Cloud Security Manager

FairSquare•Atlanta, GA

6d•$139,000 - $258,000•Hybrid

About The Position

FairSquare is seeking an experienced Manager of Cloud Security to serve as an individual contributor (non-people-management) responsible for the security posture of our AWS cloud environment. This role owns the operationalization of our cloud security tooling — with primary emphasis on the Wiz platform — and drives remediation of findings across audits, penetration tests, and vulnerability assessments. This is a hands-on technical leadership role for someone who wants deep ownership of cloud security outcomes without direct reports.

Requirements

5+ years of experience in cloud security, with significant hands-on experience securing AWS environments
Direct, practical experience administering and operationalizing a CNAPP/CSPM platform — Wiz strongly preferred (comparable experience with Prisma Cloud, Orca, Lacework, etc. considered)
Demonstrated experience managing remediation of findings from audits, penetration tests, and/or vulnerability scans, including driving cross-team accountability to closure
Strong working knowledge of core AWS services and security controls (IAM, VPC, KMS, S3, CloudTrail, Security Hub, GuardDuty, Config)
Solid understanding of common vulnerability and misconfiguration classes (excessive permissions, exposed storage/services, insecure network paths, unpatched software, secrets management issues)
Experience working with compliance/audit frameworks (SOC 2, ISO 27001, PCI-DSS, NIST CSF, or similar)
Ability to communicate technical risk clearly to both engineers and non-technical stakeholders
Strong organizational skills to manage multiple concurrent remediation efforts and track them to completion

Nice To Haves

AWS certifications (Security Specialty, Solutions Architect)
Experience with Infrastructure-as-Code security scanning (Terraform, CloudFormation) within Wiz or similar tooling
Familiarity with container/Kubernetes security in AWS (EKS, ECS)
Experience coordinating directly with external penetration testing vendors and auditors
Scripting/automation experience (Python, AWS CLI, Lambda) to streamline remediation workflows or Wiz integrations

Responsibilities

Serve as the primary administrator and subject matter expert for the Wiz security platform, including configuration, policy tuning, integrations, and connector health across our AWS accounts and organization structure
Continuously monitor Wiz findings (CSPM, vulnerability, IAM/entitlement, container, and data security modules) and translate raw findings into prioritized, actionable remediation work
Develop and maintain custom Wiz rules, risk scoring adjustments, and dashboards tailored to FairSquare's AWS environment and risk tolerance
Partner with cloud engineering teams to ensure Wiz coverage extends to new AWS accounts, services, and workloads as the environment grows
Evaluate and recommend enhancements to Wiz configuration to reduce noise, close coverage gaps, and improve signal-to-action time
Own the end-to-end lifecycle of remediating findings surfaced through Wiz, internal/external audits, penetration testing engagements, and vulnerability scanning programs
Triage and prioritize findings based on exploitability, business impact, and compliance relevance
Build corrective action plans (CAPs) with clear ownership, timelines, and validation steps; track them to closure
Work directly with engineering, DevOps, and infrastructure teams to implement remediations — including IAM policy hardening, misconfiguration fixes, patching coordination, and architecture adjustments
Validate remediation effectiveness through re-scanning, evidence collection, and control retesting
Maintain remediation metrics (MTTR, aging findings, recurrence rates) and report trends to the CISO and relevant stakeholders
Assess and improve the security configuration of AWS services (IAM, VPC, S3, EC2, KMS, Lambda, ECS/EKS, RDS, CloudTrail, GuardDuty, Security Hub, Config, etc.)
Support secure architecture reviews for new AWS workloads and cloud-native applications
Identify and help close gaps between AWS-native security tooling and Wiz coverage
Contribute to least-privilege IAM initiatives, network segmentation, and encryption/key management standards
Act as a key technical point of contact for internal/external audits, penetration testing engagements, and vulnerability management programs
Prepare technical evidence, control narratives, and remediation status for auditors and assessors
Coordinate with third-party penetration testing vendors on scoping, findings review, and retesting
Help mature the vulnerability management program, including scan cadence, SLA definitions, and exception handling processes
Work closely with the CISO and broader security team on risk reporting, compliance alignment (e.g., SOC 2, ISO 27001, PCI-DSS, or similar frameworks relevant to FairSquare), and security roadmap priorities
Provide guidance and security context to engineering teams to help them build secure-by-default in AWS
Contribute to security awareness efforts related to cloud security best practices