Company Description

Wix makes it possible for anyone to succeed online. Since 2006, we’ve grown to 5,000 employees in 17 countries, launched over 30 products, and serve over 230 million users and their visitors worldwide. At Wix, we push you to innovate, evolve in non-traditional ways, and collaborate. We operate in small teams that work closely together at a high level. 

Although we’re already industry leaders in web creation and business, our work is nowhere near done. Our goal is to become the main engine of the Internet so we can create a more open web for all. 

We’re proud to be an equal opportunity employer. Wix was built around the idea that everyone has the right to be successful, online. This same vision defines us as an employer: creating a work environment where everyone is welcome, and anyone has the right to succeed.

• Lead security efforts in your domains and reflect the security posture and gaps to stakeholders

• Define and execute annual roadmaps to mitigate security risks and design secure architectures in diverse business units

• Review and assess newer complex environments, discovering security gaps and creating security control in the form of policies and other mitigations

• Develop best practices and security standards for the organization

• Carry out proof of concepts for the latest security tools based on security needs and your own research

• Work closely with DevOps team and development teams

• 5+ years of practical experience in leading complex cybersecurity projects and procedures using the latest security technology

• Proficient in working with multiple cloud vendors (e.g., AWS, GCP, Azure) and knowledgeable about industry-leading security practices for configuration management in areas such as IAM, VPC, VMs, and more

• Demonstrate expertise in deploying security measures within containerized environments, such as native Docker and managed Kubernetes platforms (e.g., Amazon EKS, Google GKE, Azure AKS)

• Thorough understanding of network security architecture, as well as proficiency in utilizing security tools like zero trust network access, layer 3 and 7 firewalls, and micro-segmentation

• In-depth understanding and practical experience with Infrastructure as Code (IaC) practices, tools, and frameworks (e.g., Terraform, Ansible, Puppet). Demonstrated ability to secure dynamically provisioned infrastructure.

• Expertise in security domains, including but not limited to vulnerability and patch management, endpoint security, and configuration management, with a proven ability to design and implement robust security solutions across diverse environments.

• Proven experience integrating security into Continuous Integration/Continuous Deployment (CI/CD) pipelines.

• Ability to support an international, multi-cultural team with excellent oral and written communication skills in English and Hebrew

• Exceptional at organizing methodologies and solving problems, with a deep understanding of security products and their security aspects

• Self-learner with strong research capabilities and a delivery-oriented attitude

We are Wix’s Security Guild. We’re a group of highly motivated security engineers that are part of the Wix R&D group. We allow Wix developers and users to achieve their goals without risk, often meaning we find or create unique solutions. Our work is exceptionally challenging due to Wix’s scale, agility, and advanced technical diversity. When it comes to technology, we have the ultimate playground, and although we work together closely, there’s always space for independence, innovation, and creativity.