Threat Detection Researcher (Windows / Linux / MacOS)

Join Wiz, a leading cloud security company, as a Threat Detection Researcher. In this role, you will develop detections and tools to protect customers from cloud threats, investigate attacks on cloud environments, and collaborate closely with the R&D team. You will also work with customers in response to suspicious activity or potential incidents, create best practices and security policies, and deliver external-facing content based on security insights and novel research. Enjoy benefits such as a home office setup, health coverage, flexible PTO, and free lunch.

• Develop detections and tools to protect customers from cloud threats, and investigate attacks on cloud environments.
• Collaborate closely with the R&D team to transform research insights into product features, and work with customers in response to requests related to suspicious activity.
• Deliver external-facing content based on security insights and novel research, and create best practices and security policies based on research findings.
• Excellent communication and teamwork skills
• The ability to learn independently, to be self-driven and goal-oriented
• 6+ years of experience in security or threat research in which you conducted deep research with actionable conclusions and impacts
• Familiarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure)
• Experience delivering security detections in customer-facing product(s)
• Intimate knowledge of OS internals (Windows/Linux/MacOS) and networking
• Proficiency in Python for tool development and automation (knowledge of Go, Rust, or C/C++ – an advantage)
• Hands-on experience with malware analysis/reverse engineering/vulnerability research
• Familiarity with notable threat actors and threat intelligence analysis
• IR/red-team/threat-hunting experience
• Experience leveraging AI to supercharge research and detection workflows
• Deep knowledge of modern threat classes (Supply Chain, CI/CD, or threats targeting AI infrastructure and agentic frameworks)