Security Researcher jobs in Ramat Gan

Description We are seeking a highly technical, hands-on Principal AI Research Cybersecurity Scientist to drive fast-paced research in frontier AI models, benchmarking, and evaluation. The ideal candidate combines strong research credentials with exceptional engineering capabilities and a proven ability to execute rapid research cycles, moving quickly from identifying research questions to building prototypes, running experiments, and delivering actionable results. The role requires deep expertise in LLMs, foundation models, reasoning, agents, and model evaluation, alongside the ability to translate complex customer challenges into measurable research outcomes. Key Responsibilities • Conduct hands-on research in frontier AI models, reasoning, agents, and multimodal systems. • Design, implement, and iterate on AI benchmarks, evaluation frameworks, and experimental pipelines. • Execute short, high-impact research cycles, rapidly moving from hypotheses to experiments, prototypes, and validated findings. • Identify model limitations, evaluation gaps, and emerging research opportunities. • Work directly with customers and technical stakeholders to translate complex challenges into actionable research. • Collaborate with engineering and product teams to turn research findings into practical solutions. Requirements Qualifications • PhD or MSc in Computer Science, AI, Machine Learning, or a related field, with strong relevant research experience. • Strong publication record at leading AI/ML conferences such as NeurIPS, ICML, ICLR, ACL, or equivalent venues. • Exceptional hands-on technical capabilities, including advanced Python, PyTorch, and experience building and evaluating complex AI systems. • Proven ability to independently design, implement, and execute research experiments within short development cycles. • Deep understanding of LLMs, foundation models, benchmarking, and evaluation methodologies. • Experience with frontier AI labs such as OpenAI, Anthropic, or Google DeepMind is a strong advantage. • Strong analytical and communication skills, with the ability to operate effectively in a fast-paced, customer-driven research environment. Preferred Qualifications • Experience with AI for Cybersecurity, including autonomous security agents, vulnerability research, penetration-testing automation, or security operations. • Experience with Security of AI, including LLM red teaming, adversarial machine learning, prompt injection, and agentic AI security. • Familiarity with cybersecurity tools and environments such as CTFs, sandboxed exploitation environments, static/dynamic code analysis, and security testing frameworks. • Experience developing cybersecurity benchmarks or evaluating frontier models on complex security-related tasks. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Description Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm. You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs. Key Responsibilities • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions. • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them. • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform. • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them. • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify. • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents. Success Looks Like 90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform. Requirements • 4+ years in security research, offensive security, penetration testing or vulnerability research. • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems. • Strong Python. You build your own tooling and test environments. • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework. • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks. • Experiment discipline: reproducible setups, controls, and enough runs to trust a result. • Clear writing and presentation: test results the product team can act on, and research that marketing can publish. • Fluent English, written and spoken. Nice to Have • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security. • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions. • A background in adversarial machine learning. • Experience building or evaluating detection systems that use AI. • Experience working with product and engineering teams to turn research into shipped features. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Description Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm. You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs. Key Responsibilities • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions. • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them. • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform. • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them. • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify. • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents. Success Looks Like 90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform. Requirements • 4+ years in security research, offensive security, penetration testing or vulnerability research. • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems. • Strong Python. You build your own tooling and test environments. • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework. • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks. • Experiment discipline: reproducible setups, controls, and enough runs to trust a result. • Clear writing and presentation: test results the product team can act on, and research that marketing can publish. • Fluent English, written and spoken. Nice to Have • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security. • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions. • A background in adversarial machine learning. • Experience building or evaluating detection systems that use AI. • Experience working with product and engineering teams to turn research into shipped features. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Description We are looking for an exceptional Security Researcher to join Aqua’s world-class security research organization. Looking for an experienced researcher in the cybersecurity world with depth, and excellence in cloud-native security research. As a Security Researcher, you will work on deep technical research on several areas – working with other researchers, and transforming advanced offensive insights into scalable defensive capabilities. What You Will Do • Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems, including Kubernetes, containers, and serverless environments. • Reverse engineer Linux malware families to extract behavioral patterns, execution flows, and persistence mechanisms. • Study real-world threat actor techniques and translate findings into actionable detection, prevention, and hardening strategies. • Design and prototype advanced detection logic and observability mechanisms, including kernel- and runtime-level approaches (e.g., eBPF). • Influence Aqua’s security strategy by turning research insights into capabilities that protect large-scale production environments. • Collaborate closely with engineering and product teams to ensure research outcomes are impactful and scalable. Requirements • 4+ years of experience in security research with a strong focus on Linux-based systems. • B.Sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background. • Deep, practical understanding of Linux internals (processes, syscalls, memory, networking, filesystems). • Strong experience with malware analysis and reverse engineering in Linux environments. • Proficiency in C and Python for low-level research, tooling, and prototyping. • Proven ability to analyze attacker behavior and design corresponding detection or mitigation strategies. • Strong familiarity with cloud-native technologies, including containers, Kubernetes, and container runtimes. • Excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.

Description Reflectiz is a fast-growing cybersecurity company specializing in proactive website security. Our unique remote monitoring technology helps organizations reduce security, privacy, and compliance risks-protecting critical digital assets that traditional solutions can’t fully cover. Since our founding in 2019, we’ve built a global customer base that includes Fortune 500 enterprises and leading brands across North America, EMEA, and APAC. With strong year-over-year growth and a financially solid foundation, Reflectiz offers both stability and exciting opportunities for personal and professional development. Our teams in Israel and the United States foster an inclusive, collaborative culture that combines innovation with professionalism-allowing us to consistently deliver exceptional value to our customers. We’re looking for a sharp, passionate, hands-on Security Researcher with a strong understanding of web technologies, a hacker mindset, and a genuine drive to explore, challenge, and advance security technology. In this role, you’ll research real-world web environments, investigate vulnerabilities and attack techniques, analyze suspicious behaviors, and explore how modern websites and browser-based security mechanisms can be bypassed. You’ll work closely with our Security and R&D teams, turning research findings into security insights and detection capabilities within the Reflectiz platform.. Responsibilities • Research web security vulnerabilities, attack techniques, and emerging threats • Pen testing - Investigate real-world websites and web applications to identify security weaknesses and suspicious behavior • Analyze client-side attacks, malicious scripts, third-party components, and web supply-chain risks • Research vulnerabilities and attack vectors such as XSS, CSRF, injection techniques, and browser-based attacks • Analyze JavaScript execution, DOM behavior, network requests, and browser activity from a security perspective • Investigate security mechanisms such as WAFs, bot protection, authentication mechanisms, fingerprinting, and rate limiting • Explore bypass techniques and identify weaknesses in existing security controls • Develop scripts and research tools to support security investigations and automate analysis • Analyze new vulnerabilities and attack techniques and evaluate their potential impact on web environments • Translate security research findings into detection methods and security capabilities for the Reflectiz platform • Collaborate with Security Researchers and R&D teams on complex security investigations Requirements • 3+ years of hands-on experience in Pen testing, Security Research, Web Security, Application Security, Offensive Security, or a similar security-focused role • Strong understanding of web vulnerabilities, attack techniques, and common web security risks • Strong knowledge of modern web technologies, including JavaScript, HTTP/HTTPS, DOM, browser behavior, APIs, and web application architecture • Strong investigative mindset and the ability to think like an attacker • Ability to independently research complex security problems and turn findings into practical insights • Hands-on experience with AI-assisted and agentic coding workflows, using AI tools effectively Advantage • Experience with browser security or Chromium • Experience in penetration testing, vulnerability research, bug bounty, AppSec, or offensive security • Familiarity with OWASP methodologies and common web security testing tools • Degree in Computer Science or a related technical field