalable processes for identifying, prioritizing, and remediating cloud security risks. Key Responsibilities Wiz Platform Engineering & Operationalization Lead and support the migration of cloud security capabilities from Prisma Cloud to Wiz. Configure, tune, and operationalize Wiz across enterprise cloud environments. Develop and maintain Wiz security policies, alerting logic, compliance controls, and risk prioritization frameworks. Reduce false positives and improve signal-to-noise ratios through policy tuning and optimization. Manage Wiz CSPM, CWPP, CIEM, container security, attack path analysis, and cloud exposure management capabilities. Policy Migration & Baseline as Code Translate existing Prisma Cloud security policies into equivalent Wiz controls and security guardrails. Design and implement security policies using Infrastructure as Code (IaC) principles. Manage Wiz policies, cloud guardrails, and security baselines through Terraform rather than manual platform configuration. Store policy definitions in source control repositories and deploy changes through CI/CD pipelines. Maintain version control, peer review, auditability, and change management for all cloud security configurations. Develop reusable Terraform modules for security policy deployment across cloud environments. Cloud Security Engineering Identify, investigate, and remediate cloud misconfigurations across Azure and GCP environments. Evaluate and enforce security controls related to identity, networking, storage, encryption, logging, and access management. Support cloud governance initiatives aligned with organizational security standards. Implement preventative and detective cloud security controls. Container & Kubernetes Security Manage container security findings generated through Wiz. Evaluate Kubernetes security posture across AKS, GKE, and containerized workloads. Identify vulnerabilities, exposed secrets, privileged workloads, and runtime risks. Collaborate with engineering teams to improve container security and remediation practices. Security Automation & Integrations Develop Python-based automation workflows to retrieve, enrich, transform, and route Wiz findings. Build integrations between Wiz and enterprise platforms including Splunk and ServiceNow. Automate ticket creation, enrichment workflows, remediation tracking, and security reporting processes. Support continuous improvement of cloud security operations through automation and orchestration. SIEM & Security Operations Integration Integrate Wiz findings into Splunk for enterprise visibility and monitoring. Develop and optimize SPL queries, dashboards, reports, and alerting workflows. Normalize and enrich cloud security data for improved analysis and reporting. Support operational teams with actionable cloud security intelligence. Reporting & Analytics Develop dashboards and executive reporting using Power BI, Tableau, or similar platforms. Create cloud security posture metrics, trend analysis, remediation tracking, and risk reporting. Measure program effectiveness through KPIs such as finding reduction, MTTR, exposure reduction, and compliance adherence. Governance & Compliance Align cloud security controls with industry standards including CIS, NIST, ISO 27001, and internal Wells Fargo security requirements. Support audit requests, compliance reviews, and regulatory examinations. Maintain documentation, policy traceability, and evidence required for governance and audit purposes. Collaborate with security architects, cloud engineering teams, platform owners, and governance stakeholders. Required Qualifications 5+ years of cloud security engineering experience. The ideal candidate should have teaching sills to mentor Junior engineers. Hands-on experience with Wiz, Prisma Cloud, or similar CNAPP platforms. Strong experience with Azure and/or GCP cloud environments. Experience managing CSPM, CWPP, CIEM, and cloud security posture initiatives. Strong Python scripting and automation experience. Experience with Infrastructure as Code (Terraform preferred). Experience integrating security platforms with Splunk, ServiceNow, or similar enterprise tools. Knowledge of Kubernetes and container security. Strong understanding of cloud security frameworks including CIS, NIST, and ISO. Preferred Qualifications Experience leading Prisma-to-Wiz migrations. Experience implementing Policy-as-Code and Baseline-as-Code programs. Experience managing Terraform-based security policy deployments. Experience building cloud security governance programs in regulated financial environments. Experience with CI/CD pipelines and automated security control deployment. Experience supporting audit, compliance, and regulatory requirements. Core Technologies Wiz Prisma Cloud Terraform Python Azure GCP Splunk ServiceNow Kubernetes GitHub / GitLab Power BI Tableau CI/CD Pipelines CSPM CWPP CIEM Cloud Governance & Compliance