DevSecOps Engineer – Wiz Implementation & Cyber Security

OverviewWe are seeking a highly skilled DevSecOps Engineer with hands-on expertise in Wiz Cloud Security Platform implementation, cloud security architecture, and end‑to‑end DevSecOps practices. The ideal candidate will drive secure-by-design engineering, strengthen cloud posture, automate security controls, and collaborate with cross-functional teams to embed security throughout the CI/CD lifecycle. Key ResponsibilitiesLead the implementation, configuration, and optimization of Wiz across multi-cloud environments (Azure, AWS, GCP).Integrate Wiz with existing SIEM, SOAR, ticketing systems, vulnerability management tools, and cloud-native services.Continuously monitor cloud environments for misconfigurations, vulnerabilities, toxic combinations, exposed secrets, and high-risk assets.Develop automated workflows for remediation, alerting, and compliance reporting using Wiz and DevSecOps toolchains.Partner with Cloud, DevOps, and Security Engineering teams to embed security guardrails into CI/CD pipelines.Implement and maintain IaC security scanning (Terraform, ARM, CloudFormation) and container security (ECR, ACR, Docker).Drive Zero Trust, least privilege, and secure access patterns across cloud workloads.Conduct threat modeling, risk assessments, and security architecture reviews for new applications and cloud deployments.Support incident response by providing cloud security insights, Wiz findings, and forensic data.Ensure compliance with SOC 2, ISO 27001, NIST, CIS Benchmarks, and internal security policies.Create documentation, runbooks, dashboards, and executive-level reporting on cloud security posture.Required Skills & Experience8+ years of experience in DevSecOps, Cloud Security, or Cyber Security Engineering.Proven experience implementing and managing Wiz Cloud Security Platform.Strong understanding of CSPM, CWPP, CIEM, and cloud-native security controls.Hands-on experience with Azure, AWS, or GCP security services.Proficiency in Terraform, Kubernetes, Docker, and CI/CD tools (GitHub Actions, Jenkins, GitLab).Experience with SIEM/SOAR tools (Splunk, Sentinel, QRadar, etc.).Strong scripting skills (Python, Bash, PowerShell).Deep knowledge of network security, identity & access management, secrets management, and cloud architecture.Familiarity with OWASP, MITRE ATT&CK, NIST CSF, and modern security frameworks.Preferred QualificationsWiz Certified Practitioner (if applicable).Certifications such as AZ-500, AWS Security Specialty, GCP Security Engineer, CISSP, CCSP, CEH.Experience with Shift-left security, SAST/DAST tools, and container runtime protection.Background in incident response, cloud forensics, or red/blue team collaboration.