Senior Cloud Security & Compliance Engineer

📋 Job Overview

UltraViolet Cyber is seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform. The team member will administer Wiz, develop custom policies as code, and automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments.

🏢 About UltraViolet Cyber

UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.

🎯 The Role

You will improve cloud security posture through practical, scalable policy engineering, increase finding quality by reducing false positives and improving detection accuracy, and deliver reusable Terraform modules and secure-by-default infrastructure patterns.

✅ Key Responsibilities

• Improve cloud security posture through practical, scalable policy engineering.
• Increase finding quality by reducing false positives and improving detection accuracy.
• Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
• Enable engineering teams to remediate risk efficiently through automation and clear guidance.
• Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring.
• Build scalable security capabilities across AWS, Azure, and GCP.
• Strengthen the organization’s ability to identify, understand, and remediate cloud security risk.

📌 Required Qualifications

• US Citizenship is Required
• Cloud security engineering: At least five years of hands-on experience.
• Wiz or equivalent CNAPP experience: Production administration, custom rules or Cloud Configuration Rules, policies, and integrations.
• Python: Proficiency in scripting, automation, and API integrations.
• Multi-cloud expertise: Deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms.
• Terraform/HCL: Experience developing reusable, secure-by-default modules.
• Policy as code: Experience with OPA/Rego or an equivalent framework.

⭐ Desirable Experience

• Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments.
• Experience with Kubernetes manifests and container security.
• Experience integrating security controls into CI/CD platforms.
• Experience supporting audits and continuous monitoring.
• Experience mentoring engineers and leading technical discussions.
• Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, Professional Cloud Security Engineer, or CCSP.

🎁 Benefits

UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.

🛂 Visa & Eligibility

US Citizenship is Required