Senior Cloud Security & Compliance Engineer
UltraViolet Cyber16 hours ago
Base Salary
$120k - $170k/yr
Responsibilities
- Administer the Wiz platform and develop custom security policies and rules.
- Automate FedRAMP and NIST SP 800-53 controls across AWS, Azure, and GCP.
- Improve cloud security posture through scalable policy engineering and secure-by-default infrastructure patterns.
- Reduce false positives, improve detection accuracy, and prioritize findings based on exploitability and blast radius.
- Develop reusable Terraform modules and enable engineering teams to remediate risk through automation and guidance.
- Support regulated cloud environments through technical controls, continuous monitoring, and security integrations.
- Build scalable capabilities for identifying, understanding, and remediating cloud security risk.
- Mentor engineers and lead technical discussions.
Requirements
- U.S. citizenship is required.
- At least five years of hands-on cloud security engineering experience.
- Production experience administering Wiz or an equivalent CNAPP, including custom rules, policies, and integrations.
- Proficiency in Python for scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools.
- Deep AWS experience, strong experience with either Azure or GCP, and working knowledge of all three platforms.
- Experience developing reusable, secure-by-default Terraform/HCL modules.
- Experience with policy as code using OPA/Rego or an equivalent framework.
- Ability to assess exploitability and blast radius, prioritize risk, and tune false positives.
- Preferred experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments.
- Preferred experience with Kubernetes manifests, container security, CI/CD integrations, audits, continuous monitoring, and technical mentoring.
- Relevant security certifications such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP are preferred.
Tech Stack
Categories
About UltraViolet Cyber
UltraViolet Cyber provides managed security operations that unify red, blue, and purple team capabilities via a platform-enabled, security-as-code model. It serves Global 2000 enterprises and U.S. federal agencies with continuous testing, detection, and response, plus AI system testing and governance services. The privately held company is headquartered in McLean, Virginia, and is ranked #19 on the Top 250 MSSP list.