Wiz CNAPP Implementation Consultant

Remote, London·Added 3 days ago (last checked 10 Nov)

Agency

Xcede

19 open roles

Apply

Our summary

Work mode: Remote (London)
Contract: Freelance role, inside IR35
Closing date: Apply by Friday 25 December

Skills

Nice to have

Terraform

Requirements

What we're looking for

Hands-on experience implementing Wiz end to end in a large enterprise: connectors, deployment, policy configuration and tuning.
Strong multi-cloud security knowledge across AWS, Azure and/or GCP, including IAM, networking and Kubernetes.
Experience integrating a CNAPP or CSPM platform with SIEM, ITSM (ServiceNow/Jira) and CI/CD pipelines.
A track record of taking a security platform into BAU: runbooks, ownership models, training and handover.
Confident with stakeholders, from engineering teams to security leadership, in a matrixed organisation.

Nice to have

Wiz certifications, or delivery experience with a Wiz partner or Wiz Professional Services.
Experience with other CNAPP tools (Prisma Cloud, Microsoft Defender for Cloud, Orca, Lacework).
Infrastructure-as-code (Terraform) and security automation.
Experience in regulated sectors such as medical devices, life sciences, pharma or financial services.

The role

Wiz CNAPP Implementation Consultant (Freelance)

The opportunity A FTSE 100 global medical technology manufacturer has selected Wiz as its CNAPP platform after an enterprise evaluation. They now need an experienced consultant to take it from selection to a stable, fully operational BAU capability.

This is a hands-on, end-to-end role within a wider cloud security programme. That programme supports cloud adoption, AI, SaaS, data platforms and M&A integration across a large, regulated enterprise. You'll work alongside the client's security teams and Wiz Professional Services.

What you'll do

Discovery and design: confirm the environment, licensing, prerequisites and integrations, then define the implementation design and sequence.
Infrastructure onboarding: onboard all in-scope AWS, Azure, GCP, Kubernetes and SaaS environments into Wiz, then validate discovery and coverage.
Integrations: connect Wiz to SIEM/SOC tooling, ticketing (e.g. ServiceNow, Jira), CI/CD and vulnerability management, and prove data flows end to end.
Configuration and tuning: build the policy baseline, risk prioritisation, ownership mapping, dashboards, reporting and exception handling.
Operationalisation: set up finding routing and operating procedures, run training and knowledge transfer, and provide hypercare into BAU.
Roadmap: recommend and prioritise next steps for coverage, controls, automation and measurable risk reduction.
Governance: keep clear implementation records, report on progress and evidence acceptance against success criteria.