Threat Intelligence Researcher (Cloud)

The role

You will track, analyze and report on advanced threats that target cloud environments. You will hunt through many data sources to find malicious campaigns against Wiz customers and attribute incidents to threat actors.

What you will do

• Identify, analyze, and track advanced state-backed or financially motivated attackers that target cloud ecosystems.
• Hunt through a wide range of data sources to identify malicious campaigns targeting Wiz customers.
• Leverage open and closed data to track the infrastructure and malware used by advanced actors.
• Investigate and attribute incidents, campaigns, and threat actors to understand what motivates them.
• Communicate novel findings to multiple audiences, including customers and the public.

Required qualifications

• 5+ years of experience in security or threat research, focused on advanced state-backed actors or sophisticated financially motivated campaigns.
• Proven track record of tracking sophisticated threat actors.
• Experience working with large-scale telemetry, including infrastructure hunting and pivoting through query languages and scripting.
• Familiarity with malware analysis and using YARA to hunt for malware.
• Ability to find novel and durable ways of identifying and tracking threat actors across multiple data sets.
• Deep subject matter expertise in at least one actor tracking mechanism (malware, infrastructure, etc.).
• Willingness to take on multiple roles to build out actor tracking.
• Legal right to work in the country where the position is based.

Nice to have

• Knowledge of how attackers target AWS, GCP, Azure, Kubernetes, and modern cloud-native architectures.
• Experience building tools to exploit data sources in a repeatable and scalable manner.
• Track record of public communication of novel and newsworthy findings.
• Background in incident response, threat intelligence, or threat hunting.

Benefits

• Base salary, bonus, equity and benefits are offered as part of compensation.
• Benefits described at Google.

Before you apply

• Applicants must have the legal right to work in the country where the position is based.
• This role does not offer visa sponsorship.

About the company

Wiz is a fast-growing security company that helps teams secure cloud and AI applications, and it is now powered by Google. Its platform is trusted by over 65% of the Fortune 100.