Cloud Security Platform Admin

KEY RESPONSIBILITIES
Platform Administration & Configuration
Own the Wiz tenant end to end: cloud account and subscription connectors, projects, folders, scoping, role-based access control, SSO/SCIM integration, and license utilization.
Deploy and maintain Wiz collection components including the Wiz Sensor for runtime visibility, admission controllers for Kubernetes clusters, outposts for data scanning, and container registry connectors.
Onboard new cloud accounts, subscriptions, projects, clusters, and code repositories as the environment grows; validate coverage and remediate scanning gaps.
Maintain platform hygiene: connector health, ingestion failures, permission drift, agent/sensor version currency, and scheduled maintenance windows.
Manage upgrades, feature enablement, and vendor release evaluation; maintain the Wiz relationship alongside IT vendor management.
Alerting, Detection & Triage
Design, build, and tune Wiz alert rules, policies, and controls so that alerts are high-signal, correctly routed, and owned by a named team.
Serve as first-line triage for Wiz findings: validate severity, eliminate false positives, confirm exploitability and blast radius using the Wiz Security Graph, and escalate genuine risk quickly.
Integrate Wiz alerting into existing operational channels - ITSM ticketing, Slack, email, SIEM, and on-call escalation - so findings land where work actually gets done.
Establish and maintain severity definitions, SLA targets, and escalation paths for toxic combinations, publicly exposed assets, exposed secrets, and critical vulnerabilities.
Participate in cloud security incident response, supplying Wiz-derived context on affected resources, identity paths, and lateral movement potential.
Vulnerability & Risk Remediation
Drive findings to closure by partnering with cloud engineering, DevOps, application development, and infrastructure teams; track remediation to completion rather than handing off and moving on.
Maintain a prioritized cloud risk backlog and run recurring remediation reviews with the accountable owning teams.
Analyze recurring findings for root cause and push fixes upstream into golden images, Terraform modules, Helm charts, and CI/CD pipeline gates.
Manage the exception process: document accepted risks, compensating controls, expiration dates, and periodic re-review.
Review cloud entitlements (CIEM) findings and partner with IAM to reduce excessive and unused permissions.
Automation & Integration
Build automation rules and workflows in Wiz to auto-create tickets, notify owners, apply resource tags, and where appropriate auto-remediate low-risk misconfigurations.
Develop and maintain scripts and integrations against the Wiz API and GraphQL endpoints for reporting, bulk operations, and data export.
Integrate Wiz Code / IaC scanning and secrets detection into source control and CI/CD pipelines so issues are caught before deployment.
Feed Wiz data into enterprise reporting and observability platforms to support unified risk visibility.
Reporting, Compliance & Governance
Produce recurring executive and operational reporting on cloud security posture, risk trend, remediation velocity, and SLA attainment.
Map and maintain Wiz compliance frameworks to CWGS obligations including PCI DSS, SOX IT CIS Benchmarks, and internal security standards.
Supply evidence and control artifacts to internal audit, external auditors, and cyber insurance reviews.
Document platform configuration, runbooks, triage procedures, and remediation playbooks; keep them current.
Continuous Improvement & Enablement
Continuously refine policies and controls to reduce alert volume while increasing detection of material risk.
Train and enable cloud, application, and infrastructure teams to self-serve within Wiz for their own projects and scopes.
Benchmark posture over time and recommend platform, process, and architectural improvements to leadership.
Stay current on cloud attack techniques, CNAPP capabilities, and Wiz product roadmap; pilot new capabilities before broad rollout.