Wiz Security Engineer

Key Responsibilities

Policy Authoring & Migration

• Author, migrate, and validate custom policies in Rego (Open Policy Agent) to support custom framework onboarding and rule mapping within Wiz.
• Translate existing CSPM/CNAPP policy logic into Wiz-native/custom Rego policies, ensuring full parity with legacy controls.
• Support custom policy configuration, testing, and tuning throughout Build/Test phases.
• Document policy logic to support SOPs and knowledge handover.

Wiz Platform Build & Deployment

• Execute hands-on build activities, including tenant setup, connector health validation, and RBAC configuration.
• Deploy and configure cloud connectors across Azure and Alibaba Cloud environments.
• Deliver Kubernetes Security Posture Management (KSPM) discovery.
• Deploy Wiz Broker (on-premises/private) and configure Kubernetes (AKS) connectors.
• Configure Cloud Detection and Response (CDR) capabilities.
• Deploy and manage runtime sensors and registry scanning.

Technical Leadership & Architecture

• Serve as senior technical authority for overall Wiz solution architecture, including CSPM/Outpost solution design.
• Lead custom framework rule mapping and complex RBAC/connector configuration efforts.
• Act as primary implementer for day-to-day build and configuration tasks under Wiz SME guidance.
• Provide escalation support, quality assurance, and architectural guidance across engineering teams.
• Lead technical validation and testing sign-off for platform deployments.
• Embed best practices into SOPs and drive knowledge transfer initiatives.

Required Skills & Qualifications

• Hands-on experience with the Wiz security platform (CSPM/CNAPP).
• Proficiency in Rego and Open Policy Agent (OPA) policy authoring.
• Experience with multi-cloud environments (Azure, Alibaba Cloud); AWS/GCP a plus.
• Strong understanding of Kubernetes security (AKS, KSPM, runtime security, registry scanning).
• Experience with RBAC design and configuration in cloud security platforms.
• Familiarity with Cloud Detection and Response (CDR) concepts and tooling.
• Strong documentation skills for SOPs, runbooks, and knowledge transfer.
• Ability to operate both as a hands-on implementer and as a senior technical advisor/escalation point.

Preferred Experience

• Prior experience migrating legacy CSPM/CNAPP policies to a new platform.
• Experience with Wiz Broker deployments in on-prem/private environments.
• Background in security architecture or platform engineering roles.