Job Description:
• Identify, analyze, and track advanced state-backed or financially motivated attackers targeting cloud ecosystems
• Hunt through diverse data sources to identify malicious campaigns targeting Wiz customers
• Use open and closed data to track infrastructure and malware used by advanced actors
• Investigate and attribute incidents, campaigns, and threat actors to understand attackers and their motivations
• Communicate novel findings to customers and the public
Requirements:
• 5+ years of experience in security or threat research focused on advanced state-backed actors or sophisticated financially motivated campaigns
• Proven track record tracking sophisticated threat actors
• Ability to develop novel and durable methods for identifying and tracking threat actors across multiple datasets
• Deep expertise in at least one actor-tracking mechanism, such as malware or infrastructure
• Experience with large-scale telemetry, infrastructure hunting, query languages, and scripting
• Familiarity with malware analysis and YARA
• Willingness to take on multiple roles to build actor tracking
• Knowledge of attacker targeting of AWS, GCP, Azure, Kubernetes, and modern cloud-native architectures
• Experience building repeatable and scalable tools for exploiting data sources
• Track record of publicly communicating novel and newsworthy findings
• Background in incident response, threat intelligence, or threat hunting
• Legal right to work in the United States without visa sponsorship
Benefits:
• Base salary of $160,000–$220,000 USD per year
• Bonus
• Equity
• Benefits
• Google benefits
• Equal opportunity employment