Threat Detection Researcher (Cloud) at Wiz

Tel AvivFull-timeThreat & AI ResearchPosted 7 months ago

About the Role

<div class="content-intro">Come join the organization that is redefining security for the AI era. As one of the<a href="https://www.wiz.io/blog/100m-arr-in-18-months-wiz-becomes-the-fastest-growing-software-company-ever"> fastest-growing startups ever,</a> we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven<a href="https://www.g2.com/products/wiz-wiz/reviews"> track record of success</a> and a culture that values world-class talent. Not to mention, we're now<a href="https://cloud.google.com/blog/products/identity-security/google-completes-acquisition-of-wiz"> powered by Google</a>, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun!</div><h3>Minimum Qualifications</h3> <ul> <li>6+ years of hands-on experience in security or threat research, with a proven track record of driving investigations to actionable, real-world impact.</li> <li>Experience conducting data-driven research and working with large-scale telemetry.</li> <li>Proficiency in Python, Go, and query languages (e.g., KQL, SQL).</li> <li>Strong self-motivation and ability to independently drive complex research projects from concept to delivery.</li> </ul> <h3>Preferred Qualifications</h3> <ul> <li>Familiarity with cloud infrastructure (AWS, GCP, Azure), Kubernetes, and modern cloud-native architectures.</li> <li>Background in incident response, red teaming, or threat hunting.</li> <li>Hands-on experience building and shipping security detections as part of a product.</li> <li>Experience writing technical blogs, publishing security research, or speaking at industry conferences.</li> <li>Leveraging AI/LLM-driven tools to enhance detection generation and telemetry analysis.</li> <li>Clear and effective communicator with excellent collaboration skills, comfortable working across teams and disciplines.</li> </ul> <h3>About the job</h3> We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of Wiz. In this role, you will further develop the Cloud-native Threat Detection domain. Check out some of our recent research: <ul> <li> <a href="https://www.google.com/url?q=https%3A%2F%2Fwww.wiz.io%2Fblog%2Fdetecting-malicious-oauth-applications" target="_blank">Detecting Malicious OAuth Applications</a> </li> <li> <a href="https://www.google.com/url?q=https%3A%2F%2Fwww.wiz.io%2Fblog%2Ftracking-teampcp-investigating-post-compromise-attacks-seen-in-the-wild" target="_blank">Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild</a> </li> <li> <a href="https://www.google.com/url?q=https%3A%2F%2Fwww.wiz.io%2Fblog%2Fwiz-discovers-cloud-email-abuse-campaign" target="_blank">Wiz Discovers Cloud Email Abuse Campaign</a> </li> </ul> <h3>Responsibilities</h3> <ul> <li>Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.</li> <li>Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.</li> <li>Expand Wiz's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.</li> <li>Conduct deep technical research into complex cloud services to uncover novel attack vectors.</li> <li>Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.</li> <li>Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.</li> </ul><div class="content-conclusion">Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.  By submitting your application, you acknowledge that Wiz will process your personal data in accordance with <a href="https://www.wiz.io/legal/privacy" target="_blank">Wiz's Privacy Policy.</a></div>

About the Role

Related Roles