Information Security Engineer 4 - Kubernetes & Cloud Security (CNAPP / Wiz)

Information Security Engineer 4 - Kubernetes & Cloud Security (CNAPP / Wiz)

Locations (Hybrid Onsite)

• Charlotte, NC - 300 S. Brevard St.



• Phoenix, AZ - Chandler Campus (2600 S. Price Rd.)



• Dallas, TX - Las Colinas (401 Las Colinas Blvd W, Irving)

Contract Details

• Duration: Through end of year (with extension/conversion potential)



• Interview: 1 round (30 minutes, panel)



• Work Model: Hybrid / onsite required



• Start: ASAP

Role Summary

Seeking a senior Cloud Security Engineer with deep Kubernetes expertise to support enterprise cloud workload protection and vulnerability management initiatives. This role focuses on securing containerized workloads across multi-cloud environments while enabling enterprise adoption of a CNAPP platform (Wiz).

The engineer will act as a hands-on technical SME responsible for onboarding Kubernetes environments, implementing security controls, and automating security visibility and vulnerability management at scale.

Core Responsibilities

• Deploy, configure, and operate Wiz CNAPP (CWPP focus) across enterprise environments



• Onboard and secure cloud assets including:
  
  
  
  
  • AWS, Azure, and Google Cloud environments
  
  
  
  • Kubernetes clusters (AKS, EKS, GKE, OpenShift)
  
  
  
  



• Implement and manage Wiz Sensor at scale:
  
  
  
  
  • Installation and lifecycle automation
  
  
  
  • Health checks and drift detection
  
  
  
  • Performance and coverage optimization
  
  
  
  



• Enable container security capabilities:
  
  
  
  
  • Registry scanning (ACR, GCR, Artifactory)
  
  
  
  • Runtime vulnerability detection
  
  
  
  • Attack path and exposure analysis
  
  
  
  



• Integrate Wiz with enterprise tooling:
  
  
  
  
  • CI/CD pipelines
  
  
  
  • DevSecOps workflows
  
  
  
  • Kubernetes deployment pipelines
  
  
  
  



• Automate security workflows using Python scripting



• Validate vulnerability findings and reduce false positives



• Troubleshoot CNAPP/CSPM issues and escalations



• Collaborate with DevSecOps, platform engineering, and cloud architecture teams



• Support continuous improvement of cloud security posture



• Contribute to engineering documentation and automation libraries

Required Skills

• 5+ years Information Security Engineering experience



• 4+ years Cloud Security or DevSecOps experience



• 2+ years Azure and Google Cloud experience



• Strong Kubernetes security expertise (primary requirement)



• Hands-on experience with container security and Kubernetes workloads



• Experience implementing or administering Wiz CNAPP



• Strong knowledge of:
  
  
  
  
  • Cloud architecture (AWS, Azure, Google Cloud Platform)
  
  
  
  • Kubernetes networking, IAM, and workload security
  
  
  
  • Container security best practices
  
  
  
  



• Advanced Python automation experience



• Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI, Azure DevOps)



• Strong troubleshooting, analytical, and incident response skills



• Ability to work in fast-paced enterprise environments



• Strong communication and collaboration skills



• Agile experience (Scrum or Kanban)

Preferred Skills

• Integration of CNAPP platforms with SIEM/SOAR tools



• Vulnerability management or application security background



• Enterprise or regulated environment experience



• Experience with incident/change management processes



• Familiarity with security frameworks (CIS, NIST, CSA)



• Certifications preferred:
  
  
  
  
  • CISSP, CISM, CISA, CRISC, CCSK
  
  
  
  • Kubernetes Security Certification (CKS)
  
  
  
  



• Cloud certifications (Azure or Google Cloud)

Ideal Candidate

• Kubernetes-first security engineer with deep cloud-native experience



• Strong hands-on practitioner in CNAPP platforms (Wiz preferred)



• Automation-driven (Python + CI/CD pipelines)