Minimum qualifications

• 5+ years of hands-on experience in security or security research.
• A strong threat-modeling mindset - deep understanding of both how attackers approach complex environments and how enterprises defend them
• Deep understanding of how complex software systems are built, so you can find where they're vulnerable (Low-level, Distributed, or Core System Engineering mindset)
• A foundation in program analysis - parsing, compilation and static code analysis — and comfort reasoning about code as data.
• Proven ability to define and implement AI agents, and to make their output reproducible.
• Proven ability to work independently, prioritize, and carry complex, multi-quarter projects from concept to working production grade software.

Preferred qualifications

• Security research experience in modern cloud environments (AWS, GCP, Azure, Kubernetes, etc) and infrastructure-as-code.
• Familiarity with model benchmarking, evaluation, fine-tuning, and with grading agent output against ground truth.
• Query languages for security telemetry, graph databases, or large-scale data-mining and clustering experience.
• Excellent written and verbal communication, with a track record of shipping alongside cross-functional teams (Product, Engineering, Research).

About the job

We're looking for a talented Applied Security Researcher to join our team and play a major role in Wiz's frontier research team, enabling contextual code understanding across complex cloud deployments.

Responsibilities

• Drive continuous research from initial concept through PoC to product integration.
• Build threat models for AI-native and cloud-native systems: how attackers approach them, how enterprises defend them, and where the gaps are.
• Build AI agents that analyze code and/or cloud infrastructure to produce specific insights.
• Analyze and understand real-world systems from a security perspective - architecture, data flows, and source code.
• Partner across Product, Engineering, and Research to ship what you discover.