Threat Detection Researcher (Cloud)

The role

You will do threat detection research for cloud environments. You will build and ship security detections into production and investigate real-world attacks across cloud, identity and infrastructure platforms.

What you will do

• Drive security detections from threat research and data analysis to production.
• Design behavioral baselines for complex cloud environments and build detections from them.
• Expand the detection engine with new, high-impact telemetry sources.
• Research complex cloud services to find novel attack vectors.
• Investigate real-world attacks across cloud, identity providers and IaaS platforms.
• Hunt and analyze emerging threats and active campaigns targeting the cloud.

Required qualifications

• 6+ years of hands-on experience in security or threat research.
• Proven track record of driving investigations to actionable, real-world impact.
• Experience conducting data-driven research and working with large-scale telemetry.
• Proficiency in Python, Go, and query languages such as KQL or SQL.
• Strong self-motivation and ability to independently drive complex research projects from concept to delivery.
• Legal right to work in the country where the position is based.

Nice to have

• Familiarity with cloud infrastructure (AWS, GCP, Azure), Kubernetes and cloud-native architectures.
• Background in incident response, red teaming or threat hunting.
• Hands-on experience building and shipping security detections as part of a product.
• Experience writing technical blogs, publishing security research or speaking at industry conferences.
• Leveraging AI/LLM-driven tools to enhance detection generation and telemetry analysis.
• Clear and effective communicator with excellent collaboration skills.

Before you apply

• Applicants must have the legal right to work in the country where the position is based.
• This role does not offer visa sponsorship.

About the company

Wiz is a fast-growing security company that connects code, cloud and runtime into a shared context to secure cloud and AI applications. The company is now powered by Google and is trusted by over 65% of the Fortune 100.