Cloud Security SRE

• Implement and manage cloud vulnerability management processes using Wiz across multi-account AWS environments.
• Continuously monitor AWS infrastructure for vulnerabilities, misconfigurations, exposed secrets, malware, and compliance violations.
• Analyze Wiz security findings and prioritize remediation based on exploitability, business impact, attack path analysis, and risk scoring.
• Work with application, infrastructure, and DevOps teams to remediate vulnerabilities within defined SLAs.
• Perform root cause analysis for recurring security issues and recommend long-term remediation strategies.
• Validate remediation activities through rescanning and vulnerability verification.
• Integrate Wiz findings with ticketing systems such as ServiceNow or Jira for automated remediation workflows.
• Develop dashboards and executive reports showing vulnerability trends, remediation metrics, risk posture, and compliance status.

Monitor vulnerabilities affecting:

• EC2 instances
• Amazon EKS clusters
• Amazon ECS workloads
• AWS Lambda functions
• Amazon RDS databases
• Amazon S3 buckets
• Amazon ECR container images
• IAM identities and permissions
• VPC networking components

• Identify internet-exposed assets and prioritize risks using attack path analysis.

• Collaborate with DevSecOps teams to integrate vulnerability scanning into CI/CD pipelines.

• Automate vulnerability reporting, notification, and remediation using AWS Lambda, EventBridge, Step Functions, or Python scripts.

• Track remediation SLAs and ensure compliance with internal security policies.

• Support security audits, regulatory compliance assessments, and penetration testing activities.

• Stay current with AWS security best practices, emerging vulnerabilities, and Wiz platform enhancements.