Drimva

Wiz

Threat Intelligence Researcher (Cloud)

$160K–$220K

Remote - USA +1 · Remote · Full-time · Posted Mar 2, 2026

Location
Remote - USA
USA - Remote
Experience
5+ years.
Visa sponsorship
Applicants must have the legal right to work in the country where the position is based without visa sponsorship; the role does not offer visa sponsorship.

About the job

Tracks, analyzes, investigates, and reports on advanced threats and campaigns targeting cloud environments and Wiz customers.

What you'll do

  • Identify, analyze, and track state-backed or financially motivated attackers targeting cloud ecosystems.
  • Hunt across data sources and use open and closed data to track attacker infrastructure and malware.
  • Investigate and attribute incidents and communicate novel findings to customers and the public.

What they ask for

  • At least 5 years of security or threat research experience focused on advanced state-backed actors or sophisticated financially motivated campaigns, with a track record of tracking sophisticated threat actors.
  • Experience with large-scale telemetry, infrastructure hunting, query languages, and scripting.
  • Familiarity with malware analysis and using YARA to hunt for malware.
  • Deep expertise in at least one actor-tracking mechanism, such as malware or infrastructure.

Nice to have

  • Knowledge of AWS, GCP, Azure, Kubernetes, and cloud-native architectures.
  • Experience building scalable tools, public communication of novel findings, or a background in incident response, threat intelligence, or threat hunting.

Pay

$160,000 — $220,000 USD (base salary)

Tools

YARA, AWS, GCP, Azure, Kubernetes

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 5, 2026 (UTC)