UltraViolet Cyber
UltraViolet Cyber
UltraViolet Cyber reunește activitățile de securitate ofensivă și defensivă printr-o platformă de securitate ca cod, care monitorizează continuu suprafața de atac a unei organizații. Serviciile sale de securitate cibernetică includ detectarea și răspunsul gestionate, Centru de operațiuni de securitate ca serviciu, testarea continuă a penetrării și gestionarea continuă a expunerii la amenințări. Compania se concentrează pe sprijinirea organizațiilor pentru a-și consolida pregătirea și reziliența cibernetică, prin coordonarea detectării amenințărilor, a testării și a răspunsului.

Senior Cloud Security and Compliance Engineer

Administer Wiz and automate FedRAMP and NIST controls across AWS, Azure, and Google Cloud. Build policy-as-code and Terraform security capabilities for UltraViolet Cyber’s unified security operations platform.

Descriere

  • Manage Wiz as the primary technical administrator
  • Create custom policies as code
  • Automate FedRAMP and NIST SP 800-53 controls across multiple cloud platforms
  • Improve cloud security with practical, scalable policy engineering
  • Reduce false positives and sharpen detection to improve finding quality
  • Create reusable Terraform modules and secure-by-default infrastructure patterns
  • Help engineering teams address risk efficiently through automation and clear guidance
  • Support regulated cloud environments with effective technical controls and continuous monitoring
  • Develop scalable security capabilities across AWS, Azure, and Google Cloud
  • Improve the organization’s ability to identify, assess, and resolve cloud security risks
  • Use Python and Terraform in daily work

Cerințe

  • U.S. citizenship is required
  • At least five years of hands-on cloud security engineering experience
  • Production experience administering Wiz or a comparable CNAPP platform, including custom rules or cloud configuration rules, policies, and integrations
  • Proficiency in Python scripting, automation, and API integrations, such as the Wiz GraphQL API or boto3
  • Deep AWS experience and strong experience with either Azure or Google Cloud, plus working knowledge of all three platforms
  • Experience building reusable, secure-by-default Terraform/HCL modules
  • Experience with OPA/Rego or a comparable policy-as-code framework
  • Ability to assess exploitability and blast radius, prioritize risks, and tune false positives
  • Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails, is preferred
  • Experience with Kubernetes manifests and container security is preferred
  • Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins is preferred
  • Experience supporting audits and continuous monitoring (ConMon) is preferred
  • Experience mentoring engineers and leading technical discussions is preferred
  • Relevant security certifications are preferred, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP
  • Candidates must meet applicable U.S. regulatory requirements for work in FedRAMP environments

Locuri de muncă similare

AbbVie

Remote Clinical Account Executive, Oncology – Iowa

AbbVie

Build oncology provider relationships across the Des Moines territory while delivering product education consistent with approved labeling. Drive account growth and coordinate patient support programs.

Deschide
Seco Tools

Regional Sales Manager, Central Plains

Seco Tools

Lead Seco Tools’ metal-cutting sales team across Central Plains industrial markets, building customer relationships and growing territory sales. The role focuses on regional revenue, distributor growth, and team development.

Deschide