Threat Intelligence Researcher (Cloud)

Location: Remote - USA. Applicants must have the legal right to work in the United States without visa sponsorship.

Base salary: $160,000–$220,000 USD per year, plus bonus, equity, and benefits.

Company

Wiz is a cybersecurity startup building a cloud and AI security platform that connects code, cloud, and runtime into a shared security context.

What you will do

• Identify, analyze, and track advanced state-backed and financially motivated threat actors targeting cloud ecosystems.
• Hunt through large-scale telemetry and multiple data sources to identify malicious campaigns affecting customers.
• Use open and closed data to track attacker infrastructure and malware.
• Investigate and attribute incidents, campaigns, and threat actors to understand their motivations.
• Communicate novel findings to customers and public audiences.

Requirements

• 5+ years of experience in security or threat research focused on advanced state-backed actors or sophisticated financially motivated campaigns.
• Experience tracking sophisticated threat actors and working with large-scale telemetry, query languages, and scripting.
• Familiarity with malware analysis and YARA-based malware hunting.
• Ability to develop durable methods for identifying and tracking threat actors across multiple datasets.
• Deep expertise in at least one actor-tracking mechanism, such as malware or infrastructure.
• Legal right to work in the United States without visa sponsorship.

Nice to have

• Knowledge of attacks against AWS, GCP, Azure, Kubernetes, and modern cloud-native architectures.
• Experience building repeatable and scalable tools for exploiting data sources.
• Public communication experience involving novel and newsworthy findings.
• Background in incident response, threat intelligence, or threat hunting.

Culture & Benefits

• Remote work within the USA.
• Base salary plus bonus, equity, and benefits.
• Opportunity to work on cloud and AI security for major global organizations.
• Work with threat research and security operations capabilities powered by Google.