Pentest Product Associate

The role

The Pentest Product Associate is the main operator of Wiz's AI-driven Dynamic Application Security Testing (DAST) agent. The role also builds detection methods for cloud-native technologies and tunes the attack policies the agent uses to find vulnerabilities.

What you will do

• Develop advanced detection algorithms to classify cloud technologies while fine-tuning the attack policies that define how agents identify and exploit vulnerabilities
• Analyze cloud services, APIs, and log payloads to review complex attack paths, reducing false positives and ensuring compliance with industry standards
• Stay at the forefront of novel attack vectors and emerging cloud/API threats, translating new techniques into executable behaviors for the Wiz DAST engine
• Collaborate directly with Research, Backend, and R&D teams to turn operational insights into feature requests

Required qualifications

• 2 years of hands-on experience in AppSec or penetration testing, including proficiency with enterprise tools like Burp Suite, OWASP ZAP, or Acunetix
• Hands-on experience with Linux, Windows, Docker, Kubernetes, web protocols (HTTP/S, REST, GraphQL), and authentication mechanisms (OAuth, SAML)
• Proficiency in scripting languages such as Python, Bash, or Go to automate security tasks and interact with codebases
• Solid knowledge of networking concepts, the OSI model, and cloud infrastructure (AWS, Azure, or GCP)

Nice to have

• Knowledge of AI/ML and how LLMs or reinforcement learning agents operate within a cybersecurity context
• SaaS and cloud experience, with familiarity in AWS, Azure, or GCP environments and modern cloud-native architectures
• A red teaming background, with experience in simulated adversarial attacks and bypassing standard WAF or security controls
• An analytical mindset with the ability to diagnose complex logs and scans to distinguish between tool failures, configuration issues, and valid security findings
• Self-motivated with the ability to work collaboratively and communicate high-stakes security concepts effectively across teams

Before you apply

• Applicants must have the legal right to work in the country where the position is based
• This role does not offer visa sponsorship

About the company

Wiz is a fast-growing security company that secures cloud and AI applications by connecting code, cloud, and runtime into one shared context. It is now powered by Google and is trusted by over 65% of the Fortune 100.