Security Researcher jobs in Israel

About Dash Security Dash Security is building the security layer for the agentic enterprise - so teams can let AI run, securely. Enterprises are adopting AI agents across coding tools, SaaS, cloud, and endpoints, and traditional security stacks don't work where agents interpret instructions, plan, and act at runtime. Dash discovers every agent, MCP server, skill, and interaction; captures full agentic sessions end to end; and observes, governs, and acts across every agent and interaction, everywhere they run - instantly. We exist to close the agent security gap with intent-aware runtime protection that scales with enterprise AI adoption. Role Overview We are seeking an AI Security Researcher to join Dash's core research team. You'll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security. Responsibilities Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms. Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available. Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns. Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders. Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points. Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies. Collaborate with engineering: Embed research into Dash's detection pipelines, session-aware runtime protection, and policy/governance modules. Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dash's detection and enforcement coverage. Qualifications BSc./MSc. in Computer Science, Security, or equivalent military/industry experience. 4+ years of security research (AppSec, malware, adversarial AI, or platform security). Experience with Agentic AI security research is an advantage. Hands-on experience working with coding agents (e.g., Cursor, Claude Code) is a must, including practical use of agentic capabilities such as MCP servers, Skills, hooks, and similar agent tooling. Experience with AI systems, agent frameworks, or protocol security (e.g., LangChain, MCP, A2A) is a strong plus. Proficiency in Python for prototyping, research tooling, and detection logic; familiarity with TypeScript or Go is a plus for collaborating with engineering. Strong grasp of cloud, SaaS, and endpoint security models, especially identity and data access. Demonstrated ability to transform research into productized runtime detections. Self-driven, curious, and eager to define the next frontier of enterprise security.

About the role We're looking for a Security Researcher to join our Research team - a small, curious, and highly technical group at the heart of what we do, defining how cyber resilience is evaluated. As one of our resilience experts, you'll make sure our platform delivers accurate, meaningful insights across complex enterprise environments, tackling challenging technical problems and exploring unfamiliar technologies every day. This isn't a traditional vulnerability research or red-team role. It's a high-impact role at the intersection of cybersecurity, cloud infrastructure, data, and AI, for someone who wants the freedom to explore new ideas and turn research into real product impact. Responsibilities Shape the product through research. Proactively identify new capabilities, challenge assumptions, and work with Product to turn research into product improvements. Influence our core algorithms. Partner with R&D to improve our resilience assessments, investigate edge cases, and validate results against real environments. Solve complex technical questions. Dive into cloud technologies, configurations, and documentation to uncover risks, and translate research into detection logic and product requirements. Investigate real enterprise environments. Lead research for strategic POCs, analyze customer infrastructure, validate findings, and uncover insights with meaningful business impact. Turn data into evidence. Analyze large datasets, identify patterns and anomalies, and deliver evidence-backed conclusions that inform product and customer decisions. Scale research with AI and automation. Build tools, workflows, and AI agents that make research faster and repeatable, and continuously rethink how research gets done. Communicate research to customers. Join customer calls to explain complex findings and answer challenging questions with clarity and confidence. Requirements 4+ years of hands-on technical experience in cybersecurity, cloud infrastructure, networking, technical research, or data analysis. A researcher's mindset, with the ability to break down complex problems, investigate systematically, and turn assumptions into evidence. A strong sense of ownership - spotting opportunities, questioning existing approaches, and driving open-ended problems to completion in a fast-moving startup environment. Hands-on analytical skills, including working with SQL, Python, or similar tools to investigate complex datasets and identify patterns. Technical curiosity and the ability to quickly build a deep understanding of unfamiliar technologies. Solid foundations in cloud infrastructure, networking, and modern IT environments. Good communication skills in English, with the ability to explain complex technical findings to engineers, product managers, and customers, both verbally and in writing. Nice to have Hands-on experience with public clouds (AWS, Azure, or GCP). Familiarity with backup, disaster recovery, replication, or high-availability technologies. Experience with Kubernetes, virtualization, or infrastructure-as-code. Experience using LLMs or AI agents for technical research and automation. Experience supporting technical POCs, customer investigations, or technical presentations. Published research, technical articles, or conference talks.

Description About Nagomi Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. The Opportunity As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production. What You'll Do • Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features. • Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats. • Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data. • Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments. • Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter. • Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation. • Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build. Requirements • Experience: 5+ years of hands-on experience in cybersecurity research, exposure management, vulnerability analysis, or threat intelligence. • Product Mindset: Strong ability to tackle projects end-to-end, translating theoretical security research into tangible product features and automated detection logic. • Broad Security Knowledge: Deep understanding of enterprise security tools (EDR, NDR, SIEM, VM, etc.), network topology, and how security components interact to impact network posture. • AI/Agentic Expertise: Proven experience building or heavily shaping AI-powered systems and agentic workflows. You must be able to point to concrete examples where you have integrated LLMs or AI processes to solve complex technical problems. • Attacker's Perspective: Solid foundation in how adversaries think, move laterally, and exploit enterprise environments, paired with expertise in leading vulnerability prioritization standards (MITRE ATT&CK, CISA KEV, EPSS). • Communication: Strong communication skills with demonstrated experience working directly with customers, stakeholders, and cross-functional engineering teams. It’s nice if you have • Experience collaborating with data science, data engineering, or analytics teams to structure security datasets and build scalable intelligence pipelines. • Published research, CVEs, conference talks, or open-source contributions.

We're looking for an experienced Security Researcher to join our core team and deep dive into CVEs, conducting cutting-edge vulnerability research that directly powers Echo's revolutionary approach to eliminating container vulnerabilities at the source. Responsibilities: • Conduct deep-dive research into CVEs and vulnerabilities, analyzing root causes and attack vectors to inform our AI-powered prevention platform • Perform reverse engineering analysis using tools like IDA Pro, Ghidra, or similar platforms to understand complex security vulnerabilities and exploitation techniques • Research and analyze complex low-level system mechanisms including kernel vulnerabilities, network security issues, and operating system weaknesses • Think outside the box, challenge existing assumptions, and create innovative approaches to vulnerability research and prevention • Work in a unique environment where your research insights are rapidly implemented into our product, creating direct real-world impact from your vulnerability research • Contribute to Echo's technical knowledge base and help establish new methodologies for proactive vulnerability identification and mitigation Requirements: • 5+ years of experience in security research with focus on vulnerability analysis and exploitation • Extensive hands-on experience with reverse engineering tools (IDA, Ghidra, Jeb, or similar) • Proven experience working with CVEs, and the broader security research domain • Deep knowledge of complex low-level system mechanisms (kernel, networking, services, operating systems, embedded systems) • Excellent written and verbal communication skills with ability to present complex technical findings • Innovative mindset with ability to think outside the box and challenge conventional approaches

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

Description We are seeking a highly technical, hands-on Principal AI Research Cybersecurity Scientist to drive fast-paced research in frontier AI models, benchmarking, and evaluation. The ideal candidate combines strong research credentials with exceptional engineering capabilities and a proven ability to execute rapid research cycles, moving quickly from identifying research questions to building prototypes, running experiments, and delivering actionable results. The role requires deep expertise in LLMs, foundation models, reasoning, agents, and model evaluation, alongside the ability to translate complex customer challenges into measurable research outcomes. Key Responsibilities • Conduct hands-on research in frontier AI models, reasoning, agents, and multimodal systems. • Design, implement, and iterate on AI benchmarks, evaluation frameworks, and experimental pipelines. • Execute short, high-impact research cycles, rapidly moving from hypotheses to experiments, prototypes, and validated findings. • Identify model limitations, evaluation gaps, and emerging research opportunities. • Work directly with customers and technical stakeholders to translate complex challenges into actionable research. • Collaborate with engineering and product teams to turn research findings into practical solutions. Requirements Qualifications • PhD or MSc in Computer Science, AI, Machine Learning, or a related field, with strong relevant research experience. • Strong publication record at leading AI/ML conferences such as NeurIPS, ICML, ICLR, ACL, or equivalent venues. • Exceptional hands-on technical capabilities, including advanced Python, PyTorch, and experience building and evaluating complex AI systems. • Proven ability to independently design, implement, and execute research experiments within short development cycles. • Deep understanding of LLMs, foundation models, benchmarking, and evaluation methodologies. • Experience with frontier AI labs such as OpenAI, Anthropic, or Google DeepMind is a strong advantage. • Strong analytical and communication skills, with the ability to operate effectively in a fast-paced, customer-driven research environment. Preferred Qualifications • Experience with AI for Cybersecurity, including autonomous security agents, vulnerability research, penetration-testing automation, or security operations. • Experience with Security of AI, including LLM red teaming, adversarial machine learning, prompt injection, and agentic AI security. • Familiarity with cybersecurity tools and environments such as CTFs, sandboxed exploitation environments, static/dynamic code analysis, and security testing frameworks. • Experience developing cybersecurity benchmarks or evaluating frontier models on complex security-related tasks. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Description Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm. You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs. Key Responsibilities • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions. • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them. • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform. • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them. • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify. • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents. Success Looks Like 90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform. Requirements • 4+ years in security research, offensive security, penetration testing or vulnerability research. • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems. • Strong Python. You build your own tooling and test environments. • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework. • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks. • Experiment discipline: reproducible setups, controls, and enough runs to trust a result. • Clear writing and presentation: test results the product team can act on, and research that marketing can publish. • Fluent English, written and spoken. Nice to Have • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security. • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions. • A background in adversarial machine learning. • Experience building or evaluating detection systems that use AI. • Experience working with product and engineering teams to turn research into shipped features. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Research is where deep security expertise becomes product. We translate how identity is weaponized and becomes an attack path - across human, machine, and AI agent identities - into the risk models and security content that exposes real identity risk inside customer environments. Research here doesn't end in a slide deck, it ships. As a Security Researcher, you'll own and evolve the core of the Oak platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it. Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it — defining how Oak discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk. You'll also shape Oak's voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves. What you will Do: • Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers. • Translate deep expertise in identity and security into the analytical engine that drives how Oak reasons about risk, governance, and access decisions across organizations. • Create and own Oak knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform. • Pioneer Oak's approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world • Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers. What you will bring: • 5+ years of hands-on security research experience, with a track record that demonstrates depth across identity, access control, or adjacent threat domains. • Low ego, high impact - you share findings freely, measure success by the team's impact and you are value-driven, Willing to roll up your sleeves for the foundational work creating knowledge and insights in order to provide real value to real customers. • Innovative and forward thinking - Continuous desire to learn, explore and create. • The instinct to find what others miss: you approach identity attack surfaces, NHI exposure, and AI agent behavior with genuine curiosity and a willingness to go where the research leads. • A collaborative default - happy to share and work alongside product, engineering, and go-to-market teams in order to translate raw research into intelligence that sharpens Oak's platform and customers' understanding of their identity risk. Nice to have: • A history of original, published work - conference presentations (Black Hat, DEFCON, or equivalent), blog series, or white papers that has moved the needle and made impact.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Vulnerability Research is the sharpest edge of our technical work - the team that takes systems apart to learn how they truly work, and where they break. We go deep into the mechanisms, protocols, and architectures that modern technology is built on, and we pressure-test the assumptions the rest of the industry takes for granted. Sometimes that work sharpens the platform, sometimes it stands entirely on its own, as an original research novelty. As a Vulnerability Researcher, you'll build first-principles understanding of the technologies and systems you investigate, then go looking for what's wrong with them: the flawed assumptions baked into established paradigms, the gap between how a system is meant to behave and how it actually behaves, and the novel vulnerabilities and exploitation techniques no one has named yet. This is hands-on, deep technical work - reverse-engineering, breaking, and finding what's exploitable before an attacker does. You'll have the room to follow the research where it leads, and the backing of an ecosystem created to set you up for success by providing every tool and access that could help. Some threads will feed directly into how Oak understands what's genuinely exploitable, grounding the platform in real attacker reality rather than theoretical risk. Others will be pure discovery, pursued because the problem is hard and the finding truly matters, and published to move the field forward. Either way, your work establishes Oak's authority in the field. Through original research, disclosures, and technical thought leadership, you'll build a body of work that earns the respect of the security community and sharpens how the industry thinks about what's truly secure. What you will Do: • Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names. • Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended. • Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do. • Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook. • Ground Oak's understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in. • Promote Oak's standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits. What you will bring: • 6+ years of hands-on vulnerability research, reverse engineering, or offensive security, with a proven track record of finding non-trivial flaws and the depth in systems, protocols, and architectures to understand precisely why they exist. • A first-principles approach to how things actually work, not how they're documented to work: you pull the thread until you hit ground truth, and you're not satisfied until you do. • The instinct and ability to see what others overlook - the unquestioned assumptions in established systems, the edges no one has tested, the failure modes that live in the gap between spec and implementation. • End-to-end ownership of research: you drive hypotheses to conclusions through dead ends, changes of directions and reach hard proofs • Strong hands-on expertise, converting theories and research into a working chain and proof of concept. • Result driven depth: you go as far as a problem deserves, because the result is worth it, and you know when it is. • A track record of original significant discoveries - published CVEs, novel vulnerability classes or exploitation techniques, research that named a problem the field didn't have words for yet. Nice to have: • History of presenting original research at Black Hat, DEFCON, OffensiveCon, Hexacon or a comparable security conference. • Significant CVEs (CVSS High or Critical) under your name.

Every nation has data. Few can protect it. Fewer still can act on it. Dream is the sovereign AI and national cyber-defense company for governments. We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign. This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world. We defend nations against the most advanced threats in the world with a national security suite that offers AI-native resilience against APTs with visibility, insights and mediation across Posture, CTI, and Detection & Response, all fully sovereign. The Dream Job We're looking for a Cyber Security Researcher to join the research team within our Posture Management group. Our product is AI-driven, and this is a research role on the research team. You'll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. A core part of the role is helping to build AI agents that emulate threat actors' flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths. The Dream-Maker Responsibilities 5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar). Implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths. Conduct network security assessments to identify weaknesses in customers' network infrastructure and recommend mitigations to monitor and limit unauthorized access. Research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., Active Directory, network segmentation, identity infrastructure, exposed services). Build POC exploits/attack chains to validate risk hypotheses before they're modeled into the product. Collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers. Produce clear technical documentation of research findings, attack paths, and proposed detection logic. The Dream Skill Set Strong analytical thinking and ability to generalize from specific findings to broad detection logic. Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies. Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development. Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios. Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation. Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis. Independent, self-driven researcher who can define and pursue research questions with minimal guidance. Comfortable working cross-functionally with product and engineering teams. Never Stop Dreaming... If you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, we'd love to hear from you!

Every nation has data. Few can protect it. Fewer still can act on it. Dream is the sovereign AI and national cyber-defense company for governments. We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign. This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world. We defend nations against the most advanced threats in the world with a national security suite that offers AI-native resilience against APTs with visibility, insights and mediation across Posture, CTI, and Detection & Response, all fully sovereign. The Dream Job We are on an expedition to find you, someone who is passionate about creating intuitive, out-of-this-world security research. You'll help us harness the power of Dream's trillions of security signals to rapidly diagnose and alert the latest attacker behaviors, drive critical context-rich signals, construct new tools and automations to support customers, identify threats, and detect advanced attacker techniques. The Dream-Maker Responsibilities Analyze various network devices, configurations and security products Implement methods and algorithms to discover network topology, relationships between devices and potential lateral movement paths Conduct network security assessments to identify weaknesses in customers network infrastructure, and recommend mitigations to monitor and limit unauthorized access Develop research tools and frameworks to perform automatic analysis of network devices and security products Research and analyze network-related cybersecurity threats and trends Work closely with other internal engineering and AI teams to integrate new capabilities into our platform and guide cross-product architectural decisions Act as a security subject matter expert for multidisciplinary teams The Dream Skill Set 5+ years of experience in cybersecurity landscape Deep understanding of networking technologies and protocols, network security principles, firewalls, network access controls and network-based attacks Experience in monitoring or analyzing network topologies, captures and flows Deep knowledge in security mechanisms, products, detection techniques Strong coding skills, with ability to develop end-to-end POC for new security capabilities Excellent communication and team collaboration skills Fluency in English Never Stop Dreaming... If you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, we'd love to hear from you!

Overview Join the elite Microsoft Defender Research team, where we turn deep security research into autonomous protection that detects, investigates, and disrupts sophisticated attacks in near real-time across endpoints, identities, cloud applications, and cloud infrastructure. Leveraging Microsoft’s global reach and one of the world’s largest security telemetry sets, you will have a direct, tangible impact on protecting organizations and the global economy. This is an opportunity for researchers who are passionate about transforming security operations and shaping how defenders investigate and stop attacks at scale. We are looking for a Principal Security Researcher to lead research for key agents within Project Perception, part of Microsoft’s broader agentic security evolution. You will lead research for this area end to end, from framing high-impact investigation problems and bringing domain expertise into agents design and evaluation, to partnering with data science, engineering, product, and other teams to move these capabilities into production and customer-facing experiences. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Lead security research for agents within Project Perception, from defining high-impact problems and research methodology through agent design, rigorous evaluation, production readiness, and customer-facing experiences. • Set the research strategy and align partner teams across the organization. Translate research priorities into clear requirements and experiments, use evidence to influence roadmap decisions, and communicate strategy, findings, and recommendations to senior stakeholders. • Drive research outcomes into production and customer-facing experiences. Partner with engineering, data science, and product teams to define success criteria, validate quality and safety, establish production readiness, measure customer impact, and iterate based on real-world performance. • Analyze large-scale data and conduct investigations to improve the quality and effectiveness of Project Perception agents, building on and contributing to Microsoft Defender’s protection knowledge layer. • Apply and champion AI in security research, using current models, agentic architectures, coding agents, and tooling to accelerate triage, investigation, and detection and increase researcher productivity. Validate AI outputs and develop reusable workflows. • Mentor and grow researchers, elevating the team’s technical bar. Qualifications • You have at least 10+ years of experience in security research or a closely related cybersecurity research role. • Strong, evidence-backed adoption of AI in technical work. Regularly use and develop AI skills, coding agents, agentic tools, or AI-assisted workflows, while evaluating and validating outputs. • Deep expertise in security research and modern attacker tradecraft, with the ability to conduct complex investigations and translate security knowledge into reliable agent and protection outcomes. • Experience leading technical work from research and design through production delivery, partnering with engineering and product teams, and influencing roadmaps and senior stakeholders across organizational boundaries. • Proficiency in programming, such as Python or C#, and large-scale query languages, such as KQL or SQL, with experience analyzing security data and developing or validating research and protection capabilities. • Demonstrated technical leadership through mentoring researchers, raising the quality bar, and communicating complex findings clearly. Preferred Qualifications • Bachelor’s, master’s, or doctoral degree in Computer Science, Computer Security, Software Engineering, or a related field; equivalent practical experience is also valued. Other Requirements • Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter. #MSFTSecurity This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Come build community, explore your passions and do your best work at Microsoft with thousands of University interns from every corner of the world. This opportunity will allow you to bring your aspirations, talent, potential—and excitement for the journey ahead. As a Security Research Intern, under supervision you will design and conduct security research including malware analysis, threat and vulnerability analysis, adversary tracking, threat intelligence, detection and remediation development and other technology application focuses related to the understanding of the threat landscape with intent to disrupt adversaries or provide protection via defensive products and services. You will help generate solutions including first party mitigation and working closely with customers and partners and support operational security and security incidents as well as security reviews and reporting. We are building a cutting-edge Cloud solution that gives customers visibility and control without impeding agility and helps them stay ahead of cyber threats as they evolve. You will join the group that is responsible for advanced threat detection capabilities, leveraging machine learning and behavioral profiling to detect emerging threats and advanced attacks by engineering a hyper-scale service to defend millions of hosts. At Microsoft, Interns work on real-world projects in collaboration with teams across the world, while having fun along the way. You’ll be empowered to build community, explore your passions and achieve your goals. This is your chance to bring your solutions and ideas to life while working on cutting-edge technology. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities • Begin to analyze threat trends and anomalies to determine operational impact. Determine vectors that introduce threat and potential mitigation strategies. Learn about systemic security issues and how to address them. • Process threat reporting from internal and external sources. Provide discrete threat data based on intelligence requirements or customer requests. • Identify security defects or vulnerabilities and deficiencies in security guidance. • Contribute code to technical implementation and automation of solutions to address security issues, such as signature detection, malware, threat analysis, or reverse engineering. Use results from research and experimentation to support architecture or product direction. • Identify areas of dependency and overlap with other teams or team members. Provide constructive input so the work is integrated and timely. Communicate the status of deliverables and dependencies to meet schedule. • Engage in measures to protect tools, techniques, information, and results of security practices. Respond to incidents for systems or products as needed. Use results of pen testing to improve products and services. **This student position is structured as a one-and-a-half-year role, concluding upon completion of the academic degree. Qualifications • Currently pursuing a Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field, with an expected graduation date of Summer 2028 or later. • 2+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world. The Microsoft Threat Intelligence Center (MSTIC) is recruiting experienced nation-state threat hunters – with highly honed threat intelligence analysis skills. MSTIC provides unique insight on threats to protect Microsoft and our customers and is responsible for delivering timely threat intelligence across our product and services teams. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As a Threat Intelligence Analyst in MSTIC, you will track and analyze sophisticated threat actors (including nation-state and advanced persistent threats) and translate intelligence into actionable outcomes that improve Microsoft security products, services, and defenses. You will combine deep technical expertise with analytic tradecraft to drive end-to-end investigations, detect adversary activity, and support detection, hunting, and disruption efforts across Microsoft’s ecosystem. The role includes close collaboration with internal teams and external partners, contributing to real-time response, customer engagements, and broader understanding of adversary ecosystems and campaigns.Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day. Responsibilities As a threat intelligence analyst, you will be responsible for tracking sophisticated adversaries and use your technical knowledge of adversary capabilities, infrastructure, and techniques. You will define, develop, and implement techniques to discover and track current adversaries and identify the attacks of tomorrow. You will produce actionable intelligence, proactively drive hunting and detection capabilities, and contribute to the disruption of adversary activity to protect Microsoft and its customers. In this role, you will collaborate closely with MSTIC and partner with security, engineering, and product teams across Microsoft to protect Microsoft assets, products, and customer environments. You will strengthen existing partnerships and build new ones with key organizations to enhance collective defense and improve product and service security • Qualifications You have at least 3+ years producing actionable threat intelligence on targeted and advanced persistent threats, with demonstrable impact on network and host defenses . You have proven expertise tracking and investigating APT adversaries, across all stages of the attach chain. You have strong ability to analyze and hunt adversary behavior end-to-end, map attack chains, and communicate clear, evidence-based intelligence to technical and executive audiences. You have the ability to quickly adapt to a rapidly evolving telemetry landscape. Preferred Qualification Experience operationalizing threat intelligence and hunting methodologies at scale, leveraging AI and automation, Python, or scalable analytical workflows Analysis of sophisticated malware and targeted attacks against enterprise or government environments, including identification of large-scale and supply chain attack patterns Cloud intrusion analysis in adversary operations Host forensic investigation and log analysis of advanced targeted adversaries Proven track record in producing actionable Threat Intelligence on APTs based on telemetry analysis. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview The Microsoft Specialized Clouds Vulnerability Research team (STORM) is seeking a Security Research Intern to help strengthen the security visibility of Microsoft’s next-generation cloud platforms. STORM is an offensive security research group focused on identifying vulnerabilities across cutting-edge cloud technologies. As part of our growing Blue Team research efforts, this role will contribute to improving the telemetry, logging, and audit capabilities needed to detect sophisticated attacks. Working alongside security researchers, architects, and engineering teams, you will review products during development, identify gaps in security visibility, and help ensure security monitoring capabilities are built in before products reach customers.This hands-on internship offers significant ownership, mentorship from senior researchers, and exposure to technologies that are not yet publicly available. You will analyze product architectures and threat models, assess and improve security telemetry, validate detection coverage for real-world vulnerabilities, develop automation and hunting capabilities, and collaborate closely with engineering teams to integrate security visibility throughout the product lifecycle. Along the way, you will gain practical experience in cloud security research, detection engineering, threat hunting, telemetry design, distributed systems, Kubernetes security, platform security, and AI-assisted security workflows, while directly contributing to the security of Microsoft’s Sovereign Cloud and Adaptive Cloud platforms. Responsibilities • Investigate real-world nation state attacks to support the development of high-fidelity protection logic across complex cross-domain kill-chains. • Apply security expertise to analyze massive telemetry sets using big-data query languages (KQL), reasoning over data to identify novel malicious patterns and engineer evidence-based detection rules. • Contribute to the implementation and coding of automated capabilities that autonomously investigate nation state threats, using AI assisted tooling and agentic flows. • Assist in the refinement of protection coverage by analyzing real-world attack telemetry to improve the accuracy and performance of existing detection logics. • Contribute to a strategic feedback loop by documenting findings from attack data analysis to improve overall protection logic and system-wide security posture. • Partner with engineering and product teams to translate research insights into production-ready code, helping to validate protection concepts and ship them at a global scale. Qualifications Qualifications Required • Currently pursuing a B.Sc., M.Sc., or Ph.D. in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, with at least one year remaining before graduation. • Solid understanding of computer science fundamentals, including operating systems, networking, software engineering, and distributed systems concepts. • Experience developing software or automation in one or more modern programming languages (e.g., Python, C#, Go, Java, or C/C++). • Strong analytical and problem-solving skills, with the ability to investigate complex technical systems and identify root causes. • Self-motivated learner who can work independently while collaborating effectively with researchers, security engineers, and product teams. Preferred • Interest in cloud security, threat hunting, detection engineering, incident response, or Blue Team security research. • Experience analyzing large datasets, logs, telemetry, or security events to identify anomalies and security-relevant patterns. • Familiarity with cloud platforms, Kubernetes, containers, or modern distributed systems architectures. • Understanding of operating system and networking fundamentals, including Windows or Linux internals, authentication, protocols, and security controls. • Experience building automation, security tooling, or using AI-assisted workflows to improve investigations, analysis, or security operations. • Demonstrated passion for security through personal research projects, Capture-the-Flag (CTF) competitions, vulnerability research, open-source contributions, or related activities. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Join one of the elite research teams powering Microsoft Defender, the dominant market leader in XDR, SIEM, Cloud, and AI Security. We protect the world’s largest enterprises by analyzing trillions of signals to protect against sophisticated cyberattacks across hybrid and multi-cloud environments. We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI. We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsoft’s dominant market position and the world’s most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains. • Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time. • Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions. • Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale. • Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy. Qualifications • 4+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments. • Programming proficiency (e.g., Python, C#, or similar), with a proven ability to develop and ship production-ready protection logic.Demonstrated ability to work effectively in cross-functional teams, bridging the gap between deep research and scalable engineering. Preferred Qualifications • B.Sc. or M.Sc. in Computer Science or Software Engineering OR/AND related field • Public track record of security research, such as technical blog posts, whitepapers, or presentations at major industry conferences. • Experience in offensive security or adversary simulation. • Deep understanding of AI-driven threats. • Proven ability to reason over large-scale datasets using big-data query languages, applying security expertise to identify novel patterns and make evidence-based decisions. • Familiarity with cloud environments (e.g., Azure, AWS) and the specific security challenges inherent to hybrid and multi-cloud infrastructures in large enterprise customers. By applying to this position, you are being considered for multiple like positions within our organization for an invitation-only virtual Interview Day. Position specifics, including hiring team, location, and position details will be determined following the interview process. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description We are 48% of breaches now come through vendors. Yet most companies still manage vendor risk through certifications and questionnaires, essentially trusting what vendors say about their security. Lema changes that. We analyze every vendor like a vulnerability researcher would: how could an attacker use this vendor to get in, and what could they reach? We’re turning vendor risk from a paperwork exercise into a true security discipline. Backed by Team8, Salesforce Ventures, and F2, and already trusted by leading enterprises, Lema is entering hypergrowth and tripling our team to build a category-defining platform. We move fast, with radical ownership, transparency, and high impact. More about Lema: • Lema.ai website • Business Insider - Cybersecurity startup Lema has come out of stealth to raise $24 million • Team8 - Why We Invested In Lema About the Role We're looking for a security researcher with 5+ years of experience to discover new ways vendors put their customers at risk. You'll own research end to end, from the first hypothesis to a shipped capability, and help decide where Lema looks next. What You'll Do • Discover new ways attackers can use vendors to get in, and prove or kill each idea with real data. • Decide which security tools and data sources we should integrate next, and why. • Shape the logic and knowledge behind our AI risk agents. • Build your own tools when the one you need doesn't exist. • Partner with engineering to turn validated research into product. • Work alongside the best security researchers in the industry. Requirements What You Bring • 4+ years of hands-on experience in security research, threat intelligence, or offensive security. • Original research to show: vulnerabilities, techniques, tools, or findings. • A strong grasp of core security domains, including identity, cloud, SaaS, endpoint, and network, and how they connect. • Rigor. You prove a finding before you claim it, and you read AI output adversarially. • Independence. You take a fuzzy question and turn it into a result without needing each step defined. • A track record of research that became a product, a detection, or a published finding. Why Join Lema AI • Impact: Build a category-defining platform that safeguards how modern businesses operate. • Ownership: Join a culture that gives you full context, autonomy, and trust to drive outcomes. • Compensation & Benefits: Competitive salary, equity package, and additional perks • Velocity: Work with exceptional peers in a high-energy, low-bureaucracy environment. • Growth: Shape a company that’s scaling rapidly, backed by Tier 1 investors and visionary customers.

Job Description Summary Location: Tel-Aviv, Israel #LI-Hybrid 3 days/week in office Internal job title: Assoc. Dir. DDIT ISC Security Research About the role: The Defensive Cyber Security Researcher will be part of a new Think Tank group of security researchers that will challenge Novartis information security defenses, application security and data protection. The Defensive Cyber Security Researcher will be responsible for participating in threat actor based investigations, creating new detection methodology and providing expert support to incident response and monitoring functions. The focus of the Defensive Cyber Security Researcher is to detect, disrupt and eradicate threat actors from enterprise networks, including emerging AI-driven and AI-assisted threats. To execute this mission, the Defensive Cyber Security Researcher will use data analysis, threat intelligence, and cutting-edge security technologies — with a growing emphasis on understanding how AI can be weaponized against the organization and how it can be leveraged defensively. The Defensive Cyber Security Researcher will identify and analyze patterns and changes in tactics, techniques and procedures used by attackers to attack Novartis IT infrastructure and management staff. The analysis will result in indicators of compromise, accurate understanding of the risk to Novartis IT infrastructure and prioritization of remediation efforts. Job Description Key Responsibilities: • Hunt through huge number of signals to identify new emerging threats, dissect them and extract meaningful insights and indicators of compromise. • Demonstrate adversary tactics to recognize and analyze malicious activity (techniques, tools and processes) based on a combination of behavioral activity and signature based analysis. • Participate in "hunting missions" using threat intelligence, analysis of anomalous log data and results of brainstorming sessions to detect and eradicate threat actors on the Novartis network. • Provide expert analytic investigative support of large scale and complex security incidents. • Perform analysis of security incidents for further enhancement of alert catalog; perform in-depth static and dynamic malware reverse engineering; preform ad hoc memory and disk forensics. • Produce detailed technical reports in support of malware / other hunting investigations. • Review alerts generated by detection infrastructure for effectiveness and recommend improvements. • In collaboration with the Security Operations Center: Develop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc. • Research and assess AI-specific security risks to the organization, including adversarial use of AI models, prompt injection attacks, data poisoning, shadow AI adoption, and LLM-assisted threat actor operations; translate findings into actionable defensive guidance and detection rules. • Collaborate with Cyber Threat Intelligence (CTI) teams to operationalize intelligence feeds, enrich hunting missions with external and internal threat data, and contribute research outputs (IOCs, TTPs, adversary profiles) back into intelligence pipelines. Essential Requirements: • 5+ years of experience in Incident Response / CERT team or 5+ years of experience with malware investigations. • Critical understanding of the cyber attacker kills chain elements, with particular emphasis on attack objectives. • High familiarity and experience with Active Directory (AD) and Entra ID / Azure AD security — including AD attack paths (Kerberoasting, pass-the-hash, DCSync, Golden/Silver Ticket), BloodHound-based graph analysis, AD tiering models, and Conditional Access Policies; ability to identify misconfigurations that lead to privilege escalation and lateral movement. • Solid understanding of AI security risks and their organizational impact, including adversarial machine learning, prompt injection, data poisoning, shadow AI risks, and the use of generative AI tools by threat actors; ability to advise the organization on AI-related threat exposure and contribute to AI governance from a security perspective. • Proven ability to work effectively with Security Operations Center (SOC) teams: including joint detection engineering, alert tuning, escalation workflows, and acting as a subject matter expert during high-severity incident response; experience bridging the gap between research depth and SOC operational tempo. • Experience working with Cyber Threat Intelligence (CTI) teams: consuming and operationalizing intelligence products, contributing research outputs as structured intelligence (IOCs, TTPs, adversary profiles), and participating in joint threat briefings and intelligence-driven hunting operations. • Good familiarity with Red Teaming tools and operations, understanding of Wireshark, Cobalt Strike and more • Advanced programming skills with scripting languages such as Python/Perl/Ruby. • Familiarity with the current nation-state (“APT”) threat landscape and the various actors and groups. • Very strong team and interpersonal skills along with the ability to work independently and achieve individual goals, with effective oral and written communication skills. Desirable requirements: • Relevant Technical Security Certifications (GIAC, EC-Council, Offensive Security, etc.) Why Novartis? Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-culture Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network Accessibility and accommodation: Novartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e-mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message. Skills Desired Communication Skills, Cyber-Security Regulation, Cyber Threat Hunting, Cyber Threat Intelligence (Cti), Cyber Threat Management, Cyber Vulnerabilities, Decision Making Skills, Digital Capabilities, Effective use of Technology, Influencing Skills, Information Security Risk Management

Description We’re looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team. Why Mitiga? EDR protects the endpoint. Mitiga protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business. Mitiga is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure — cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools can’t see, Mitiga provides Zero-Impact Breach Prevention, in runtime. The Role We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization. You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team. What You'll Do Drive Groundbreaking Research • Own and drive Mitiga's most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication. • Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats. • Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities. • Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it. Be a Voice in the Community • Represent Mitiga as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions. • Build and maintain Mitiga's reputation as a research-driven company that advances the field - not just a vendor with a blog. • Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing. Shape the Product • Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats. • Design and develop advanced detection algorithms that directly feed into Mitiga's platform, closing the gap between research insight and customer protection. Elevate the Team • Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to. • Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices. • Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities. • Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity. Requirements Who You Are • 8+ years in security research, threat research, or closely related fields (offensive security, detection engineering, incident response, cloud security engineering). Fewer years are fine if your depth and track record are exceptional. • Deep multi-cloud expertise - strong hands-on experience across at least two of the major cloud providers (AWS, Azure, GCP), with working knowledge of the third. You understand the IAM models, logging pipelines, APIs, and attack surfaces that matter in each. • A track record of original research - you've published meaningful technical findings through blog posts, conference talks, open-source tools, or vulnerability discoveries that moved the needle. We want someone who doesn't just consume research - you produce it. • Strong adversarial mindset and critical thinking - you think like an attacker targeting cloud infrastructure, SaaS platforms, identity systems, and Kubernetes. You can model threat scenarios, map out attack paths, and poke holes in defenses. • Ability to operate autonomously on ambiguous, high-stakes problems. You don't wait for detailed specs - you identify what matters and drive it forward. It Would Be Nice If You Also Had • Experience with cloud forensics and incident response (DFIR in cloud/SaaS environments). • Background in red teaming or penetration testing targeting cloud environments. • Familiarity with Kubernetes security, container escape techniques, and cloud-native supply chain risks. • Experience building or contributing to threat intelligence frameworks or detection content libraries. Some More Details and Perks • Location: Tel Aviv, IL • Hybrid work Environment • Competitive compensation package with stock options, educational fund, cibus. • Top of the line equipment For more information visit us at www.mitiga.io Mitiga is an equal opportunity employer, committed to diversity and inclusiveness and aim to attract, retain, and engage a diverse workforce. We consider all qualified applicants without regard to race, color, nationality, gender, gender identity, sexual orientation, religion, disability, age or any other characteristic protected by law.

Description Paragon is on a mission to transform the world of cyber intelligence. Based in Tel Aviv, our innovative team is made up of top-tier talent who are passionate about making an impact. At Paragon, you’ll find the freedom to think boldly, collaborate with purpose, and grow alongside a team united by a shared mission - striving for excellence, and always looking out for one another. We are a young innovative company with a cutting-edge product based in Tel Aviv. We are looking for an experienced Security Researcher to join us in building a new research team that will help detect and overcome product security challenges. As part of the role, you will make a deep dive into the mobile security world. You will have the opportunity to research the latest security mitigations, solve incredibly complex and satisfying technological challenges and learn all the time from the best researchers. Requirements • 4+ years of experience as a low level researcher • Proven experience in reverse engineering, using IDA or Ghidra • Deep knowledge of Unix-like OS Internals • Willingness to tackle difficult tasks • Ability to learn quickly and independently • Familiarity with Android/ iOS Internals - An advantage • Experience in ARM assembly language - An advantage • Familiarity with debugging tools like frida/gdb - An advantage • Programming experience - An advantage