Remote Wiz Cloud Security Engineer | Multi-Cloud Security

StopAHack.com is seeking a Cloud Security Engineer to administer Wiz and strengthen security across multi-cloud environments. The role focuses on investigating and prioritizing cloud risks, automating security workflows, building secure Terraform modules and policy-as-code controls, and coordinating remediation with engineering teams.

Responsibilities:

• Configure and maintain Wiz cloud integrations, policies, and custom Cloud Configuration Rules
• Investigate vulnerabilities, misconfigurations, identity risks, and sensitive-data findings
• Use the Wiz Security Graph and attack paths to assess exploitability, determine blast radius, and prioritize remediation
• Develop Python automation and API integrations for security workflows, reporting, and remediation
• Build reusable, secure-by-default Terraform modules and policy-as-code controls
• Tune findings and policies to reduce false positives
• Coordinate remediation with cloud, infrastructure, and application teams, and validate that fixes address the identified risks
• Maintain clear technical documentation, reporting, and handoffs

Requirements:

• At least five years of hands-on cloud security engineering experience
• Production administration experience with Wiz or an equivalent CNAPP platform, including custom rules, policies, and integrations
• Proficiency in Python scripting, automation, and API integrations, using tools such as the Wiz GraphQL API, boto3, or comparable interfaces
• Deep AWS experience, strong experience with either Azure or GCP, and working knowledge of all three platforms
• Experience developing reusable Terraform/HCL modules with security built in
• Experience implementing policy-as-code using OPA/Rego or an equivalent framework
• Ability to investigate cloud findings, assess exploitability and blast radius, prioritize risk, and drive remediation
• Clear communication, ownership of assigned technical work, and reliable documentation
• Experience with Wiz Code and runtime detection capabilities
• Kubernetes and container security experience
• Experience integrating security checks and policy enforcement into CI/CD pipelines
• Experience connecting cloud security findings with ticketing, alerting, or incident-response platforms
• Experience supporting customer-facing cloud security engagements