Threat Intelligence Researcher (Cloud)

Location: Remote (USA)

Salary: $160,000 — $220,000 USD (base salary)

Company

Wiz builds a cloud and AI security platform that connects code, cloud, and runtime into a shared context for threat detection and response.

What you will do

• Identify, analyze, and track advanced state-backed and financially motivated attackers targeting cloud ecosystems.
• Hunt across open and closed data sources to find malicious campaigns targeting Wiz customers.
• Investigate and attribute incidents, campaigns, and threat actors to understand attacker motivations and behavior.
• Use infrastructure and malware signals to track advanced actors across multiple data sets.
• Communicate novel findings to customers and the public.

Requirements

• 5+ years of experience in security or threat research, focused on advanced state-backed actors or sophisticated financially motivated campaigns.
• Proven ability to develop novel, durable methods for identifying and tracking threat actors across multiple data sets.
• Deep expertise in at least one actor tracking mechanism (malware, infrastructure, etc.).
• Experience working with large-scale telemetry, including infrastructure hunting and pivoting via query languages and scripting.
• Familiarity with malware analysis and using YARA for malware hunting.
• Legal right to work in the United States without visa sponsorship.

Nice to have

• Knowledge of how attackers target major cloud and identity providers (AWS, GCP, Azure), Kubernetes, and modern cloud-native architectures.
• Experience building repeatable, scalable tools to exploit data sources.
• Background in incident response, threat intelligence, or threat hunting.
• Track record of public communication of novel and newsworthy findings.

Culture & Benefits

• Full-time role with compensation including base salary, bonus, equity, and benefits.
• Remote work from the USA.
• Salary range depends on role, level, and location; recruiter shares the specific range during the hiring process.
• Benefits include those available through Google.

Hiring process

• Recruiter shares the specific salary range for the preferred USA location during the hiring process.
• Interviews evaluate threat research experience, actor tracking approach, and ability to work with large-scale telemetry and YARA-based hunting.