Low Level Engineer, Runtime Sensor at Wiz

The role

Wiz, the cloud and AI security company now part of Google, is hiring a low-level OS engineer in Tel Aviv to join the team behind its Runtime Sensor. This small security agent runs on millions of customer machines, including developer laptops, Kubernetes nodes, serverless containers and cloud VMs, on Linux, Windows and macOS. It watches what happens at operating system level, spots threats as they occur and can stop them. Because its code runs in the kernel next to customers' production workloads, correctness, performance and stability are the first priorities.

What you will do

• Build Sensor components all the way through research, design, implementation, rollout and production monitoring.
• Write and maintain OS-level monitoring: kernel drivers on Windows, eBPF on Linux, and system extensions and Endpoint Security on macOS.
• Have a say in the technical and architectural choices for one codebase that spans many operating systems and architectures.
• Carry out design and code reviews.
• Improve the CPU use, memory use and stability of software that runs on every customer host.
• Diagnose production problems across a huge and varied fleet, from kernel version oddities to crash dumps and telemetry.
• Collaborate with the Product, DevOps, Backend and Detection Research teams.

What you need

• A degree in Computer Science or Software Engineering, a related field, or equivalent experience.
• In-depth knowledge of how at least one of Linux, Windows or macOS works inside: processes and threads, memory, file systems, networking, and syscall and kernel interfaces.
• Strong debugging with low-level tools such as gdb or lldb, WinDbg, perf, strace and crash dumps.

Nice to have

• 4 or more years of systems or low-level development.
• Strong fundamentals in concurrency, performance and defensive coding.
• Rust in production.
• Linux work: eBPF (CO-RE, verifier limits, kprobes, tracepoints, LSM), kernel development, cgroups, namespaces and containers.
• Windows work: kernel drivers (minifilters, callbacks, ETW, WFP), WDK and BSOD analysis.
• macOS work: the Endpoint Security framework, system extensions and XNU internals.
• Building EDR, antivirus, runtime protection agents or similar security products.
• Kubernetes, Docker and AWS, GCP or Azure.
• Shipping software to large customer-managed environments.

Good to know

You must already be legally allowed to work in Israel. Wiz does not offer visa sponsorship for this job.