Cloud Security Researcher
1 week ago
Ramat Gan, Tel-Aviv District, Israel
Upwind Security
Full-time
Free with email or Google
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Free with email or Google
By continuing, you agree to our Terms & Privacy Policy.
Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments
- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end
- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds
What You'll Do
• Integrate new systems and domains
- from cloud to shift-left tooling and AI providers
- model their data, analyze and enrich it with context from across the platform to generate meaningful insights
• Map risk vectors, build threat models, and translate them into actionable posture recommendations
• Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis
• Shape how AI is applied on top of the platform's findings
- from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention
• Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements
• 5+ years in security research, cloud security, or DevSecOps
• Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services
• Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes
• Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows.
• Ability to own research initiatives end-to-end in a fast-moving environment
• Excellent written and spoken English Advantages
• Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines
• Experience with DSPM, data classification, or data security tooling
• Background in supply chain security (SBOM, dependency and artifact security)
• Open-source contributions, published research, or conference talks
- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end
- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds
What You'll Do
• Integrate new systems and domains
- from cloud to shift-left tooling and AI providers
- model their data, analyze and enrich it with context from across the platform to generate meaningful insights
• Map risk vectors, build threat models, and translate them into actionable posture recommendations
• Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis
• Shape how AI is applied on top of the platform's findings
- from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention
• Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements
• 5+ years in security research, cloud security, or DevSecOps
• Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services
• Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes
• Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows.
• Ability to own research initiatives end-to-end in a fast-moving environment
• Excellent written and spoken English Advantages
• Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines
• Experience with DSPM, data classification, or data security tooling
• Background in supply chain security (SBOM, dependency and artifact security)
• Open-source contributions, published research, or conference talks