Wiz Security Administrator

Wipro Technologies
Norwich, UK
13 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Kubernetes Security Amazon Web Services Amazon S3 JIRA Microsoft Azure Cloud Computing Cloud Computing Security Configuration Management Databases DevOps Github Identity and Access Management Information Security Management
+17 more
Network Security Security Information and Event Management Systems Integration Policy as Code Data Logging Google Cloud Cloud Platform System Mttr Gitlab Cloudformation Kubernetes Tenable Nessus Bicep Terraform Api Management Static Application Security Testing Dynamic Application Security Testing

Job description

The Cloud Security (Wiz Admin) is responsible for administering, operating, and optimising Aviva’s Wiz Cloud Security Posture Management (CSPM/CNAPP) platform.

The administrator will drive operational excellence, support engineering teams, integrate Wiz into enterprise tooling, and maintain policy compliance and posture improvement., Platform Administration & Operations

Own day-to-day administration of the Wiz platform across all cloud environments. Maintain Wiz connectors, least-privilege roles, integration points, and scanning configurations. Ensure onboarding/offboarding of cloud accounts, subscriptions, and K8s clusters. Monitor platform health, ingestion coverage, API integrations, and license utilisation.

Cloud Posture Management

Review, tune, and maintain security policies, controls, and baselines (e.g., CIS, NIST, ISO). Validate and enhance attack path analysis, identity risk detection, and data exposure mapping. Prioritise findings using impact-based and exploit-path-based logic. Partner with Cloud Platform teams to ensure guardrails remain aligned with Wiz detections.

Shift-Left Enablement

Work with DevOps/SRE teams to embed Wiz in CI/CD pipelines for IaC scanning. Run onboarding sessions for teams on using Wiz Issues, Projects, and Policy-as-Code. Validate false positives/negatives and fine-tune policy gates for Terraform, ARM/Bicep, and CloudFormation.

Incident & Risk Handling

Support Cloud Security, SOC, and IR teams during investigations involving publicly exposed, exploitable, or high-risk cloud assets. Provide expert analysis on Wiz findings and attack paths; propose remediation and compensating controls. Contribute to post-incident reviews, root-cause analysis, and long-term posture improvements.

Integrations & Automation

Maintain integrations with Jira/ADO, SIEM/SOAR, Slack/Teams, and CMDB/GRC. Automate workflows for enrichment, prioritisation, ticketing, and reporting. Partner with Engineering to build auto-remediation playbooks for safe-to-fix classes (e.g., public S3, permissive IAM).

Governance, Reporting & Compliance

Produce monthly security posture reports for leadership and Risk/Compliance teams. Track KPIs (coverage, MTTR, SLA adherence, risk trends). Support external and internal audit requests using Wiz’s evidence and compliance modules. Manage exceptions/waivers and ensure they are reviewed and retired on schedule.

Requirements

Strong understanding of AWS, Azure, and GCP security controls and architecture. Hands-on experience with cloud IAM, network security, logging/monitoring, and workload security. Familiarity with Kubernetes security and container image scanning. Experience operating cloud security platforms (Wiz preferred; alternatives: Prisma, Lacework, Defender for Cloud). Working knowledge of Infrastructure-as-Code (Terraform strongly preferred). Understanding of identity and entitlements management (CIEM). Ability to analyse cloud attack paths and map misconfigurations to real exploitable risk.

Nice-to-Have Skills Required: Experience integrating security tools into CI/CD pipelines (Azure DevOps, GitHub, GitLab). Knowledge of SAST/DAST/Secret scanning tools. Exposure to SRE or Cloud Platform engineering.

About the company

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on uk.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

2:56 min

Provisioning a secure container infrastructure with Bicep

Matthias Falkenberg +1 · WWC 2022

3:08 min

Aligning engineering processes with core business impact metrics

Chris Riley · WWC 2021

3:05 min

Integrating an assistant application with Jira software

Felix Augenstein · LIVE

4:09 min

Selecting infrastructure tools and determining proper abstraction layers

Alayshia Knighten Alayshia Knighten · WWC 2024

3:07 min

Establishing service level agreements directly for internal platforms

Pawel Piwosz · LIVE

Videos

See all

Related articles

See all