Threat Detection Researcher Job at Wiz (Tel Aviv)

Senior Product Manager – Threat Detection

As a Product Manager – Threat Detection, you will be responsible for driving the...

Location

United States

Salary:

182000.00 - 219000.00 USD / Year

Corelight

Expiration Date

Until further notice

Requirements

2+ years in a technical support, engineering, or security research role
3+ years in networking in a product or practitioner role
5+ years overall experience in cybersecurity, with a focus on network security and threat detection
Strong understanding of network protocols, network security principles, and intrusion detection methodologies
Experience with Zeek (Bro) and its applications within NDR and security operations
Experience with network forensics, packet analysis, and network-based anomaly detection
Strong analytical skills, with the ability to interpret and apply threat intelligence and attack frameworks (e.g., MITRE ATT&CK)
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent experience

Job Responsibility

Develop and maintain a cutting edge detection engineering program via collaboration with Corelight Labs Research
Execute the product strategy for Corelight’s threat detection capabilities
Research adversary tactics, emerging network threats, and novel detection methodologies to improve the effectiveness of Corelight’s NDR solutions
Work closely with threat researchers, SOC analysts, and detection engineers to develop high-fidelity detection logic and optimize network threat intelligence
Analyze network protocols and traffic patterns to identify new ways to extract valuable security-relevant insights
Collaborate with engineering, UX, and security research teams to develop new features and improve the usability of Corelight’s threat detection tools
Contribute to open-source security initiatives, representing Corelight in the broader security community and helping drive innovation
Act as a technical liaison between customers, security teams, and internal stakeholders to ensure Corelight remains the gold standard for network evidence collection
Define, prioritize, and refine product requirements for threat detection capabilities, integrations, and intelligence applications
Develop detection content, documentation, and best practices for leveraging Corelight’s platform in threat hunting and incident response workflows

What we offer

Equity
Additional benefits
Collaborative, inclusive, and growth-oriented culture
AI-assisted workflows
Machine learning models
Cloud security and SaaS-based solutions
Geographically distributed yet connected employee base

Fulltime

Research Manager

We are building a world class and uniquely targeted team to drive research throu...

Location

United States

Salary:

193000.00 - 248000.00 USD / Year

Corelight

Expiration Date

Until further notice

Requirements

BS in Computer Science or Engineering, or equivalent experience
2+ years of experience managing technical teams performing duties in the areas of security research, incident response, and/or DevOps concepts (e.g. sprint planning, delivery tracking)
5+ years of hands-on experience in at least one technical field of information security
security research, and detection engineering are preferred
Working knowledge of detection engineering, incident response, and threat hunting
experience with Zeek, Suricata, YARA, one or more SIEMs are strongly preferred
Working knowledge of software engineering practices
experience with Jira, git, and GitLab CICD are strongly preferred
Working knowledge of networking concepts and network protocols such as TCP/IP, HTTP, TLS, DNS, Kerberos, SMB
Working knowledge of programming in at least two languages

Job Responsibility

Manage a team of security researchers and detection engineers responsible for investigating, creating, and maintaining detection capabilities, and developing associated software engineering tools
Collaborate closely with the rest of the Corelight Labs leadership team to devise, pursue & meet project goals and deadlines
Collaborate closely with the Corelight Products and Engineering teams to coordinate cross-team projects

Fulltime

Senior Security Researcher - ITDR (Cortex)

We are looking for a Senior Security Researcher to join our Identity Threat Dete...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

At least 5 years’ experience with Active Directory security and identity related attacks
2+ years of experience with Entra ID (formerly Azure AD) or SAAS application - Advantage
In-depth knowledge of the inner-workings of operating systems
In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc
In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc
At least 2 Years of experience coding Python - Advantage
Strong knowledge of SQL language - Advantage
Experience with red-teaming / pentest of Entra ID - Advantage
Experience with machine learning / data analysis / cloud infrastructure / security - Advantage
Ability to drive and own projects from start to finish

Job Responsibility

Research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities
Focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale
Collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats
Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments
Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior
Develop and refine statistics-based classification algorithms and techniques to create and improve detection models
Research specific scenarios to enhance our model's capabilities
Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product
Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats

New

Senior Security Graph Engineer

The Defender Experts (DEX) Research team is at the forefront of Microsoft’s thre...

Location

India , Hyderabad

Salary:

Not provided

Microsoft Corporation

Expiration Date

Until further notice

Requirements

4+ years of experience in security research, detection engineering, threat lifecycle, cloud security in large-scale in complex cloud environments
Strong understanding of graph theory, graph databases (e.g., Neo4j, TigerGraph), and graph analytics with proficiency in Python or similar languages for data analysis and prototyping
Experience working with large-scale datasets, distributed systems and graph analytics projects
Ability to translate complex threat data into graphs and actionable insights
Experience with machine learning or statistical modelling applied to graph data
Proven ability to lead and execute advanced research on emerging cloud-based threats affecting both Microsoft and third-party security products across heterogeneous cloud environments
Knowledge of adversary infrastructure tracking, malware analysis, or campaign clustering
Extensive hands-on experience with cloud platforms—including, but not limited to, Azure—as well as a deep understanding of multi-cloud security challenges and solutions
B. Tech or Equivalent

Job Responsibility

Design and maintain scalable threat graphs that model entities such as devices, identity, threat actors, TTPs, infrastructure, and campaigns
Lead and execute advanced research to develop algorithms and heuristics to detect malicious patterns and relationships within graph data on emerging cloud-based threats impacting Microsoft and third-party security products across heterogeneous cloud environments
Collaborate with threat protection researchers, data scientists, and detection engineers to enrich graph models with contextual insights and refine detection and response strategies, to provide comprehensive threat coverage and response capabilities
Research and prototype novel graph-based techniques for threat detection, attribution, and prioritization in collaboration with internal and external security teams
Translate complex raw security data into actionable graph intelligence that enhances the effectiveness of security operations for a global customer base
Mentor, guide, and drive best practices among researchers and detection engineers on advanced graph-based threat hunting and incident response across diverse ecosystems
Contribute to industry knowledge and Microsoft’s security posture by publishing research, developing threat graph models, and proactively identifying threats and attack trends in the cloud

Fulltime

Network Threat Support Specialist

The Network Threat Support Specialist will be actively integrated into a compute...

Location

United States , Fort Meade or Columbia

Salary:

Not provided

GS Consulting

Expiration Date

Until further notice

Requirements

Must be a United States citizen
Position requires candidates to have the ability to obtain and maintain a background investigation
Bachelor's degree or equivalent military training
Experience discovering threats and/or anomalies in network data
Experience discovering and responding to network intrusions
Experience adjusting security controls to prevent malware and/or intrusion activity
Ability to produce formal documentation on analysis and assessments
Experience conducting analysis with DNI/DNR
Self motivated and willing to work with a team
The ability to appropriately manage individual schedule

Job Responsibility

Identify adversarial threats and activities against DoD and US government network
Analyze and discover threat and intrusion events
Leverage technical analysis capabilities to analyze malware and develop methods to defend against malicious activity
Respond to and analyze network intrusion and attack events
Characterize the capabilities of malware, document how to detect malware, and assess it’s impact
Analyze systems and networks of interest, identify network vulnerabilities, and create techniques to exploit networks
Write reports for customers based on research and analysis of cyber threat activities and techniques

Threat Intelligence Analyst

As a Threat Analyst at UpGuard, you will be an integral member of our Threat Sca...

Location

United States , Chicago

Salary:

120000.00 USD / Year

UpGuard

Expiration Date

Until further notice

Requirements

Expertise in Open Source Intelligence: Strong understanding of OSINT methodologies with a focus on the open, deep, and dark web
Understanding of Software Development: Solid grasp of software development processes to deconstruct and interpret vulnerability disclosures effectively
Cross-Team Collaboration: Excellent communication skills to work with the Customer Success & Support teams, explaining capabilities and resolving customer issues
Independence and Initiative: A self-starter attitude with the ability to take ownership of tasks and drive them to completion independently or collaboratively
Technical Skills in Scripting: Proficiency in scripting languages such as Python, with the ability to learn and adapt to new programming languages as needed

Job Responsibility

Analyze Data Leaks: Process and assess incoming data feeds to identify whether customers have been impacted by data leaks
Contribute to Threat Intelligence Feeds: Enhance UpGuard’s proprietary threat intelligence feeds by researching and integrating new findings
Develop Vulnerability Detections: Build new product and vulnerability detections by reverse-engineering applications, analyzing vulnerability disclosures, and creating robust detection methodologies
Conduct Open Source Intelligence (OSINT) and Security Research: Focus heavily on identifying, analyzing, and interpreting open-source intelligence across the open, deep, and dark web to identify risks and vulnerabilities

What we offer

Monthly Lifestyle subsidy: use this for financial, physical, and mental wellbeing
WFH set-up allowance: to ensure you have the right environment to work in, we will help you get set up within your first 3 months at UpGuard
$1,500 USD annual Learning & Development allowance: to support your career development all team members will be able to expense development opportunities against this allowance
Generous Annual Leave/PTO allowances: time to recharge your batteries
18 weeks paid Parental Leave: irrespective of parenting role
Personal Leave allowance: this includes sick & carer’s leave
Fully remote working environment: while we have physical offices in Sydney & Hobart, we do not mandate compulsory attendance
Top-spec hardware: all team members will be provided with top-spec laptops for their roles
Personal device security & online privacy protection subsidy: UpGuard provides team members with a paid subscription to personal device security & online privacy protection platform
Generative AI subsidy: UpGuard provides paid subscriptions for all team members to access generative AI tools to support their work

Fulltime

Senior Security Incident Response Analyst

We are looking for an Incident Responder with robust technical skills, expertise...

Location

Poland , Gdańsk

Salary:

256000.00 - 342000.00 PLN / Year

Atlassian

Expiration Date

Until further notice

Requirements

5+ years in security domains like Operations, Incident Response, Detection Engineering, Threat Research, or Engineering, with relevant incident response and investigation experience
Proficiency in modern programming languages (Python, Ruby, Java, Go) or scripting for security tasks
Experience with AWS, GCP, or similar cloud platforms
Experience in building and delivering projects from start to finish
Expertise in areas such as malware analysis, forensics, threat hunting, network analysis, or cloud endpoint analysis
Contributions to the security community or open source projects
Capable of explaining technical issues to non-technical stakeholders

Job Responsibility

Security Incident Management: Act as an escalation point, collaborate with partners, communicate updates, and work towards resolution. Participate in on-call roster and conduct post-incident reviews to analyze causes and recommend improvements
Investigation and Analysis: Investigate log data from multiple sources for signs of compromise, conduct threat hunts, research threat actor tools and tactics, and lead evidence collection and forensic analysis
Technical Solutions and Automation: Provide technical solutions to reduce incidents, build and maintain tools for automation, and develop security incident response guides and procedures
Advocacy and Training: Advocate for security best practices and secure coding standards, and conduct tabletop exercises and simulations to test and improve incident response readiness

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Principal AI Security Researcher

Microsoft Sentinel Platform NEXT R&D labs is the strategic incubation engine beh...

Location

United States , Multiple Locations

Salary:

139900.00 - 274800.00 USD / Year

Microsoft Corporation

Expiration Date

Until further notice

Requirements

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR equivalent experience
Ability to meet Microsoft, customer and/or government security screening requirements
Microsoft Cloud Background Check
5+ years of experience in cybersecurity, AI, software development lifecycle, large-scale computing, modeling, and/or anomaly detection
5+ years of professional experience in security operations, pen-testing, researching cyber threats, understanding attacker methodology, tools, and infrastructure
Demonstrated autonomy and success driving zero-to-one (0→1) initiatives
ML background and hands-on experience

Job Responsibility

Security AI Research: be the security expert to our AI-focused team, helping evaluate our systems on real data, improve system inputs, triage and investigate AI-based findings, leverage AI and security experience to incubate and transform our products, educate applied scientists in cybersecurity
Collaboration: Partner with engineering, product, and research teams to translate scientific advances into robust, scalable, and production-ready solutions
AI/ML Research: design, development, and analysis of novel AI and machine learning models and algorithms for security and enterprise-scale applications
Experimentation & Evaluation: Design and execute AI experiments, simulations, and evaluations to validate models and system performance, ensuring measurable improvements
Customer Impact: Engage with enterprise customers and field teams to co-design solutions, gather feedback, and iterate quickly based on real-world telemetry and outcomes

Fulltime

Threat Detection Researcher

Wiz

Location:
Israel , Tel Aviv

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 13, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Threat Detection Researcher