Cloud Security Site Reliability Engineer

Responsibilities :

- Implement and manage cloud vulnerability management processes using Wiz across multi-account AWS environments.

- Continuously monitor AWS infrastructure for vulnerabilities, misconfigurations, exposed secrets, malware, and compliance violations.

- Analyze Wiz security findings and prioritize remediation based on exploitability, business impact, attack path analysis, and risk scoring.

- Work with application, infrastructure, and DevOps teams to remediate vulnerabilities within defined SLAs.

- Perform root cause analysis for recurring security issues and recommend long-term remediation strategies.

- Validate remediation activities through rescanning and vulnerability verification.

- Integrate Wiz findings with ticketing systems such as ServiceNow or Jira for automated remediation workflows.

- Develop dashboards and executive reports showing vulnerability trends, remediation metrics, risk posture, and compliance status.

Monitor vulnerabilities affecting :

- EC2 instances, Amazon EKS clusters, Amazon ECS workloads, AWS Lambda functions, Amazon RDS databases, Amazon S3 buckets, Amazon ECR container images, IAM identities and permissions, and VPC networking components.

- Identify internet-exposed assets and prioritize risks using attack path analysis.

- Collaborate with DevSecOps teams to integrate vulnerability scanning into CI/CD pipelines.

- Automate vulnerability reporting, notification, and remediation using AWS Lambda, EventBridge, Step Functions, or Python scripts.

- Track remediation SLAs and ensure compliance with internal security policies.

- Support security audits, regulatory compliance assessments, and penetration testing activities.

- Stay current with AWS security best practices, emerging vulnerabilities, and Wiz platform enhancements.