Threat Intelligence Researcher (Cloud)

The role

You will track, analyze and report on advanced threats that target cloud environments. You will hunt for malicious campaigns against Wiz customers and attribute incidents to threat actors. The role covers cyber espionage and cyber crime.

What you will do

• Identify, analyze and track advanced state-backed or financially motivated attackers that target cloud ecosystems.
• Hunt through a wide range of data sources to identify malicious campaigns targeting Wiz customers.
• Use open and closed data to track the infrastructure and malware used by advanced actors.
• Investigate and attribute incidents, campaigns and threat actors, and understand what motivates them.
• Communicate novel findings to multiple audiences, including customers and the public.

Required qualifications

• 5+ years of experience in security or threat research, focused on advanced state-backed actors or sophisticated financially motivated campaigns.
• Proven track record of tracking sophisticated threat actors.
• Experience working with large-scale telemetry, especially infrastructure hunting and pivoting through query languages and scripting.
• Familiarity with malware analysis and using YARA to hunt for malware.
• Ability to find novel and durable ways of identifying and tracking threat actors across multiple data sets.
• Deep subject matter expertise in at least one actor tracking mechanism (malware, infrastructure, etc.).
• Willingness to take on multiple roles to build out actor tracking.

Nice to have

• Knowledge of how attackers target AWS, GCP and Azure, Kubernetes and modern cloud-native architectures.
• Experience building tools to exploit data sources in a repeatable and scalable manner.
• Track record of public communication of novel and newsworthy findings.
• Background in incident response, threat intelligence or threat hunting.

Benefits

• Base salary, bonus and equity
• Benefits (details at Google)

Before you apply

• You must have the legal right to work in the country where the position is based.
• This role does not offer visa sponsorship.

About the company

Wiz is a fast-growing startup that secures cloud and AI applications by connecting code, cloud and runtime into a shared context. The company is now powered by Google and works with over 65% of the Fortune 100.