Cloud Security Engineer – CNAPP (Wiz Platform)

📄Visa: TN, L2, E2, (No H1B & OPT)
Experience: 10+


Job Summary:

Seeking a hands-on Cloud Security Engineer with strong Wiz CNAPP experience to lead a 3-week CNAPP PoC for a healthcare/medical device client. The role involves AWS/Azure onboarding, CSPM, CIEM, DSPM, CDR, integrations, remediation, and executive reporting.

Key Responsibilities:

·         Configure and onboard AWS and Azure environments into Wiz agentlessly.

·         Establish CSPM, CIEM, DSPM, CDR/Wiz Defend baselines and identify cloud risks/attack paths.

·         Analyze IAM permissions, toxic access, privilege escalation, and least-privilege requirements.

·         Scan and classify PII/PHI across AWS S3, Azure Blob, and RDS.

·         Integrate Wiz with Microsoft Sentinel, ServiceNow, Entra ID, and vulnerability-management tools.

·         Implement IaC security scanning using Terraform/Bicep with Azure DevOps/GitHub.

·         Support EKS/AKS, container, secrets, and image security.

·         Remediate critical cloud security findings and demonstrate security-score improvement.

·         Conduct PoC validation, prepare Go/No-Go recommendations, and develop the Phase 1 rollout plan.

·         Work directly with CISO, Cloud Ops, SOC, IAM, and AppSec teams.

·         Required Skills

·         3+ years Cloud Security Engineering experience across AWS and Azure.

·         Strong Wiz CNAPP experience; Prisma Cloud, Orca, Lacework, or Defender for Cloud also considered.

·         Hands-on experience with CSPM, CIEM, DSPM, CDR, and attack-path analysis.

·         AWS IAM, CloudFormation StackSets, Azure Entra ID/App Registration, and RBAC.

·         Terraform / Bicep and CI/CD security with Azure DevOps / GitHub.

·         EKS / AKS, Kubernetes, container and image security.

·         Microsoft Sentinel and ServiceNow integrations.

·         Knowledge of CIS, AWS FSBP, Azure Security Benchmark, ISO 27001, and HIPAA.

·         Strong client-facing, communication, and stakeholder-management skills.

Preferred:

·         Wiz certification/deployment experience, healthcare/medical-device experience, AWS Security Specialty, Azure Security Engineer, CISSP, or CCSP.