security engineer in cloud infrastructure in Berlin

Описание:

Wiz secures cloud and AI applications by connecting code, cloud, and runtime into a shared context. Its AI-powered platform uses Google’s Threat Intelligence and Security Operations to help organizations detect, prevent, and respond to threats across environments.

Задачи:

• Lead threat modeling and security reviews across products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies;
• Build automation, policy-as-code, and security tooling that enables development teams to shift left and integrate end-to-end security into workflows;
• Design and implement secure baselines for cloud resources and Kubernetes-based infrastructure;
• Drive vulnerability management and remediation efforts by prioritizing issues, implementing mitigations, and designing preventative controls across software supply chains from development through production;
• Extend detection and response capabilities by building scalable solutions to identify malicious activity, triage alerts, investigate incidents, and remediate them;
• Build functional partnerships with engineering and operations teams to help deliver secure-by-design solutions;
• Influence the product roadmap by using Wiz-for-Wiz to assess, monitor, and harden environments.

Требования:

• 7+ Years of experience in security engineering or security operations in cloud environments;
• Experience with AWS cloud security or equivalent experience in Azure and GCP with some AWS experience;
• Experience with cloud-native Kubernetes services, including EKS, GKE, or AKS, and container security principles;
• Experience securing IAM and cloud identities at scale;
• Experience leading technical security reviews of products and architectures, conducting threat modeling exercises, and translating findings into actionable security controls;
• Practical understanding of web application security concepts, including OWASP Top 10 and similar standards;
• Hands-on experience with IaC and related tools, including Terraform, CloudFormation, Helm, or Pulumi;
• Experience developing automation and tooling with one or more of Python, Go, Shell, HCL, or Rego;
• Applicants must have the legal right to work in Germany without visa sponsorship;
• Nice to have: Bachelor’s degree in computer science or a related field or equivalent job experience, experience with remote globally distributed teams, experience in organizations that develop software or operate managed infrastructure and technology services for their own customers, experience with CNAPP, CSPM, or CIEM solutions.

Условия:

The role does not offer visa sponsorship.