Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we’re now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation.

Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun!

Role Description

As a Security Engineering Manager for Product & Production Infrastructure, you will lead and grow a team of talented Security Engineers responsible for protecting cloud-native environments, CI/CD pipelines, and core production infrastructure. In this role, you will act as a technical leader and people manager—providing strategic direction, mentorship, and operational excellence while staying close to modern cloud and container technologies across AWS, Azure, and GCP. You will build deep partnerships with Software Development, DevOps, and Product Management teams to embed secure-by-design principles into developer workflows, drive proactive vulnerability management, and champion our internal dogfooding program to assess, monitor, and influence product roadmaps.

Responsibilities

Team Leadership & Talent Development: Recruit, retain, develop, and coach a high-performing, globally distributed team of Security Engineers; establish performance goals, conduct 1:1s, and support career progression.
Technical Strategy & Architecture: Lead threat modeling and technical security reviews across product architectures and multi-cloud infrastructure to identify attack surfaces and design scalable mitigation strategies.
Security Automation & “Shift-Left”: Drive the creation of automation, policy-as-code, and developer-friendly security tooling to integrate continuous, end-to-end security checks into CI/CD workflows.
Infrastructure & Container Hardening: Define, implement, and govern secure baselines for multi-cloud resources and managed Kubernetes infrastructure (EKS, GKE, AKS).
Vulnerability & Supply Chain Management: Oversee end-to-end vulnerability management and remediation programs, establishing preventative controls across software supply chains from development to production.
Detection & Incident Response: Partner with detection and response functions to scale alert triage, investigation capabilities, and automated incident remediation.
Cross-Functional Partnership: Build deep functional relationships with Engineering and DevOps leadership to balance security requirements with product delivery velocity.

Minimum qualifications

Leadership Experience: 2+ years of experience leading, managing, or mentoring security engineering, DevOps, or technical cloud infrastructure teams.
Technical Experience: 7+ years of experience in security engineering or security operations within cloud-native environments.
Cloud & Container Security: Strong hands-on cloud security experience in AWS (with working knowledge of Azure or GCP), along with deep knowledge of Kubernetes (EKS/GKE/AKS) and container security principles.
Identity & Access Management: In-depth understanding of cloud IAM architecture and identity security at enterprise scale.
Infrastructure as Code & Automation: Hands-on experience with IaC frameworks (Terraform, CloudFormation, Helm, or Pulumi) and automation scripting/tooling in Python, Go, Shell, HCL, or Rego.
Application Security: Practical knowledge of web application security fundamentals and threat modeling (e.g., OWASP Top 10, software supply chain security).

Preferred qualifications

Bachelor’s degree in Computer Science, Cybersecurity, a related technical field, or equivalent practical experience.
Experience managing and scaling remote, globally distributed engineering teams.
Prior experience in organizations that develop and operate large-scale SaaS or managed cloud services.
Experience with CNAPP, CSPM, CIEM, or CDR platforms and methodologies.

Applicants must have the legal right to work in the country where the position is based, without the need forvisa sponsorship.This role does not offervisasponsorship.

Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.

By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz’s Privacy Policy.

Career Guide for Security Engineering Manager – Product & Production Infrastructure

Job Overview

The Security Engineering Manager for Product & Production Infrastructure will lead a team focused on securing cloud-native environments and production infrastructure. Your role involves mentoring engineers, setting strategic directions for security practices, and collaborating closely with development and DevOps teams to instill secure coding principles.

Key Responsibilities

Team Leadership: Manage and develop a global team of Security Engineers, set performance goals, and support their career growth.
Technical Strategy: Conduct security reviews and threat modeling to identify vulnerabilities and develop mitigation strategies.
Security Automation: Integrate security checks into CI/CD workflows through automation and policy-as-code.
Infrastructure Hardening: Establish security baselines for multi-cloud resources and Kubernetes.
Vulnerability Management: Oversee programs to manage vulnerabilities in software supply chains.
Incident Response: Collaborate with teams to enhance incident detection and response capabilities.
Cross-Functional Partnership: Work with engineering and DevOps leaders to balance security and product delivery needs.

Required Skills and Knowledge

Technical Skills

7+ years in security engineering or operations, particularly in cloud-native environments.
Hands-on experience with AWS, with familiarity in Azure or GCP.
Deep knowledge of Kubernetes and container security.
Understanding of cloud IAM architecture.
Experience with Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation).
Knowledge of web application security and threat modeling concepts.

Soft Skills

Strong leadership and mentoring abilities.
Excellent communication and collaboration skills.
Analytical problem-solving skills.
Ability to work in a fast-paced, dynamic environment.

Tools and Technologies

Cloud platforms: AWS, Azure, GCP
Kubernetes management tools: EKS, GKE, AKS
Automation scripting: Python, Go, Shell, HCL, Rego

Certifications or Training

Certificates in cloud security (CCSP, AWS Certified Security Specialty).
CISSP or related security certifications can enhance your candidacy.

Interview Preparation

10 Common Interview Questions

Can you describe your experience in managing security engineering teams?
What strategies do you use for vulnerability management?
How do you implement secure-by-design principles in a development workflow?
Can you explain a recent security challenge you faced and how you resolved it?
What tools do you recommend for cloud security, and why?
Describe your experience with Kubernetes security.
How do you balance security requirements with the need for fast product development?
What is your approach to mentoring junior engineers?
How do you stay updated with emerging security threats?
Can you discuss your experience with incident response and detection?

Advice on How to Answer Them

For each question, use the STAR method (Situation, Task, Action, Result) to structure your answers. Highlight your leadership, technical skills, and problem-solving abilities with specific examples.

Important Topics Candidates Should Review

Cloud security best practices.
Modern CI/CD workflows and their security implications.
Latest trends in container security.
Common vulnerabilities and mitigation strategies.

How to Increase Your Hiring Chances

CV Improvement

Emphasize leadership experience and technical skills relevant to cloud security.
Include metrics and accomplishments to demonstrate your impact in previous roles.

LinkedIn Profile Optimization

Use industry-relevant keywords in your profile summary and skills sections.
Showcase your experience with projects related to security engineering.

Portfolio or Project Ideas

Document your contributions to open-source security projects.
Develop a personal project demonstrating cloud security best practices.

Learning Recommendations

Online courses in cloud security, such as those on platforms like Coursera or Udemy.
Participate in cybersecurity conferences or workshops to network and learn.

Career Growth

As a Security Engineering Manager, you can progress to senior leadership roles within security, such as Director of Security or Chief Information Security Officer (CISO). Opportunities may also arise to specialize in areas like cloud architecture or security compliance.