Application Security Researcher jobs in Israel

About Us Novee is the AI penetration testing platform built for a world where attackers operate at machine speed. Founded in Tel Aviv in April 2025 by a team with decades of nation-state offensive security experience - including veterans of Unit 8200, Iron Dome, and elite zero-day research - we're turning that expertise into a platform that thinks like a real attacker, runs continuously, and uncovers the novel vulnerabilities that manual testers and scanners miss. We raised $51.5M in four months, backed by top investors YL Ventures, Canaan Partners, and Oren Zeev - one of the fastest funding trajectories in offensive security. Our proprietary AI model outperforms frontier LLMs by over 55% on real exploitation benchmarks, and we're just getting started. We're looking for exceptional people to join our mission: making continuous, intelligent offensive security the new standard. About the Role We're looking for an experienced Application Security Researcher to help customers maximize the value of Novee's AI-powered offensive security platform. In this role, you'll work hands-on with customer environments, validate security findings, investigate complex application vulnerabilities, and help organizations understand, reproduce, and remediate the risks identified by our platform. You'll collaborate closely with customers, Product, Engineering, AI Research, and Customer Success teams, providing valuable feedback that continuously improves the platform while serving as a trusted technical advisor throughout the customer journey, from complex deployments to production investigations. This is an ideal role for someone with a strong offensive security background who enjoys combining technical research with customer interaction and wants to help shape the future of AI-driven application security. Responsibilities Validate vulnerabilities discovered by Novee's AI platform and provide clear technical evidence of successful exploitation. Perform hands-on testing of modern web applications and APIs to verify findings and identify additional attack paths. Analyze complex application security issues, including authentication, authorization, business logic flaws, and API vulnerabilities. Help customers understand security findings, reproduce vulnerabilities, assess risk, and implement remediation recommendations. Investigate cases where the platform missed, misclassified, or incorrectly assessed vulnerabilities and provide actionable feedback to Product and Engineering teams. Collaborate closely with AI Research and Engineering teams to improve detection accuracy, attack coverage, and platform capabilities. Develop new attack methodologies and validation techniques for modern web applications. Stay current on emerging application security trends, offensive techniques, and modern attack methodologies. Support customers during complex deployments, integrations, and production troubleshooting, including BYOM deployments and connectivity to internal applications. Requirements 3+ years of hands-on experience in Application Security, Web Application Penetration Testing, Bug Bounty, or Red Team operations. Deep expertise in Web Application and API security. Strong understanding of OWASP Top 10, authentication, authorization, business logic vulnerabilities, SSRF, XXE, deserialization, injection flaws, and modern attack techniques. Experience using Burp Suite and other offensive security tools. Ability to clearly communicate complex security findings to both technical and non-technical audiences. Experience writing code or scripts to support security testing and automation (Python, JavaScript, Go, or similar). Strong analytical and problem-solving skills. Comfortable working independently in a fast-paced startup environment with a high degree of ownership. Experience working directly with large enterprise customers, troubleshooting complex technical environments, and supporting production deployments. Solid understanding of enterprise networking, authentication mechanisms, VPNs, proxies, and common application deployment architectures. Nice to Have Experience performing infrastructure penetration testing, including Active Directory assessments. Familiarity with Mobile or Infrastructure security assessments. Experience reviewing application source code. Experience developing security tooling or automation. Red Team experience. Experience participating in Bug Bounty programs. Familiarity with AI-powered security products or LLM technologies. What We Offer The opportunity to help shape the future of AI-powered offensive security. Direct impact on a platform protecting enterprise customers worldwide. Close collaboration with world-class security researchers, AI engineers, product leaders, and the founding team. High ownership with the opportunity to influence product direction and customer success. Exposure to cutting-edge AI and offensive security technologies. Competitive compensation package, meaningful equity, and outstanding benefits. The opportunity to join one of the fastest-growing companies in cybersecurity and help define the next generation of autonomous security.

If you’re interested in joining Forter but don't see an opportunity that you'd like to apply to, you came to the right place! Send us your resume and some information on what you have that we need. Since this is not a current job posting, we will not be checking it with the same frequency as our current open position. For this reason, we will not send rejection emails from this posting. We'll keep your information on file and will reach out if we find a match! About Us: Digital commerce is built on trust. At every point along the eCommerce journey, businesses must make a critical decision: Can I trust this customer? Answering this simple question accurately and instantly is powerful—it can accelerate revenue growth and strengthen a company’s connection with its customers. How do we do it? Forter was founded on the insight that it's not about what is being purchased, nor where— but who is behind the interaction. The Forter Decision Engine finds patterns across more than one billion identities in our dataset. We isolate fraudsters and protect customers—ensuring everyone gets the experience they deserve. Given that trust is central to how we operate, Forter is very much driven by a defined set of values. We attract remarkable talent and have retention and engagement levels that are well above benchmarks. We’re meticulous about strengthening our culture as we grow and ensuring this is an environment where people can have outsized impact. Life as a Forterian: We are a team of over 500 Forterians spread across 3 different continents. Our success so far in the marketplace has allowed us to achieve a total series F valuation of over $3 Billion, making us the most valuable privately-held fraud prevention company globally. Our investors include Tiger Global, Bessemer, Sequoia Capital, March Capital, and Salesforce Ventures. Forter's Applicant Privacy Policy

Interested in joining JNS but don't see the right opening right now? We're always looking to connect with talented people. Submit your resume here, and we'll reach out if a future opportunity is a good match. JNS is an equal opportunity employer committed to creating an inclusive workplace and welcomes applications from all qualified candidates.

Description Thanks for your interest in our open positions! We invite you to submit your application and join our candidate pool. We also recommend regular visits to our careers page to review any new openings (you can even bookmark it!) https://www.zim.com/about-zim/careers Wishing you a Z-Factor day, ZIM’s Talent Acquisition team Requirements No specific qualifications required

Description Did you not find a relevant job? Still interested in working at ZIM? You can send your general application, and we'll contact you if it appears to be a good match. Requirements No specific qualifications required

Cato Networks is the converged network and security cloud for the AI era. As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents. Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide. We're looking for an Application Security Researcher to join us. In this critical role, you will assist us in validating our services and environments according to the highest security standards. Also, You will work closely with our R&D and Product teams, and solve complex security problems. Responsibilities: • Continuously checking and improving security measures to protect our systems. • Reviewing system architecture, design, and code to find and fix security weaknesses before they become a problem. • Helping developers follow secure coding practices and learn how to prevent security risks. • Staying updated on new security threats and best practices to keep our security standards high. • Contributing to Cato’s security research blog. • Evaluating the security of AI and agentic systems, and applying AI-assisted tools to security research. Requirements: • At least 3 years of experience in application security or vulnerability research. • Hands-on experience in penetration testing for web, mobile, infrastructure, and thick client applications. • Experience bypassing security tools like RBI, EDR, and DLP. • Programming skills, with a preference for Java, Go, or C. • Ability to find and fix security flaws in open-source libraries and third-party software. • Knowledge of supply chain attacks and how to prevent them. • Hands-on experience with AWS cloud attacks and mitigations (preferred). • Understanding of microservices architectures, Docker, and Kubernetes. • Strong problem-solving skills and the ability to work independently. • Good communication skills and a passion for sharing knowledge. • Understanding of network security and encryption protocols. • Familiarity with AI and agentic systems, including their security risks and testing approaches. Additional Skills (Preferred): • Experience using SAST/DAST tools for static and dynamic code analysis. • Experience working in Agile teams and collaborating with different departments. • Security certifications like OSCP, CRTP, OSWE, or similar. • Ability to lead security projects and initiatives. • Adaptability to a fast-paced environment. • Knowledge of current security threats and how to defend against them. • Experience with writing security blogs, CVE research, or bug bounty programs is a plus. • BSc in Computer Science- an advantage.

Moon Active is one of the world’s fastest-growing mobile game companies, providing entertainment to millions of active users across the globe. The company is headquartered in the heart of Tel Aviv. We’re looking for an experienced Application Security Researcher to join our Security team. As an Application Security Researcher, you’ll take an active role in guiding our development teams to ensure Moon Active’s mobile games are designed and implemented securely. You'll be helping manage Moon Active’s secure development lifecycle in our products that serve millions of users daily. In your role, you will help secure the company’s use of AI and enable its safe adoption across the organization. At the same time, you will use AI extensively in your own work to improve the effectiveness and impact of security. Responsibilities • Collaborate with the development teams to conduct design review, code review, and dynamic analysis. • Identify, communicate and drive the resolution of vulnerabilities. • Research and advocate for new security solutions and technologies. • Continue to drive early security evaluation by conducting iterative security testing. • Design and develop AI-powered internal security tools to automate security processes. • Operate as an incident responder for triage pertaining to applicative vulnerabilities. Requirements • 3+ years of proven experience in AppSec research, including a deep understanding of major AppSec attacks, vulnerabilities and mitigations including SQL injection, Deserialization, RCE, etc or relevant military service. • 3+ years of proven experience with high-level code auditing on backend or relevant military service. • Familiarity with a wide range of programming languages (Go, JavaScript, TypeScript, etc) and Software Development Life Cycle (SDLC). • Hands-on experience in leveraging AI capabilities for Application Security. • Deep understanding of how to secure AI-powered applications. Advantages • Experience with cloud environments - specifically AWS and GCP. • Found a high-severity vulnerability in a popular app. • Familiar with mobile application platforms and APIs like Google Play, App Store. #LI-Hybrid