Cloud Security Engineer - Wiz

TEKsystems•Chandler, AZ

1d•$70 - $75•Hybrid

About The Position

This security engineer assists with the migration from Prisma Cloud Enterprise to the Wiz CNAPP (Cloud Native Application Protection Platform) tool, with specific focus on Cloud Workload Protection Platform or the CWPP module of the Wiz product. This area of our team specializes in engineering and support for Public & Private Cloud containers/Kubernetes envs. (TAS/OCP/GKE/AKS) to operate vulnerability and compliance scanning for runtime images and images in container image registry, along with the associated integrations to partner systems for logging, delivery of Findings, etc.

Requirements

1+ year of deep Wiz experience, in either an engineering or support role
Advanced experience with Rego policy automation
Knowledge and understanding of DevSecOps and deployment automation to cloud environments
Expertise and experience with API driven automation of policy creation
Expertise and experience with Infrastructure as Code (IaC) and/or Policy as Code (PaC) concepts/tools
Expertise with automated testing
Intermediate to advanced experience with Kubernetes, preferably AKS/GKE/OCP
Familiarity with various cloud security and related risk frameworks (Cloud Security Alliance (CSA), CIS, NIST, etc.)
Experience with change and incident management practices in large enterprises

Nice To Haves

Security certifications such as Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), or equivalent, CISA, CISM, CISSP, CRISC, CCSK Preferred
Microsoft Azure and/or Google Cloud Certifications

Responsibilities

Leveraging your deep expertise with automation to “semi-automate” Rego Policy as Code development, leveraged to monitor for cloud resource misconfiguration/config. drift.
Engineering and support for the migration of CSPM capabilities from Palo Alto Prisma Cloud Enterprise to Wiz.
Act as the subject matter expert (SME) for Wiz capabilities, roadmap features, and best practices specific to CSPM.
Enable and tune Wiz detection for: Public Cloud mis-configurations Public Cloud config drift Ad-hoc, on demand mis-config. scanning for Developers w/ IDE integration
Ability to efficiently transform security requirements/parameters into Rego policies for Wiz CSPM.
Strong collaboration with direct teammates, vendors and partners, ensuring the success of policy development automation.
Lead technical/engineering requirement gathering discussions and effectively design/develop complex solutions.
Troubleshoot and resolve support escalation cases related to Wiz CSPM.
Contribute to internal code repositories to continuously improve overall code quality for the team.
Provide high quality documentation of the delivered solutions.
Train other team members on utilizing the PaC semi-automation tooling/approach you establish for our policy development practice
Be a motivated self-starter, quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlines.