RemoteLeaf Logo
Log in Sign up

Threat Intelligence Researcher (Cloud)

5 months, 4 weeks ago
United States
Full-time
Senior
Security Analyst
Cybersecurity
AWS Azure GCP Kubernetes
Apply Now
Wiz

Wiz

Wiz is a leading cloud security platform trusted by Fortune 100 companies to prevent data breaches and vulnerabilities, enabling faster and secure cloud development.

IT Services
251-1K
Founded 2020
$900M raised
View All Jobs 22

Description

  • Identify, analyze, and track advanced state-backed and financially motivated attackers targeting cloud ecosystems.
  • Hunt across a wide range of data sources to identify malicious campaigns affecting Wiz customers.
  • Leverage open and closed data to track attacker infrastructure and malware.
  • Investigate and attribute incidents, campaigns, and threat actors to understand attacker behavior and motivation.
  • Communicate novel threat findings to customers and the public.
  • Build out actor tracking efforts and take on multiple roles as needed.
  • Report on advanced threats targeting cloud environments.

Requirements

  • 5+ years of experience in security or threat research, with a focus on advanced state-backed actors or sophisticated financially motivated campaigns.
  • Proven track record of tracking sophisticated threat actors.
  • Ability to find novel and durable ways to identify and track threat actors across multiple datasets.
  • Deep subject matter expertise in at least one actor-tracking mechanism, such as malware or infrastructure.
  • Experience working with large-scale telemetry, especially infrastructure hunting, query languages, and scripting.
  • Familiarity with malware analysis and using YARA to hunt for malware.
  • Willingness to take on multiple roles to build out actor tracking.
  • Knowledge of how attackers target AWS, GCP, Azure, Kubernetes, and modern cloud-native architectures (preferred).
  • Experience building tools to exploit data sources in a repeatable and scalable manner (preferred).
  • Track record of public communication of novel and newsworthy findings (preferred).
  • Background in incident response, threat intelligence, or threat hunting (preferred).
  • Applicants must have the legal right to work in the country where the position is based without visa sponsorship.

Benefits

  • Medical, dental, and vision insurance.
  • Home office setup reimbursement.
  • Flexible spending accounts.
  • Monthly connectivity reimbursement.
  • Employee Assistance Program (EAP).
  • Short- and long-term disability insurance.
  • Life and accident insurance.
  • 401(k) retirement savings plan with employer match.
  • Flexible paid time off plus 11 paid holidays.
  • Paid leave programs including parental, pregnancy health, medical, and bereavement leave.
  • Competitive base salary of $160,000 to $220,000 USD annually.
  • Potential incentive compensation.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

SIXGEN

Threat Hunter/Purple Team Operator

SIXGEN 51-250 Professional Services

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to hunt for threats, support red team engagements, and improve real-time defensive detection for government and critical-infrastructure customers.

United States Full-time Mid Level Security Analyst
Carbon Black Cybersecurity Elasticsearch PowerShell Python SIEM Splunk
6 hours, 44 minutes ago
PDI Technologies,

Manager, Threat Intelligence

PDI Technologies, 1K-5K Gas Utilities

PDI Technologies is seeking a Threat Intelligence, Threat Hunting, and Detection Engineering leader to build and lead a SOC program that protects more than 12,000 convenience retail, petroleum, hospitality, and automotive customers.

United States Full-time Lead Security Analyst
AWS Azure Cybersecurity Python SIEM Splunk
1 day, 6 hours ago
JustMarkets

Incident Response & DFIR Lead

JustMarkets 1-10 Capital Markets

Lead incident response and digital forensics investigations for a fintech company, coordinating containment, recovery, evidence preservation, and improvements to cyber defense capabilities.

Europe Full-time Lead Security Analyst
Active Directory AWS Linux Network Security PowerShell Python SIEM
1 week, 3 days ago
RecargaPay

Cyber Security Specialist

RecargaPay 251-1K Capital Markets

RecargaPay is hiring a Cyber Security Specialist to join its remote CSIRT team and lead detection, response, containment, and automation for security incidents across its cloud-native payments platform.

Brazil Full-time Senior Security Analyst
AWS Bash CrowdStrike Cybersecurity Elasticsearch Kibana Linux Python
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers