About this Low Level Engineer role at Wiz, Inc.
Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation.
Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun!
We serve more than 65% of the Fortune 100 and process 230 billion files every day.
We're looking for an experienced Low-Level OS Engineer to join the Wiz Runtime Sensor team.
The Sensor is a lightweight security agent that runs on millions of customer machines.
- Bachelor's degree in Computer Science/Software Engineering or a related field, or equivalent experience.
- Deep knowledge of the internals of at least one major OS (Linux, Windows, or macOS): processes and threads, memory management, file systems, networking, and syscall/kernel interfaces.
- Solid debugging skills with low-level tools (gdb/lldb, WinDbg, perf, strace, crash dumps, etc.).
- 4+ years of experience in systems or low-level software development.
- Strong engineering fundamentals: concurrency, performance, and defensive coding.
- Production experience with Rust.
- Experience with Linux development, including eBPF (CO-RE, verifier constraints, kprobes/tracepoints/LSM), kernel development, cgroups/namespaces, and containers.
- Experience with Windows development, including kernel driver development (minifilters, callbacks, ETW, WFP), WDK, and BSOD analysis.
- Experience with macOS development, including Endpoint Security framework, system extensions, and XNU internals.
- Experience building security products such as EDR, antivirus, or runtime protection agents.
- Familiarity with Kubernetes, Docker, and cloud platforms (AWS, GCP, Azure).
- Experience shipping software that runs on customer-managed infrastructure at scale.
The Sensor is a lightweight security agent that runs on millions of customer machines.
These include Kubernetes nodes, cloud VMs, serverless containers and developer workstations, on Linux, Windows and macOS. It monitors activity at the OS level, detects threats in real time, and can block them as they happen. Code in the sensor runs inside the kernel and alongside our customers' production workloads, so correctness, performance and stability come first. If you enjoy working close to the metal and want your code to protect some of the largest environments in the world, we'd like to hear from you.
Responsibilities
- Build sensor components end to end, from research and design through implementation, rollout, and production monitoring.
- Develop and maintain OS-level monitoring: eBPF programs on Linux, kernel drivers on Windows, and system extensions/Endpoint Security on macOS.
- Take part in technical and architectural decisions for a codebase shared across several OS variants and architectures.
- Do design and code reviews.
- Analyze and improve CPU, memory, and stability of a component that runs on every customer host.
- Investigate production issues across a very large and varied fleet, from kernel version quirks and crash dumps to telemetry analysis.
- Work with Detection Research, Backend, DevOps, and Product teams.
#LI-DNI
Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship.
Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.
By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.
