Platform Security Researcher

Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds What You'll Do • Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights • Map risk vectors, build threat models, and translate them into actionable posture recommendations • Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis • Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention • Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities

Requirements: • 5+ years in security research, cloud security, or DevSecOps • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows. • Ability to own research initiatives end-to-end in a fast-moving environment • Excellent written and spoken English  Advantages • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines • Experience with DSPM, data classification, or data security tooling • Background in supply chain security (SBOM, dependency and artifact security) • Open-source contributions, published research, or conference talks