
Threat Intelligence Researcher – Cloud
Posted Aug 4

Posted Aug 4
This is a fully remote position, open to applicants in United States.
• Identify, assess, and monitor advanced state-sponsored or financially motivated attackers targeting cloud environments.
• Explore various data sources to detect malicious campaigns aimed at Wiz customers.
• Utilize both open and restricted data to track the infrastructure and malware employed by advanced threat actors.
• Investigate and attribute incidents, campaigns, and threat actors to gain insights into their motivations and strategies.
• Convey innovative findings to customers and the general public.
• Over 5 years of experience in security or threat research, concentrated on advanced state-sponsored actors or complex financially motivated campaigns.
• Demonstrated success in tracking sophisticated threat actors.
• Capable of developing innovative and sustainable methods for identifying and monitoring threat actors across various datasets.
• Deep knowledge in at least one actor-tracking methodology, such as malware or infrastructure.
• Proficient in large-scale telemetry, infrastructure hunting, query languages, and scripting.
• Familiar with malware analysis and YARA.
• Willing to undertake multiple roles to enhance actor tracking capabilities.
• Understanding of attacker targeting related to AWS, GCP, Azure, Kubernetes, and modern cloud-native architectures.
• Experience in creating repeatable and scalable tools for leveraging data sources.
• Proven track record of publicly sharing innovative and newsworthy findings.
• Background in incident response, threat intelligence, or threat hunting.
• Legal authorization to work in the United States without the need for visa sponsorship.
• Base salary ranging from $160,000 to $220,000 USD annually.
• Bonus opportunities.
• Equity options.
• Comprehensive benefits package.
• Google employee benefits.
• Commitment to equal opportunity employment.
CrowdStrike
CrowdStrike
Ziff Davis
Ookla
Get handpicked remote jobs straight to your inbox weekly.