Information Security Engineer -Containers/Kuber

Location: San Francisco, CA
Salary: $69.00 USD Hourly - $74.00 USD Hourly
Description:
Information Security Engineer - Containers & Kubernetes (Contingent)

Location Options:

• Charlotte, NC - 300 S. Brevard St.
• Chandler/Phoenix, AZ - 2600 S. Price Rd.
• Dallas/Irving, TX - 401 Las Colinas Blvd W, Bldg A
• San Francisco, CA

About the Role

We are seeking an experienced Information Security Engineer to join the Cloud Workload Lifecycle Security (CWLS) team within Cybersecurity - Vulnerability & Patch Management. You will play a critical role in securing the enterprise's cloud transformation, focused on enabling and managing the Wiz CNAPP (Cloud Native Application Protection Platform) with emphasis on the Cloud Workload Protection Platform (CWPP) module.

This role centers on security engineering for large-scale containers and Kubernetes environments (TAS/OCP/GKE/AKS), ensuring comprehensive vulnerability and compliance visibility across runtime workloads and container registries.
Key Responsibilities
Platform Engineering & Deployment

• Implement, configure, and manage the Wiz CNAPP platform across multi-cloud environments (Azure, Google Cloud Platform, AWS, Kubernetes).
• Onboard cloud accounts, subscriptions, projects, and Kubernetes clusters into Wiz.
• Deploy and manage Wiz Sensor at scale for host telemetry, vulnerability detection, and configuration assessment.
• Automate sensor onboarding, upgrades, health checks, and drift detection to ensure consistent coverage.

Integration & Automation

• Partner with DevSecOps and Cloud Platform teams to integrate Wiz into:
  • CI/CD pipelines
  • Kubernetes and container workflows
• Enable and operate Wiz Registry Scanning across enterprise registries (ACR, GCR, Artifactory).
• Contribute to internal automation repositories and improve code quality.

Security Expertise & Operations

• Serve as SME for Wiz capabilities, best practices, and roadmap guidance.
• Enable and tune detection across vulnerabilities, container runtime events, network exposure, and attack paths.
• Validate findings to support vulnerability management and reduce false positives.
• Troubleshoot and support escalations related to Wiz CSPM/CWPP.

Team Collaboration

• Work effectively in a distributed team across U.S. and India.
• Drive outcomes in a fast-paced environment with complex technical challenges and aggressive timelines.

Required Qualifications

• 5+ years of Information Security Engineering experience, or equivalent (work experience, training, military service, education).
• 4+ years in Cloud Security, Cloud Engineering, or DevSecOps.
• 2+ years hands-on experience with Azure and Google Cloud Platform, including services, configurations, workloads, and hardening.
• Hands-on experience deploying or administering Wiz in large enterprise environments.
• Strong understanding of:
  • Azure/Google Cloud Platform architecture
  • Kubernetes and container security
  • IAM, networking, and cloud-native services
• Advanced Python programming/automation experience.
• Familiarity with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps).
• Strong communication skills, analytical skills, and ability to manage multiple priorities.
• Experience with Agile Scrum or Kanban workflows (1+ year).
• Intermediate to advanced proficiency with Microsoft Office tools (Word, Excel, PowerPoint, Visio, Outlook, Teams, SharePoint).

Desired Qualifications

• Experience integrating CNAPP tools with SIEM/SOAR platforms.
• Background in vulnerability management or application security.
• Experience supporting regulated or enterprise-scale environments.
• Familiarity with cloud security and risk frameworks (CSA, CIS, NIST).
• Experience with enterprise change and incident management processes.
• Relevant certifications:
  • CISSP, CISM, CISA, CRISC, CCSK, GIAC
  • Azure or Google Cloud certifications
  • Kubernetes Security Specialist (CKS)

Screening Questions

Rate your skill level (Beginner / Intermediate / Advanced / Expert) and list years of experience for each:

• Container Security
• Cloud Security (Azure, Google Cloud Platform)
• Wiz Sensor deployment/management at scale
• Wiz CLI integration with DevSecOps pipelines
• Kubernetes (OCP, AKS, GKE)
• Wiz Agentless Scanning
• Wiz Kubernetes Connector / KSPM
• Python

By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Contact:

This job and many more are available through The Judge Group. Please apply with us today!