Job Title:  CYBER SECURITY ANALYST L4

Job Description

Engineer – Code-to-Cloud Security Platform (Wiz Code)

Your role:

As an Engineer working on Wiz Code, you will contribute to systems that unify application security, development workflows, and runtime risk into a single platform. You will help build capabilities that connect source code, CI/CD pipelines, and deployed environments so developers can identify, prioritize, and remediate real security risks directly within their workflows.

• contribute to code-to-environment mapping systems that connect repositories, build pipelines, deployed workloads, and service ownership
• implement and improve multi-layer security scanning across code, dependencies, infrastructure-as-code, secrets, and sensitive data
• help develop graph-based security intelligence that links code, pipelines, identities, workloads, and data for relationship-aware analysis
• support the implementation of correlation, attack path, blast radius, and risk prioritisation capabilities that highlight meaningful security issues
• build developer-friendly security experiences in IDEs, pull requests, and command-line tooling with clear remediation guidance
• contribute to scalable platform services for policy enforcement, workflow automation, automated remediation, and efficient query across large-scale environments

Your expertise:

• Experience building secure software capabilities across the SDLC, with exposure to application security, software supply chain security, and infrastructure-as-code security
• Solid programming and systems engineering skills, with experience building distributed services, event-driven components, or data processing systems
• Familiarity with graph-based data models or relationship-oriented analysis across code, identities, pipelines, workloads, and security findings
• Experience integrating with source control systems, CI/CD platforms, and developer tooling to support security within engineering workflows
• Hands-on knowledge of vulnerability scanning, dependency analysis, secrets detection, and security signal correlation
• Experience contributing to policy-as-code controls, workflow automation, or remediation tooling in engineering or security platforms
• Understanding of risk prioritisation concepts such as attack paths, blast radius, impact, and exploitability
• Good platform engineering fundamentals, with the ability to build practical, developer-friendly experiences across APIs, pull requests, and command-line tooling
• Comfort working across teams and learning how to translate security requirements into scalable platform capabilities
• Able to communicate complex technical concepts clearly and work collaboratively across engineering, product, and security disciplines
• Approaches problems with a systems mindset and uses shared context to make better engineering decisions
• Balances security needs with usability, aiming to deliver actionable insights without unnecessary friction
• Builds reliable and scalable solutions while continuing to grow platform and systems design depth
• Contributes to continuous improvement through automation, consistency, and a focus on reducing meaningful security risk

͏

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

͏

͏

͏