Upwind SecurityCloud Security Researcher
Tel Aviv · Remote · Full-time
Why join Upwind Security?
This could be huge if cloud and AI security become one platform that enterprises trust to watch every workload, agent and API in real time. Upwind Security, a cloud security company in San Francisco, closed a $300M Series C that beat 81% of comparable rounds, backed by TCV and Salesforce Ventures. All 100 open roles were posted in the last 30 days, 43 of them in sales.
JustBacked's take, based on Upwind Security's own site and its funding and hiring data.
Description
Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload
We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds
What You'll Do
- Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights
- Map risk vectors, build threat models, and translate them into actionable posture recommendations
- Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis
- Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention
- Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities
Requirements
- 5+ years in security research, cloud security, or DevSecOps
- Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services
- Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes
- Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows.
- Ability to own research initiatives end-to-end in a fast-moving environment
- Excellent written and spoken English
Advantages
- Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines
- Experience with DSPM, data classification, or data security tooling
- Background in supply chain security (SBOM, dependency and artifact security)
- Open-source contributions, published research, or conference talks