UltraViolet Cyber brings offensive and defensive security work together through a Security-as-Code platform that continuously monitors an organization’s attack surface. Its cybersecurity services include Managed Detection & Response, SOC as a Service, Continuous Penetration Testing, and Continuous Threat Exposure Management. The company focuses on helping organizations strengthen cyber readiness and resilience by coordinating threat detection, testing, and response.
Senior Cloud Security and Compliance Engineer
Administer Wiz and automate FedRAMP and NIST controls across AWS, Azure, and Google Cloud. Build policy-as-code and Terraform security capabilities for UltraViolet Cyber’s unified security operations platform.
विवरण
- Manage Wiz as the primary technical administrator
- Create custom policies as code
- Automate FedRAMP and NIST SP 800-53 controls across multiple cloud platforms
- Improve cloud security with practical, scalable policy engineering
- Reduce false positives and sharpen detection to improve finding quality
- Create reusable Terraform modules and secure-by-default infrastructure patterns
- Help engineering teams address risk efficiently through automation and clear guidance
- Support regulated cloud environments with effective technical controls and continuous monitoring
- Develop scalable security capabilities across AWS, Azure, and Google Cloud
- Improve the organization’s ability to identify, assess, and resolve cloud security risks
- Use Python and Terraform in daily work
आवश्यकताएँ
- U.S. citizenship is required
- At least five years of hands-on cloud security engineering experience
- Production experience administering Wiz or a comparable CNAPP platform, including custom rules or cloud configuration rules, policies, and integrations
- Proficiency in Python scripting, automation, and API integrations, such as the Wiz GraphQL API or boto3
- Deep AWS experience and strong experience with either Azure or Google Cloud, plus working knowledge of all three platforms
- Experience building reusable, secure-by-default Terraform/HCL modules
- Experience with OPA/Rego or a comparable policy-as-code framework
- Ability to assess exploitability and blast radius, prioritize risks, and tune false positives
- Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails, is preferred
- Experience with Kubernetes manifests and container security is preferred
- Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins is preferred
- Experience supporting audits and continuous monitoring (ConMon) is preferred
- Experience mentoring engineers and leading technical discussions is preferred
- Relevant security certifications are preferred, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP
- Candidates must meet applicable U.S. regulatory requirements for work in FedRAMP environments