CNAPP Wiz Engineer

Dev Sec Ops  Engineer

Role Overview

Responsible for leading the design, integration, and optimization of enterprise Dev Sec Ops  capabilities with a primary focus on Vulnerability Management (VM), Application Security (App Sec), and Cloud-Native Application Protection Platforms (CNAPP). This role serves as a technical leader and strategic advisor driving secure-by-design practices across CI/CD pipelines and application ecosystems.

Partners closely with application engineering, cloud, and platform teams to embed security controls into development workflows, enabling scalable and automated security outcomes across hybrid and multi-cloud environments.

Key Responsibilities

• Strategic Dev Sec Ops  Leadership
  • Lead the design and implementation of Dev Sec Ops  frameworks integrating security into CI/CD pipelines (e.g., Git Hub Actions, Jenkins, Git Lab CI).
  • Act as a trusted advisor to application and platform teams, influencing secure coding, build, and deployment practices.
  • Define and drive security guardrails, standards, and patterns for cloud-native and application environments.
• CNAPP Platform Ownership (Wiz, Prisma Cloud, etc.)
  • Serve as the primary technical owner for CNAPP platforms, including onboarding, configuration, policy management, and optimization.
  • Develop and maintain runtime, posture management, and vulnerability policies across cloud workloads.
  • Integrate CNAPP insights into engineering workflows, ticketing systems, and reporting dashboards.
• Vulnerability Management (VM)
  • Drive enterprise VM strategy for cloud, container, and application layers.
  • Advance risk-based prioritization and remediation workflows integrated into CI/CD and developer tools.
  • Partner with engineering teams to reduce mean time to remediation (MTTR) and improve vulnerability posture.
• Application Security (App Sec)
  • Oversee integration and tuning of SAST, DAST, SCA, and container scanning tools within pipelines.
  • Establish secure SDLC practices, including threat modeling, code review standards, and security testing automation.
  • Provide expert guidance on application-layer vulnerabilities and remediation strategies.
• CI/CD Security Integration
  • Architect and implement security tooling integrations into CI/CD pipelines, ensuring minimal developer friction.
  • Enable shift-left security practices with automated checks, policy enforcement, and feedback loops.
  • Collaborate with Dev Ops teams to standardize pipeline security templates and reusable modules.
• Cross-Functional Collaboration
  • Work closely with cloud engineering, SRE, infrastructure, and application teams to align on security priorities.
  • Influence vendor strategy and tool selection for Dev Sec Ops  and CNAPP capabilities.
  • Represent security in architecture reviews, change control boards, and major transformation initiatives.
• Operational Excellence & Metrics
  • Define and track KPIs such as vulnerability aging, pipeline coverage, and policy compliance.
  • Lead continuous improvement initiatives to enhance automation, scalability, and developer experience.
  • Act as escalation point for complex security and integration challenges.

Minimum Requirements

• Experience
  • Requires a minimum of 7+ years of experience in Dev Sec Ops , Application Security, Cloud Security, or related domains.
  • Proven experience integrating security into CI/CD pipelines at scale.
  • Hands-on experience administering and optimizing CNAPP platforms (e.g., Wiz, Prisma Cloud).
• Technical Expertise
  • Strong knowledge across multiple domains, including:
    • Cloud Security (AWS, Azure, GCP)
    • Application Security (SAST, DAST, SCA)
    • Container & Kubernetes Security
    • Vulnerability Management & Risk Prioritization
    • Security Architecture & Design
  • Experience with infrastructure-as-code (IaC) security, API integrations, and automation scripting.
• Collaboration & Influence
  • Demonstrated ability to partner with engineering teams and influence security adoption without direct authority.
  • Experience driving enterprise-wide security initiatives and standards.

Preferred Qualifications

• Experience with tools such as:
  • Wiz, Prisma Cloud (CNAPP)
  • Checkmarx, Veracode, Snyk, Sonar Qube (App Sec)
  • CI/CD platforms (Git Hub, Git Lab, Jenkins)
• Strong understanding of Dev Ops and Agile methodologies
• Security certifications preferred (e.g., CISSP, CCSP, CSSLP, GWAPT, GCSA)
• BA/BS in Information Systems, Computer Science, or related field strongly preferred