Wiz (part of Google Cloud)
Principal Solutions Engineer - Application Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Wiz (part of Google Cloud)
Wiz, Inc. is a cloud security company founded in January 2020, with headquarters in New York City. The company aims to help organizations build secure cloud environments through its unified cloud security platform. This platform provides a normalizing layer across multi-cloud setups, allowing for rapid detection, prioritization, and mitigation of critical risks. Wiz offers a Cloud Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) that deliver comprehensive visibility and risk management from code to runtime. Key features include agentless visibility, attack path analysis, supply chain security, and real-time threat detection. The platform supports major cloud providers like AWS, Azure, and Google Cloud, and is designed for quick onboarding without impacting performance. As of March 2024, Wiz protects 5 million cloud workloads and serves a significant portion of the Fortune 100, including notable companies like Farmers Insurance.
Security at Wiz (part of Google Cloud)
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Wiz's AppSec philosophy is centered on the belief that "Security must move as fast as development." They prioritize "shift-left security," which involves integrating security early in the development process to "detect code risks, secrets, and misconfigurations before they hit production." Their risk approach is specifically tailored to "prioritize exploitable risk in cloud environments."”
Security Team
Key security leadership includes Anthony Belfiore (Chief Security Officer), Ryan Kazanciyan (Chief Information Security Officer), and Emily Heath (Board Member). While specific internal reporting lines are not public, the executive structure is established. There is evidence of active hiring for AppSec roles, such as a Principal Solutions Engineer for Application Security. Exact team size and internal org structure are not publicly available.
Key Initiatives
- Wiz implements "shift-left security" to integrate security early and detect risks before production.
- Their vulnerability management involves moving away from "scanning code, cloud, and runtime in silos" toward "automating risk reduction and threat response." They focus on "integrating security throughout the SDLC." Recent initiatives include the use of the Open Policy Agent (OPA) and establishing "CI/CD pipeline security best practices to protect your software lifecycle.".
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.