# Senior Cloud Security & Compliance Engineer

**Company**: UltraViolet Cyber
**Location**: McLean, Virginia
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: USD 120,000-170,000 per-year-salary
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.lever.co/uvcyber/a22e6f9c-5c49-4723-a518-150a2ebde547?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_1f34077e-06a

## Description

We are seeking a hands-on cloud security engineer to serve as a primary technical resource for the Wiz platform. The team member will administer Wiz, develop custom policies as code, and automate FedRAMP and NIST SP 800-53 controls across multi-cloud environments.

## Responsibilities

- Improve cloud security posture through practical, scalable policy engineering.

- Increase finding quality by reducing false positives and improving detection accuracy.

- Deliver reusable Terraform modules and secure-by-default infrastructure patterns.

- Enable engineering teams to remediate risk efficiently through automation and clear guidance.

- Support FedRAMP and other regulated cloud environments with effective technical controls and continuous monitoring.

- Build scalable security capabilities across AWS, Azure, and GCP.

- Strengthen the organization's ability to identify, understand, and remediate cloud security risk.

## Requirements

- US Citizenship is Required

- Cloud security engineering: At least five years of hands-on experience.

- Wiz or equivalent CNAPP experience: Production administration, custom rules or Cloud Configuration Rules, policies, and integrations.

- Python: Proficiency in scripting, automation, and API integrations, including the Wiz GraphQL API, boto3, or similar tools.

- Multi-cloud expertise: Deep AWS experience plus strong experience with either Azure or GCP, along with working knowledge of all three platforms.

- Terraform/HCL: Experience developing reusable, secure-by-default modules.

- Policy as code: Experience with OPA/Rego or an equivalent framework; Wiz custom rules use Rego.

- Finding triage: Ability to assess exploitability and blast radius, prioritize risk, and tune false positives.

## Preferred Qualifications

- Experience with NIST SP 800-53, FedRAMP, GovCloud, or Impact Level environments, including mapping controls to technical guardrails.

- Experience with Kubernetes manifests and container security.

- Experience integrating security controls into CI/CD platforms such as GitHub Actions, GitLab, or Jenkins.

- Experience supporting audits and continuous monitoring (ConMon).

- Experience mentoring engineers and leading technical discussions.

- Relevant security certifications, such as AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Professional Cloud Security Engineer, or CCSP.

## Skills

### Required
- Cloud Security
- Wiz
- Python
- Terraform
- Multi-cloud
- Policy as Code
- Finding Triage

### Nice to have
- NIST SP 800-53
- FedRAMP
- GovCloud
- Kubernetes
- CI/CD
- Audits
- Continuous Monitoring
- Mentoring

---

Source: [Apply at jobs.lever.co](https://jobs.lever.co/uvcyber/a22e6f9c-5c49-4723-a518-150a2ebde547?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)