Oleh Jobs
Sign inMatch my CV

All jobs

Cloud Security Researcher

Upwind Security

Where
Ramat Gan, Israel, hybrid
Language, from the listing
No Hebrew mentioned. Asks for fluent EnglishA missing mention doesn't mean Hebrew isn't needed. Ask if it matters to you.
Dates
Found 27 Sept 2026
Last checked on the employer's site
2 h ago (6 Oct 2026)
Source
Employer career page (Comeet)

What they ask for

  • 5+ years in security research, cloud security, or DevSecOps
  • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services
  • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes
  • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows.
  • Ability to own research initiatives end-to-end in a fast-moving environment
  • Excellent written and spoken English
  • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines
  • Experience with DSPM, data classification, or data security tooling
  • Background in supply chain security (SBOM, dependency and artifact security)
  • Open-source contributions, published research, or conference talks

Nice to have

  • Advantages

The full listing

Description Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds What You'll Do • Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights • Map risk vectors, build threat models, and translate them into actionable posture recommendations • Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis • Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention • Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements • 5+ years in security research, cloud security, or DevSecOps • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows. • Ability to own research initiatives end-to-end in a fast-moving environment • Excellent written and spoken English Advantages • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines • Experience with DSPM, data classification, or data security tooling • Background in supply chain security (SBOM, dependency and artifact security) • Open-source contributions, published research, or conference talks