Malware Researcher jobs in Tel Aviv-Yafo

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun! Minimum qualifications • 5+ years of hands-on experience in security research, red-teaming, penetration testing, incident response, or vulnerability research. • Strong understanding of network and application security, including core networking protocols (TCP/IP, DNS, TLS), web technologies, modern APIs, and real-world application- and network-layer exploitation techniques (e.g., OWASP API Security Top 10). • Strong scripting and automation skills (using Python, Bash, or equivalent). • Hands-on experience developing, customizing, using, or conducting research supporting vulnerability scanners (DAST / SAST / Network / Host scanners), writing detection rules, or building automated vulnerability and exploitability validation tools. • Strong sense of ownership and the ability to independently lead projects from research to delivery. • Strong writing and presentation skills in both English and Hebrew. Preferred qualifications • Experience with developing or researching cloud environments (AWS, Azure, or GCP). • Familiarity with security aspects of Kubernetes, containers, and/or CI/CD. • Familiarity with AI-assisted development tools such as Claude Code or similar. • Familiar with network and application scanning tools (Burp Suite, nmap, Metasploit, Nuclei, or similar). • Published security research, exploits/PoCs, or contributed to open-source security tooling. About the job As a Threat Researcher in Exposure & Risk Detection, you will drive research projects end-to-end to identify emerging threats, CVEs, and misconfigurations, assessing their real-world exploitability and customer impact. In this role, you will investigate cloud services, frameworks, and commonly deployed technologies to uncover new attack surfaces, and build automations to validate, benchmark, and monitor AI-driven detection capabilities at scale. You will collaborate closely with Product and R&D teams to transform research findings and attack methodologies into impactful product capabilities, directly shaping how our customers stay secure. Check out some of our recent research: • The Red Agent POV: How it Reasoned its Way to SSRF • Under the Radar: Exploring Spring Boot Actuator Misconfigurations • Beyond CVEs: The Exploitation of Everyday Misconfigurations • React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182 Responsibilities • Research emerging threats, CVEs, and misconfigurations to assess real-world exploitability and customer impact. • Design, build, and test detection rules and scanning logic for exposed and vulnerable assets. • Build automations to validate, benchmark, and monitor AI-driven detection capabilities at scale. • Investigate cloud services, frameworks, and commonly deployed technologies to uncover new attack surfaces. • Analyze large-scale scan results to identify and prioritize meaningful risks. • Drive research projects end-to-end, from initial idea to production-ready detection. • Collaborate closely with Product and R&D teams to transform research findings and attack methodologies into impactful product capabilities. Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.

NVIDIA is seeking a highly skilled and versatile Performance Research and Analysis Manager to join our Performance Group. This role will drive end-to-end performance strategy and execution for next-generation NVIDIA data centers and solutions based on GPU systems, NIC, Switch, DPU and Networking technologies. The ideal candidate will oversee, evaluating, and optimizing end-to-end AI GPU cluster-level performance for scaling out large scale distributed training and inference jobs communication. The role will focus heavily on RDMA, Networking Protocols, Collective Communication, Congestion Control, and Load Balancing algorithms. Secondarily, you will lead NVIDIA DPUs and Storage technologies for N-S use cases to support AI Inference jobs. Third, you will drive our Performance Dashboards and Observability for cluster-level performance analysis from a stream line telemetry across NICs, Switches, GPUs, and NVlink. What you'll be doing: • Drive end-to-end performance strategy, characterization, test plans, and optimization for next-generation NVIDIA AI GPU clusters, focusing on large-scale distributed training and inference workloads. • Deeply evaluate and optimize NVIDIA Networking core technologies performance, including RDMA/PRDMA, networking protocols, collective communication (NCCL), congestion control, and load-balancing algorithms. • Work on performance research and analysis of NVIDIA DPUs and storage technologies in North-South (N-S) use cases and deployment scenarios to maximize performance and efficiency for AI inference jobs. • Drive the strategy for performance observability and dashboards across next-generation NVIDIA data center solutions and supercomputers by leveraging scalable, streamlined telemetry pipelines to build performance dashboards and automated analytics based on real-time performance metrics across NICs, Switches, GPUs, and NVLink boundaries. • Perform deep root-cause analysis (RCA) on complex multi-node performance bottlenecks, driving actionable mitigation plans across hardware, firmware, and software teams. What we need to see: • B.Sc. or M.Sc. in Computer Science, Computer Engineering, Software Engineering, or equivalent technical experience. • 8+ overall years of experience and deep expertise in High Performance Networking, RDMA, and Systems level performance. • 3+ years of experience as an engineering team manager leading technical performance or R&D teams. • Hands-on experience analyzing and optimizing collective communication (e.g., NCCL, MPI) and network traffic patterns for large-scale distributed AI workloads (LLM training and inference). • Hands-on experience designing, deploying, and customizing Grafana dashboards for cluster monitoring, alerting, and data visualization. • Exceptional cross-team leadership, analytical thinking, and communication skills to drive alignment across hardware, software, and architecture groups. Ways to stand out from the crowd: • Proven track record of optimizing NCCL, RDMA/RoCEv2, and custom collective algorithms specifically tailored for multi-thousand GPU deployments running LLMs or Mixture-of-Experts (MoE) architectures. • Deep experience tuning advanced network traffic mechanisms such as adaptive routing, PFC/ECN congestion control, and packet-spraying technologies. • Experience building autonomous performance-driven tools, AI-assisted root cause analysis agents, or automated regression frameworks for continuous cluster-level performance evaluation. • Hands-on experience developing custom Grafana plugins, complex dashboard panels, or integrated alert management workflows using PromQL/LogQL for hyperscale or HPC environments. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. #LI-Hybrid

At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts are true pioneers, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey? JFrog Security is one of the main pillars of the JFrog offering and long-term strategy. We are pushing the boundaries of security analysis of both binaries and code, shifting left and bringing new and exciting features to both developers and DevOps. We are looking for an experienced malware researcher to join the team. As a Malware Researcher at JFrog, you will perform research on source code, compiled code, and various software supply chain attacks. The position requires proven experience in security nomenclature and an understanding of both high-level and low-level attacks. You’re welcome to examine the products of the research team’s work at https://research.jfrog.com. As a Malware Researcher at JFrog you will... • Research malicious code in public repositories from various coding languages and technologies. • Research malicious AI assets such as models, skills and plugins. • Define and implement ways to automatically detect malicious code in open-source software. • Write technical reports and outward-facing publications regarding all research subjects mentioned above. To be a Malware Researcher at JFrog you need... • 3+ years of malware research experience in any of the following languages: Native code (C, C++), .NET (C# etc), Python, Node.JS, Java, Go • Experience in writing technical reports • Programming experience in Python • Advantage – Experience in security research or analysis of AI assets - ML models, skills, and plugins. • Advantage – Binary reverse engineering experience

Description Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We're looking for a Threat Security Researcher to join our Threats team at the intersection of security research, AI, and product. You'll own detection research across runtime, cloud, network, identity, code, while actively shaping how AI capabilities are applied to solve real security problems at scale. • Conduct deep technical research into modern cloud environments and AI systems and discover novel attack techniques. • Lead product initiatives in the threats domain from inception to production. Collaborate closely with product, backend, and GTM, translating research into product capabilities. • Define and create complex detection logic over our vast telemetry, with a focus on coverage that scales across customer environments. • Identify gaps in detection coverage and evaluate detection quality. ensuring security logic is reliable and impactful. • Stay up to date with the evolving threat landscape (threat intelligence, campaigns) and incorporate into our product • Contribute to PR presence - technical research content, talks, open-source tooling. Requirements • 5+ years of experience in threat research, including threat hunting, incident response or detection engineering • Military background experience, university degree, or Ex-CNAPP • Curious, detail-oriented mindset with proven ability to self-learn complex topics and new mechanisms. • Hands-on skills with scripting languages (e.g., Python) as well as query languages (e.g., KQL • Ability to work independently and also across teams, in a dynamic, fast-moving, demanding environment • Strong written and verbal communication skills in English, with the ability to explain complex security concepts clearly to both technical and non-technical audiences. Advantages • Experience in AI Security Research • An AI-native mindset, you've built or applied AI-powered tooling in a security context • Experience conducting data-driven research and working with large-scale telemetry. • Experience in public-facing work, such as presenting at recognized industry conferences or authoring technical blog posts

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here. About Us SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity. What Are We Looking For? We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes. As a Senior Threat Researcher, you will be tasked with taking apart emerging and known cyber threats - leading in-depth investigations into threat actors, their capabilities, tools and operations, spanning across Endpoint and Cloud domains. This role combines hands-on technical analysis with strategic intelligence production, enabling our ThreatOps teams to protect our customers from adversaries across the ever evolving threat landscape. What Will You Do? Primary responsibilities include: • Conduct deep-dive technical analysis of malware samples, attacker infrastructure and protocols. • Track adversary progression, develop and maintain technical reports on threat actor profiles, malware families, and campaign timelines - curate and expand our internal Knowledge Base and IOCs collections. • Collaborate with threat intelligence, detection engineering, threat hunting and incident response teams in investigating intrusions and to translate research into actionable detections and defenses. • Work with our lab teams to improve our internal infrastructure and tooling. • Present findings to technical teams, leadership, and occasionally external partners or customers. What Skills and Knowledge Will You Bring? Ideal candidates will have: • 5+ years of experience in malware analysis, threat intelligence, threat hunting or incident response. • Deep understanding of the cybersecurity landscape, attack vectors and TTPs, especially on Windows. • Experience in reverse engineering (x86/x64, ARM\ARM64) and malware analysis (statically and dynamically). • Proficiency in C/C++ and scripting languages (Python, Powershell). • Experience with creating signatures (YARA, Snort, Sigma) to identify and track malware families. • Technical writing & content development skills. • Proven track record of publication or speaking at security conferences - advantage. • Experience leveraging agentic AI workflows for malware analysis and detection engineering tasks (reverse engineering, code auditing, signature writing) - advantage. • Knowledge about internal working of EDR products - advantage. Why SentinelOne? AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place. We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family: Equity & Rewards • Restricted Stock Units (RSUs) • Employee Stock Purchase Plan (ESPP) Time Off & Wellbeing • Competitive leave benefits • Gender-neutral parental leave • Employee Assistant Program • Workout sessions and a Wellness App Insurance & Financial Security • Medical and insurance benefits • Pension • Employee Assistance Program (EAP) Work Perks & Flexibility • Global home office allowance • Mobile phone reimbursement • Study Fund SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. SentinelOne participates in the E-Verify Program for all U.S. based roles. To learn more about how we use AI in our hiring process, please review our AI in Hiring Candidate Disclosure.

Job Description Check Point Research (CPR) is looking for a Threat Researcher to join its Threat Intelligence Analysis (TIA) team. The team is responsible of discovering, analyzing and tracking advanced threat actors and campaigns, with a strong focus on high-end cybercrime and state-sponsored activities. You will join a team of motivated, independent & highly technical individuals and contribute the effort to protect Check Point customers and empower the Check Point brand. • Identify, understand and monitor advanced campaigns using publicly available sources as well as internal telemetry. • Analyze malware and other hacking tools utilized by threat actors in active campaigns and intrusions. • Create technical research content for public and private intelligence reports. • Help build protections and detections based on deep understanding of advanced threat actors’ Tactics Techniques and Procedures (TTPs). • Collaborate with other security teams to assist threat intelligence and research tasks. Qualifications Your Knowledge & Skills • 5+ years of experience as a threat researcher, incident responder, malware analyst, detection engineer or other relevant roles. • Practical experience in tracking state-sponsored or advanced financially motivated actors – including malware, infrastructure and TTPs. • Profound knowledge and understanding of malware and common attacking techniques. • Hands-on experience in automating and optimizing hunting and enrichment processes using code (preferably Python). • Familiarity with query languages and data exploration tools. • Ability to translate technical findings into actionable detection and prevention signatures. • Experience in writing technical blog posts and technical analysis reports. • Experience in public speaking and presentation of research in cyber security conferences . • Fluent English.

Job Description • Lead and grow multiple teams and across endpoint protection and file security, and own the group's roadmap • Drive the group's AI transformation - bring GenAI and machine learning into how we research threats, build detection, and speed up our work • Set research and detection strategy, and align it with product and business goals • Drive endpoint and file protection capabilities that stop known and zero-day threats • Build a strong engineering and research culture and develop the next generation of leaders on your teams, and tooling to support them. Qualifications Desired Background • A seasoned group manager with 3+ years of experience in Cyber Security, including leading teams and/or team leaders. • A strong background in malware research, endpoint protection, or file security • Experienced change leader with demonstrated AI transformation leadership • Proven ability to set technical direction and deliver across multiple teams • A problem solver, capable of finding creative solutions and getting things done • Fluent in English It would be great if you also have: • Hands-on background in reverse engineering, detection research, or threat intelligence • Experience applying AI or machine learning to security problems • Published material, Public speaking or conference presentations

Job Description We are looking for an experienced malware researcher to lead our Endpoint Research & Protection team , someone with a passion for investigating cyber threats across every stage of the infection chain and a desire to understand real-world attacks. In this position, you will use your expertise in malware analysis, Windows internals, and threat hunting to analyze and create threat detections based on data from Check Point's various products. Responsibilities • Lead a team of malware researchers • Respond to high-profile attacks, understand them, and create relevant protections • Release protections for our customers and monitor detections • Investigate our broad sensor data to find leads and interesting cases of targeted attacks and campaigns • Automate daily processes to increase the team's efficiency • Run deep investigations into Check Point products and lead enhancements in security and UX • Present your work in different forums, including to stakeholders and strategic customers and at security conferences • Publish marketing and technical blogs about the team's interesting findings Qualifications Desired background • Bachelor of Science in Computer Engineering or Computer Science • 2-3 years of experience as a team leader in a relevant malware analysis field • Strong understanding of Windows internals and malware analysis • Broad knowledge of past in-the-wild attacks and security trends • Experience analyzing cyber attacks from top to bottom • Ability to translate your findings into actionable detection signature recommendations • Knowledge of common hacking tools and techniques • Knowledge of advanced threat hunting methodologies • Experience in reverse engineering malware, both dynamic and static • Fluent English is required