Role: Senior Consultant Specialization: Wiz Cloud Security Platform,
Consultant Role Summary
Senior Cloud Security Engineer specializing in the Wiz Cloud Security Platform to oversee and lead the onboarding, implementation, integration, operationalization, and continuous optimization of an enterprise Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) capabilities.
This individual will serve as a technical subject matter expert for Wiz, responsible for establishing comprehensive visibility, continuous security assessment, risk prioritization, and automated remediation workflows across a complex healthcare cloud environment.
The engineer will work closely with Cloud Infrastructure, Cybersecurity Operations, Vulnerability Management, Enterprise Architecture, Application Development, and ServiceNow platform teams to integrate Wiz into existing enterprise security and operational processes.
The role requires overseeing and managing the Implementation Managed Service Provider (MSP) for Wiz in a large enterprise healthcare environment, with particular emphasis on developing best-practice security policies, workflow automations, and ServiceNow integrations that translate cloud security findings into actionable, measurable risk reduction.
Key Responsibilities
1. Wiz Platform Implementation and Onboarding
• Oversee the implementation MSP, the technical onboarding and deployment of Wiz across enterprise cloud environments, including Microsoft Azure, AWS, GCP and other applicable cloud platforms.
• Oversee the configuration of cloud connectors, subscriptions, accounts, permissions, organizational scopes, and security monitoring capabilities.
• Help establish appropriate role-based access controls, authentication, service identities, and least-privilege configurations.
• Validate cloud asset discovery, security assessment coverage, configuration accuracy, and onboarding completeness.
• Help establish production-ready platform standards, documentation, and administrative procedures.
2. Cloud Security Visibility and Risk Analysis
• Oversee the configuration and help optimize Wiz capabilities for cloud security posture management, vulnerability management, identity entitlement analysis, and cloud workload risk assessment.
• Implement risk-based prioritization using Wiz Security Graph, attack-path analysis, internet exposure, exploitability, asset criticality, and sensitive-data context.
• Establish security policies and baseline controls for cloud infrastructure, networking, identity, storage, compute, containers, and serverless resources.
• Identify high-risk security misconfigurations, excessive permissions, vulnerable workloads, and potential pathways to sensitive information.
3. ServiceNow Integration and Operationalization
• Facilitate integration of Wiz with ServiceNow ITSM, Vulnerability Response, Configuration Management Database (CMDB), and Security Operations capabilities, as applicable.
• Define incident and vulnerability prioritization criteria, remediation service-level targets, and exception-handling processes.
4. Security Automation
• Integrate Wiz with security monitoring, SIEM/SOAR, cloud-native security controls, and DevSecOps tooling.
• Help to tune automation rules to reduce alert fatigue, eliminate duplicate tickets, and improve remediation efficiency.
5. Cloud Security and Compliance
• Align cloud security policies with HIPAA Security Rule requirements, NIST Cybersecurity Framework, NIST SP 800-53, and applicable organizational standards.
• Support risk assessments of cloud-hosted clinical applications, healthcare integrations, and third-party services.
6. Platform Operationalization and Continuous Improvement
• Establish Wiz operational standards, standard operating procedures, and support documentation.
• Define cloud security monitoring, vulnerability remediation, exception management, and governance processes.
• Develop measurable performance indicators for onboarding coverage, security posture, high-risk exposure, remediation time, and workflow effectiveness.
• Provide knowledge transfer and technical guidance to Operations teams.
Required Qualifications
• 5-8+ years of experience in Cloud Security Engineering, Cybersecurity Engineering, or related enterprise security disciplines.
• Demonstrated hands-on ande/or architecture experience implementing, configuring, and operating the Wiz Cloud Security Platform in a production enterprise environment.
• Strong knowledge of CSPM, CNAPP, CIEM, cloud vulnerability management, and cloud attack-path analysis.
• Experience onboarding and securing Microsoft Azure and/or AWS environments.
• Experience integrating cloud security platforms with ServiceNow ITSM, Vulnerability Response, or Security Operations.
• Proven experience developing cloud security automation using native platform workflows, APIs, scripting, or infrastructure-as-code.
• Working knowledge of cloud identity and access management, networking, workload security, encryption, and security monitoring.
• Ability to translate cloud security findings into prioritized remediation actions and repeatable operational processes.
• Strong troubleshooting, documentation, communication, and cross-functional collaboration skills.
Preferred Qualifications
• Direct experience developing and maintaining Wiz or equivalent Workflows, automation policies, and API integrations.
• Experience implementing Wiz-to-ServiceNow CMDB, Vulnerability Response, or ITSM integrations.
• Experience supporting cloud security in large healthcare organizations or other highly regulated environments.
• Familiarity with HIPAA, NIST CSF, NIST SP 800-53, and CIS cloud security benchmarks.
• Experience with Elastic, Splunk, or enterprise SIEM/SOAR platforms.
• Experience with Microsoft Entra ID, Azure Policy, AWS IAM, Terraform, Kubernetes, and DevSecOps pipelines.
• Experience with cloud data security posture management (DSPM), container security, and runtime threat detection.
• Relevant cloud or security certifications, including Azure, AWS, CISSP, CCSP, or applicable Wiz training/certifications.
