Minimum qualifications
Bachelor's degree in Computer Science/Software Engineering or a related field, or equivalent experience.
Deep knowledge of the internals of at least one major OS (Linux, Windows, or macOS): processes and threads, memory management, file systems, networking, and syscall/kernel interfaces.
Solid debugging skills with low-level tools (gdb/lldb, WinDbg, perf, strace, crash dumps, etc.).
Preferred qualifications
4+ years of experience in systems or low-level software development.
Strong engineering fundamentals: concurrency, performance, and defensive coding.
Production experience with Rust.
Experience with Linux development, including eBPF (CO-RE, verifier constraints, kprobes/tracepoints/LSM), kernel development, cgroups/namespaces, and containers.
Experience with Windows development, including kernel driver development (minifilters, callbacks, ETW, WFP), WDK, and BSOD analysis.
Experience with macOS development, including Endpoint Security framework, system extensions, and XNU internals.
Experience building security products such as EDR, antivirus, or runtime protection agents.
Familiarity with Kubernetes, Docker, and cloud platforms (AWS, GCP, Azure).
Experience shipping software that runs on customer-managed infrastructure at scale.
About the job
We're looking for an experienced Low-Level OS Engineer to join the Wiz Runtime Sensor team. The Sensor is a lightweight security agent that runs on millions of customer machines. These include Kubernetes nodes, cloud VMs, serverless containers and developer workstations, on Linux, Windows and macOS. It monitors activity at the OS level, detects threats in real time, and can block them as they happen. Code in the sensor runs inside the kernel and alongside our customers' production workloads, so correctness, performance and stability come first. If you enjoy working close to the metal and want your code to protect some of the largest environments in the world, we'd like to hear from you.
Responsibilities
Build sensor components end to end, from research and design through implementation, rollout, and production monitoring.
Develop and maintain OS-level monitoring: eBPF programs on Linux, kernel drivers on Windows, and system extensions/Endpoint Security on macOS.
Take part in technical and architectural decisions for a codebase shared across several OS variants and architectures.
Do design and code reviews.
Analyze and improve CPU, memory, and stability of a component that runs on every customer host.
Investigate production issues across a very large and varied fleet, from kernel version quirks and crash dumps to telemetry analysis.
Work with Detection Research, Backend, DevOps, and Product teams.
#LI-DNI
Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship.
Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.
By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.