Threat Detection Researcher: Windows/Linux/macOS

Cacheflow; New York (NY); On-site; USD 200,000 - 250,000; Full time

Job summary

Wiz is seeking a Threat Detection Researcher to advance the Wiz Runtime Sensor as part of the threat research team. You will develop detections for cloud threats and collaborate with R&D to turn research into product features.

This full‑time role requires hands‑on analysis of real‑world attacks, collaboration with customers on incidents, and sharing insights through blogs and talks. Excellent communication and teamwork are essential.

Qualifications

• 6+ years in security or threat research with actionable conclusions and impacts.
• Intimate knowledge of OS internals (Windows/Linux/MacOS) and networking.
• Familiarity with cloud services, Kubernetes, cloud environment architecture, and major cloud providers (AWS, GCP, Azure).
• Proficiency in Python for tool development and automation (knowledge of Go, Rust, or C/C++ – an advantage).
• Experience delivering security detections in customer‑facing product(s).
• The ability to learn independently, to be self‑driven and goal‑oriented.
• Excellent communication and teamwork skills.

Responsibilities

• Develop detections and tools to protect customers from cloud threats.
• Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
• Hunt and analyze real‑world attacks and emerging cloud and AI threats.
• Collaborate closely with the R&D team to transform research insights into product features.
• Work with customers in response to requests related to suspicious activity or potential incidents.
• Create best practices and security policies based on research findings.
• Deliver external‑facing content (blog posts and talks at security conferences) based on security insights and novel research.

Skills

Threat research

OS internals

Cloud services

Python

Security detections

Communication

Tools

Go

Rust

C/C++

Job description

Wiz is seeking a Threat Detection Researcher to advance the Wiz Runtime Sensor as part of the threat research team. You will develop detections for cloud threats and collaborate with R&D to turn research into product features.

This full‑time role requires hands‑on analysis of real‑world attacks, collaboration with customers on incidents, and sharing insights through blogs and talks. Excellent communication and teamwork are essential.