Threat Intelligence Researcher (Cloud)

As a Threat Intelligence Researcher (Cloud) you track, analyze, and report on advanced threats targeting cloud environments. You’ll work with the Threat Research team to identify state-backed and financially motivated attackers that impact Wiz customers, using diverse data sources. This role combines research with clear, public-ready communication of findings and requires cross-functional collaboration. You join a fast-growing, Google-backed security company solving complex cloud security challenges at scale.

• base salary + bonus + equity + benefits

• Identify and track advanced attackers targeting cloud ecosystems
• Hunt across diverse data sources to find malicious campaigns affecting Wiz customers
• Utilize open and closed data to map infrastructure and malware used by actors
• Investigate and attribute incidents and campaigns to deepen understanding of attacker motivation
• Communicate novel findings to customers and the public

• 5+ years of experience in security or threat research focusing on state-backed actors or sophisticated campaigns
• Experience with large-scale telemetry and infrastructure hunting, including query languages and scripting
• Familiarity with malware analysis and YARA for hunting malware
• Ability to identify and track threat actors across multiple data sets
• Deep subject matter expertise in at least one actor-tracking mechanism (malware, infrastructure, etc.)
• Willingness to take on multiple roles to build out actor tracking

• Strong written and verbal communication
• Ability to explain complex findings to varied audiences
• Cross-functional collaboration
• Malware analysis
• YARA
• Telemetry data analysis