Senior Cloud Security & Compliance Engineer

UltraViolet Cyber is seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform. The role administers Wiz, develops policies as code, automates regulatory controls across multi-cloud environments, and improves cloud security posture and risk remediation.

Responsibilities:

• Improve cloud security posture through practical, scalable policy engineering
• Increase finding quality by reducing false positives and improving detection accuracy
• Deliver reusable Terraform modules and secure-by-default infrastructure patterns
• Enable engineering teams to remediate risk efficiently through automation and clear guidance
• Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring
• Build scalable security capabilities across AWS, Azure, and GCP
• Strengthen the organization’s ability to identify, understand, and remediate cloud security risk

Requirements:

• US Citizenship is Required
• At least five years of hands-on experience
• Production administration, custom rules or Cloud Configuration Rules, policies, and integrations
• Proficiency in scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools
• Deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms
• Experience developing reusable, secure-by-default modules
• Experience with OPA/Rego or an equivalent framework; Wiz custom rules use Rego
• Ability to assess exploitability and blast radius, prioritize risk, and tune false positives
• Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails
• Experience with Kubernetes manifests and container security
• Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins
• Experience supporting audits and continuous monitoring (ConMon)
• Experience mentoring engineers and leading technical discussions
• Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP