Sr. Security Engineer (WIZ)

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Sr. Security Engineer (WIZ)

Toronto, Canada - onsite

New York tri-state area (NJ, Philadelphia, NYC) considered as a secondary option. Approximately 3 days/week onsite

Pay rate: $65 - $70/hr on W2

Responsibilities

• Design, implement, and maintain cloud-native container security controls across Kubernetes platforms (AKS, GKE, and EKS).
• Develop, tune, and maintain container threat detection rules to identify malicious activity, anomalous behavior, and indicators of compromise across cloud environments.
• Monitor runtime security events, investigate security alerts, and lead triage and incident response for container and Kubernetes workloads.
• Deploy, configure, and optimize Wiz Defend/CWPP capabilities, including runtime sensors, workload protection, and attack path analysis.
• Build and automate security guardrails, admission controller policies, and preventative controls using Infrastructure as Code (Terraform, Helm, GitOps).
• Secure the container software supply chain through image scanning, SBOM validation, image signing, and registry security.
• Identify, prioritize, and remediate container vulnerabilities and misconfigurations using risk-based exposure analysis.
• Develop and maintain Compliance-as-Code policies aligned with CIS, NIST, and STIG security benchmarks.
• Integrate security findings and threat intelligence into ServiceNow and enterprise vulnerability management workflows.
• Partner with Security Operations, Cloud Engineering, DevSecOps, and application teams to strengthen detection coverage, incident response, and overall cloud security posture.
• Conduct threat hunting and proactive analysis to identify emerging threats, improve detection logic, and enhance runtime protection capabilities.
• Support post-incident reviews through root cause analysis, corrective-action recommendations, and continuous improvement of detection and response.
• Key Skills & Qualifications
• Strong cloud security knowledge spanning AI/ML platforms, model pipelines, data layers, IAM, networking, and logging.
• Hands-on Wiz CNAPP expertise (CSPM, CIEM, DSPM, CWPP), including experience applying it to AI workloads, model hosting, and data pipelines.
• Experience designing security controls and architecture at the model, data, and platform levels - both preventive and detective.
• Compliance-as-Code fluency, including mapping Wiz findings to STIGs, native cloud policies, CI/CD, and governance workflows.
• Ability to interpret Wiz risk graphs and communicate risk-based exposure analysis: model misuse, data leakage, privilege escalation, and blast radius.
• Kubernetes experience across AKS, GKE, and EKS.
• Working knowledge of Terraform, Helm, and GitOps-based pipelines.
• Nice to Have
• Direct, hands-on Wiz platform experience is a significant plus.
• Container image / repository scanning experience.
• Deeper Terraform or IaC pipeline background. Open to strong, trainable candidates with somewhat less hands-on experience, provided their foundational cloud and container security skills are solid.

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.