Company DescriptionWix makes it possible for anyone to succeed online. Since 2006, we’ve grown to 5,000 employees in 17 countries, launched over 30 products, and serve over 230 million users and their visitors worldwide. At Wix, we push you to innovate, evolve in non-traditional ways, and collaborate. We operate in small teams that work closely together at a high level.Although we’re already industry leaders in web creation and business, our work is nowhere near done. Our goal is to become the main engine of the Internet so we can create a more open web for all.We’re proud to be an equal opportunity employer. Wix was built around the idea that everyone has the right to be successful, online. This same vision defines us as an employer: creating a work environment where everyone is welcome, and anyone has the right to succeed.Job DescriptionLead security efforts in your domains and reflect the security posture and gaps to stakeholdersDefine and execute annual roadmaps to mitigate security risks and design secure architectures in diverse business unitsReview and assess newer complex environments, discovering security gaps and creating security control in the form of policies and other mitigationsDevelop best practices and security standards for the organizationCarry out proof of concepts for the latest security tools based on security needs and your own researchWork closely with DevOps team and development teamsQualifications5+ years of practical experience in leading complex cybersecurity projects and procedures using the latest security technologyProficient in working with multiple cloud vendors (e.g., AWS, GCP, Azure) and knowledgeable about industry-leading security practices for configuration management in areas such as IAM, VPC, VMs, and moreDemonstrate expertise in deploying security measures within containerized environments, such as native Docker and managed Kubernetes platforms (e.g., Amazon EKS, Google GKE, Azure AKS)Thorough understanding of network security architecture, as well as proficiency in utilizing security tools like zero trust network access, layer 3 and 7 firewalls, and micro-segmentationIn-depth understanding and practical experience with Infrastructure as Code (IaC) practices, tools, and frameworks (e.g., Terraform, Ansible, Puppet). Demonstrated ability to secure dynamically provisioned infrastructure.Expertise in security domains, including but not limited to vulnerability and patch management, endpoint security, and configuration management, with a proven ability to design and implement robust security solutions across diverse environments.Proven experience integrating security into Continuous Integration/Continuous Deployment (CI/CD) pipelines.Ability to support an international, multi-cultural team with excellent oral and written communication skills in English and HebrewExceptional at organizing methodologies and solving problems, with a deep understanding of security products and their security aspectsSelf-learner with strong research capabilities and a delivery-oriented attitudeAdditional InformationWe are Wix’s Security Guild. We’re a group of highly motivated security engineers that are part of the Wix R&D group. We allow Wix developers and users to achieve their goals without risk, often meaning we find or create unique solutions. Our work is exceptionally challenging due to Wix’s scale, agility, and advanced technical diversity. When it comes to technology, we have the ultimate playground, and although we work together closely, there’s always space for independence, innovation, and creativity.
