Location: Irving, TX
Salary: $68.00 USD Hourly - $73.00 USD Hourly
Description: Lead Security Engineer, Cloud Workload Security (CWLS)We are not accepting C2C or 1099 arrangements.Location: Irving, TX (also open to Charlotte, NC; Chandler, AZ)
Experience Level: Advanced
About the JobWe're building a secure, scalable cloud platforms to power our digital transformation. As a Lead Security Engineer on the Cloud Workload Lifecycle Security (CWLS) team, you will play a critical role in protecting enterprise cloud environments by developing and automating security posture management at scale.
In this role, you will lead the transition from Prisma Cloud to Wiz CNAPP, helping define how we detect, monitor, and remediate cloud misconfigurations and configuration drift. You'll work at the intersection of security, automation, and cloud engineering to deliver impactful solutions across a large, distributed enterprise environment.
What You'll Do- Lead the design and implementation of Cloud Security Posture Management (CSPM) capabilities using Wiz.
- Drive migration efforts from Prisma Cloud Enterprise to Wiz CNAPP.
- Develop and scale Policy-as-Code (PaC) using Rego to detect cloud misconfigurations and configuration drift.
- Build automation frameworks (Python, Terraform) to streamline policy development and security operations.
- Configure and optimize Wiz detection capabilities for:
- Cloud misconfigurations
- Configuration drift
- On-demand scanning and developer integrations (IDE support)
- Partner with engineering, security, and platform teams to translate security requirements into scalable technical solutions.
- Act as a subject matter expert (SME) for Wiz CSPM features, roadmap, and best practices.
- Troubleshoot and resolve complex security and platform issues.
- Contribute to internal tools, repositories, and documentation to improve team efficiency and code quality.
- Mentor and train team members on automation frameworks and policy development practices.
- Collaborate with distributed teams across the U.S. and India.
Minimum Qualifications- 5+ years of experience in Information Security Engineering or equivalent practical experience.
- 4+ years of experience with automation and Infrastructure as Code (e.g., Terraform).
- 2+ years of experience with public cloud platforms (Azure, Google Cloud), including security and hardening practices.
- Experience with scripting or programming (e.g., Python).
- Experience working with APIs (REST-based data integration).
- Familiarity with CI/CD tools (e.g., GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
- Strong problem-solving, analytical, and communication skills.
- Experience working in Agile environments (Scrum or Kanban).
Preferred Qualifications- Experience with Wiz CNAPP, particularly CSPM capabilities.
- Experience developing or automating Rego policies or similar policy-as-code frameworks.
- Understanding of DevSecOps and cloud-native security practices.
- Experience with Kubernetes (e.g., AKS, GKE, OpenShift).
- Knowledge of cloud security frameworks (e.g., CIS, NIST, CSA).
- Experience with automated testing and API-driven development.
- Familiarity with large-scale enterprise change and incident management processes.
- Professional certifications (e.g., CISSP, CISM, CISA, CRISC, CCSK) or cloud certifications (Azure, Google Cloud).
Why Join Us- Work on high-impact cloud security initiatives at enterprise scale.
- Collaborate with a diverse and distributed team of engineers and security experts.
- Contribute to modern security practices including Policy-as-Code and DevSecOps.
- Help shape the future of cloud security.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.
Contact: This job and many more are available through The Judge Group. Please apply with us today!