Security Researcher jobs in Tel Aviv-Yafo

Description About Nagomi Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. The Opportunity As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production. What You'll Do • Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features. • Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats. • Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data. • Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments. • Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter. • Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation. • Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build. Requirements • Experience: 5+ years of hands-on experience in cybersecurity research, exposure management, vulnerability analysis, or threat intelligence. • Product Mindset: Strong ability to tackle projects end-to-end, translating theoretical security research into tangible product features and automated detection logic. • Broad Security Knowledge: Deep understanding of enterprise security tools (EDR, NDR, SIEM, VM, etc.), network topology, and how security components interact to impact network posture. • AI/Agentic Expertise: Proven experience building or heavily shaping AI-powered systems and agentic workflows. You must be able to point to concrete examples where you have integrated LLMs or AI processes to solve complex technical problems. • Attacker's Perspective: Solid foundation in how adversaries think, move laterally, and exploit enterprise environments, paired with expertise in leading vulnerability prioritization standards (MITRE ATT&CK, CISA KEV, EPSS). • Communication: Strong communication skills with demonstrated experience working directly with customers, stakeholders, and cross-functional engineering teams. It’s nice if you have • Experience collaborating with data science, data engineering, or analytics teams to structure security datasets and build scalable intelligence pipelines. • Published research, CVEs, conference talks, or open-source contributions.

Description We’re looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team. Why Mitiga? EDR protects the endpoint. Mitiga protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business. Mitiga is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure — cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools can’t see, Mitiga provides Zero-Impact Breach Prevention, in runtime. The Role We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization. You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team. What You'll Do Drive Groundbreaking Research • Own and drive Mitiga's most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication. • Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats. • Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities. • Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it. Be a Voice in the Community • Represent Mitiga as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions. • Build and maintain Mitiga's reputation as a research-driven company that advances the field - not just a vendor with a blog. • Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing. Shape the Product • Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats. • Design and develop advanced detection algorithms that directly feed into Mitiga's platform, closing the gap between research insight and customer protection. Elevate the Team • Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to. • Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices. • Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities. • Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity. Requirements Who You Are • 8+ years in security research, threat research, or closely related fields (offensive security, detection engineering, incident response, cloud security engineering). Fewer years are fine if your depth and track record are exceptional. • Deep multi-cloud expertise - strong hands-on experience across at least two of the major cloud providers (AWS, Azure, GCP), with working knowledge of the third. You understand the IAM models, logging pipelines, APIs, and attack surfaces that matter in each. • A track record of original research - you've published meaningful technical findings through blog posts, conference talks, open-source tools, or vulnerability discoveries that moved the needle. We want someone who doesn't just consume research - you produce it. • Strong adversarial mindset and critical thinking - you think like an attacker targeting cloud infrastructure, SaaS platforms, identity systems, and Kubernetes. You can model threat scenarios, map out attack paths, and poke holes in defenses. • Ability to operate autonomously on ambiguous, high-stakes problems. You don't wait for detailed specs - you identify what matters and drive it forward. It Would Be Nice If You Also Had • Experience with cloud forensics and incident response (DFIR in cloud/SaaS environments). • Background in red teaming or penetration testing targeting cloud environments. • Familiarity with Kubernetes security, container escape techniques, and cloud-native supply chain risks. • Experience building or contributing to threat intelligence frameworks or detection content libraries. Some More Details and Perks • Location: Tel Aviv, IL • Hybrid work Environment • Competitive compensation package with stock options, educational fund, cibus. • Top of the line equipment For more information visit us at www.mitiga.io Mitiga is an equal opportunity employer, committed to diversity and inclusiveness and aim to attract, retain, and engage a diverse workforce. We consider all qualified applicants without regard to race, color, nationality, gender, gender identity, sexual orientation, religion, disability, age or any other characteristic protected by law.

Description About Us Zenity is the leader in AI Agent Security and the first company to bring an agent-centric security platform to market. As enterprises accelerate AI agent adoption, we are establishing the security framework for how AI agents are secured and governed at enterprise scale. We deliver full-lifecycle visibility, governance, detection, prevention, and response for AI agents from build time to runtime, across SaaS, home-grown platforms, and end-user devices. Backed by $180M+ in total funding, including a $125M Series C led by Norwest, with participation from SoftBank Vision Fund 2 and Microsoft's M12, Zenity is trusted by Fortune 500 and Global 2000 enterprises worldwide. Join us in shaping how AI agents are secured at enterprise scale. About the Role We’re seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen Zenity’s detection capabilities. In this role, you’ll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. It’s a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses. Responsibilities • Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies. • Conduct research on cloud, web, and API security to uncover new threats and attack vectors. • Develop, refine, and design world-class detection logic and rules to enhance Zenity's runtime protection. • Perform threat-hunting activities across large data sources to identify emerging attack patterns • Drive full-cycle research: from hypothesis and experimentation to production validation. • Collaborate with engineering and product teams to deliver actionable insights. Requirements • 4+ years in security research, including cloud, web, or API security. • Experience in detection engineering and building or working with detection-driven security products. • Strong coding and data analytics skills in scripting and programming languages such as Python, JavaScript and bash, and proficiency with SQL-like queries. • Solid grasp of security principles, cloud security, and runtime defense. • Curiosity, creativity, and a self-driven approach to research. • Experience tinkering with LLMs and AI security - a strong plus.

🔹 Title: Security Researcher 📍 Locations (Hybrid): Tel Aviv (Sky Tower) 👥 Reporting To: Threat Research Team Leader 🌟 Opportunity Highlights We are looking for a Security Researcher to join our team; an enthusiastic, autodidact who is passionate about analyzing vulnerabilities and malware techniques. He/she will build offensive breach scenarios, integrating the latest security knowledge into the SafeBreach platform of threats and 1-day exploits. 👋 Who We Are SafeBreach is on a mission to help organizations have certainty in their security. Long trusted as the global leader in adversarial exposure validation (AEV), SafeBreach empowers organizations to take command of risk by operationalizing the full CTEM lifecycle with the SafeBreach CTEM Platform. Powered by the SafeBreach Helm AI infrastructure layer and grounded in the award-winning SafeBreach Exposure Validation Platform, the SafeBreach CTEM Platform is the first enterprise-grade, closed-loop solution designed to move organizations beyond siloed security activities toward a continuous, intelligence-driven exposure management program. Backed by world-renowned threat researchers and an unrivaled customer success team, SafeBreach provides the capabilities enterprises need to holistically understand threat exposure, make data-driven decisions that reduce risk, and measurably improve cyber resilience—safely and at scale. We are a team of passionate security professionals and innovators. If you’re ready to tackle complex security challenges and make a tangible impact on enterprise defense, we’d love to meet you. 🚀 The Impact You Will Have • Research in rich environments: Work across Windows, Linux, Mac, Docker, and advanced cloud environments (AWS, Azure, GCP). • Research and implement a huge variety of cyber tactics (privilege escalation, defense evasion, lateral movement, OS persistence, credential access, etc) • Exploit complex 1-days on apps & native OS. • Innovate & Build: Work with a wide variety of technologies to simulate real-world adversarial behavior. 🧬 What Sets You Apart • 5+ years of security research experience • Deep understanding of windows internals and reverse engineering • Experience in exploitations and vulnerabilities • Knowledge of development in C • Ability to handle new technological concepts • Self-driven, autonomous learning abilities • Knowledge in developing with Python • Knowledge in offensive or red-team approach 💰 What We Offer • Competitive salary and equity grants • Hybrid flexibility • Quarterly recharge weekends • Learning & development stipend • Generous paid leave policies including flexible PTO and parental leave 🤝 HOW WE'LL GET TO KNOW EACH OTHER We view interviewing as a two-way street. We want you to interview us just as much as we interview you! (Avg. timeline: 21 days) Step 1: The Intro (15 min) A casual meeting with the Talent team to break the ice. Step 2: The Vision (45 min meeting) Connect your future manager to discuss the role, the challenges, and how you can make an impact Step 3: The Squad & The Big Picture (45-60 min meetings) Meet some of your future teammates in our Tel Aviv office, as well as our HR Team and VP of R&D to ensure our values and long-term goals align with yours. Step 4: The Offer If the vibe is right, we make it official! 🌍 DEI&B Commitment (Diversity, Equity, Inclusion & Belonging) At SafeBreach, we celebrate the rich diversity of our team, where every employee's unique perspective is a valued thread in our collective success. We are unwavering in our commitment to fostering an inclusive workplace that nurtures a sense of belonging and empowers each individual to unleash their full potential. We are dedicated to creating opportunities for collaboration, innovation, and meaningful career growth, ensuring that every voice is not just heard, but cherished.

Description Remedio is transforming how organizations reduce cyber risk. While most security tools focus on finding problems, Remedio focuses on fixing them. Our Autonomous Remediation Platform helps enterprises continuously and safely reduce exposure by remediating vulnerabilities and misconfigurations, closing patching gaps, hardening systems, enforcing compliance, governing applications, and controlling AI risk. By combining deep dependency awareness, pre-execution validation, automated remediation, and instant rollback, Remedio enables organizations to eliminate risk across endpoints, servers, applications, and AI systems - without disrupting business operations. Founded in 2019, Remedio spent its first years as a bootstrapped, profitable company, building a strong enterprise customer base before raising a $65M Series A led by Bessemer Venture Partners. Today, more than 300 enterprise organizations trust Remedio to protect over 3M devices worldwide, including Amazon, Colgate-Palmolive, Kraft Heinz, Coca Cola Hellenic Bottling Company, and many more. As we continue expanding our platform and growing our global business, we’re looking for exceptional people who want to take ownership, solve meaningful challenges, and help shape the next chapter of Remedio’s journey. Were looking for a Senior Security Researcher to join our team! Responsibilities • Conduct advanced vulnerability research on operating systems and third-party software installed on endpoints. • Develop proof-of-concept exploits and techniques to validate research findings. • Document and publish research through reports, whitepapers, and public presentations to highlight emerging risks. • Collaborate with product and engineering teams to translate findings into improved security protections. • Stay on top of the evolving vulnerability landscape and proactively choose research areas of focus. Requirements • 3+ years of experience in low level development on Windows operating system. • Fluent in English, C/C++, Python. • Reverse engineering experience. • Strong ability to get the job done - from idea to a vulnerability. • A proven solo contributor at heart, capable of driving independent research. • Jack of all trades - comfortable moving between Java, C++, Python, COM objects, or whatever the target requires. • Deep understanding of operating system internals and network protocols. • Experience in an elite Israeli army technology/cybersecurity unit is highly regarded.

As a Senior Security Researcher for the Axonius Exposures team, you will conduct research into vulnerability detection, remediation, and prioritization to enhance our asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security data, automate workflows, and prototype logic to address enterprise attack surfaces. This is a high-impact role where your research directly shapes how our customers identify and mitigate their most critical security gaps. Responsibilities • Lead end-to-end security research projects focusing on vulnerability detection, risk prioritization, and exposure management logic. • Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate threat research, and prototype research tools. • Research and define remediation strategies, compensating controls, and configuration-based mitigations beyond standard patching. • Partner weekly with Product and Engineering teams to transform technical research into production-ready product capabilities. Minimum Qualifications • 4+ years of professional experience in security research, vulnerability analysis, or penetration testing. • Demonstrated proficiency with Python for scripting/automation and SQL for querying complex security data sets. • Hands-on experience integrating AI/LLMs into technical workflows to accelerate data analysis, parsing, or research output. • Practical understanding of security frameworks and metrics including CVSS, EPSS, and MITRE ATT&CK. Preferred Qualifications • Prior experience in B2B SaaS or enterprise cybersecurity product environments. • Experience in exposure management, attack surface management (ASM), or enterprise risk prioritization. • Experience creating custom prioritization and scoring algorithms combining vulnerability telemetry with asset criticality. • Deep knowledge of non-patching mitigation strategies, including registry tweaks, network policy shifts, and configuration hardening. • Proven track record of framing open-ended security problems into scalable software feature requirements. #LI-HYBRID, #LI-ZR1 About Axonius: Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence. Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world. Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. Description We are looking for a Mobile Security Researcher to join our Research Team. As our Security Researcher, your primary focus will be on the inner workings of iOS and Android operating systems. You'll dive into codebases, analyze security mechanisms, and identify potential vulnerabilities. In addition, you'll work collaboratively with the team to develop protective strategies and contribute to ongoing innovations in mobile app security. This role requires a keen analytical mind, a passion for research, and a drive for continuous improvement in the mobile security domain. Join us in shaping secure solutions for the future of mobile apps. What will you do? • Research and implement security mechanisms for Android and iOS platforms, driving the full cycle from low-level platform analysis to hands-on feature development. • Conduct reverse engineering on a wide variety of devices running iOS/Android to gain deeper insights into their system. • Keep up to date with emerging trends in mobile application security and research methods to ensure that customers are protected. • Work with a talented security team where you'll learn and grow every day. Requirements • At least 2 years of experience in reverse engineering of large systems/OS, preferably with IDA • At least 2 years of experience in C/C++ programming • OS Internals/Low Level/Kernel experience • Eager to take on challenging tasks • Curious and quick to learn on your own • Team player with good interpersonal skills Advantages:  • Experience in vulnerability research • Familiarity with assembly and ARM instruction set • Mobile apps development experience • Low-Level experience in iOS or Android

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. About the Role We are looking for a talented, passionate Offensive Researcher to join our innovative research team. If you’re eager to explore cutting-edge mobile security techniques and help safeguard the mobile app ecosystem, this is the role for you! As a key player in our security team, you'll design and execute sophisticated attack simulations on the Appdome platform. Your work will touch on diverse attack vectors, including file systems, networks, jailbreaks, memory injections, and more. Requirements • 1-3 years of experience in Offensive Security/Cyber. • Extended knowledge in researching, simulating, and analyzing different application attack vectors. • Advantage – Experience using a hacking framework or pen-testing tools such as Frida, Magisk, Multiproxy, and Cheat Engine. • Ability to create analysis plans and execute them, as well as document and troubleshoot errors. • Ability to understand the system from multiple perspectives, including high-level and low-level technical architecture. • Experience in Mobile (iOS/Android) analysis environments and automation tools. • Bachelor’s degree in a relevant field. • Software development and scripting experience.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Mid-Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 4 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 6 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience Join the Product Security team in Israel as an Offensive Security Engineer on our Red Team. You partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms, and enterprise environments, and you help make our defenses stronger, including as AI and Agentforce reshape our attack surface. What You'll Actually Be Doing • Run hands-on red team operations that simulate real-world attackers across applications, cloud, and enterprise environments, and chain weaknesses together to reach defined goals. • Design and carry out end-to-end attack campaigns with the Red Team Director, including bypassing security controls and abusing identity, access, and trust relationships. • Work with Detection and Response, Incident Response, and Engineering teams to test alerts and response workflows, and explain attack paths and root causes in clear, practical terms. • Improve red team tools, automation, and techniques with the AI-Automation team, and mentor junior engineers. You're Our Person If... • You have 4+ years of experience in offensive security, red teaming, or advanced penetration testing in production-like environments. • You understand attacker methods, identity and access abuse, and attack chains across applications, infrastructure, cloud, and hybrid environments. • You write custom scripts, tools, or payloads, and you are skilled at manual exploitation. • You communicate clearly about how an attack worked, why defenses failed, and which fixes reduce risk most. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have run continuous or programmatic red team operations, or have a background in adversary emulation or purple team work. • You have experience with malware analysis or exploit development. • You have published vulnerability research, responsible disclosures, blogs, or talks. • You know cloud-native architectures and identity-centric security models. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We’re looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team. This is a role for someone who can perform offensive security testing at scale, combining deep security expertise with the judgment to direct and improve AI-driven tooling. What You'll Actually Be Doing • Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth that you will develop. • Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find. • Run end-to-end engagements: scoping, execution, reporting, and remediation guidance. • Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes. • Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness. • Produce high-quality technical reports with clear exploitation paths and prioritized remediation. • Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale. • Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting. • Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision. • Translate your own tradecraft into reusable, explainable automation that the team can run and build on. You're Our Person If... • 6+ years (Senior) / 8+ years (Lead) hands-on offensive security experience such as pentesting, red teaming, or app/security research, with proven complex engagement delivery. • Deep, must-have vulnerability knowledge in cloud and web application security: OWASP Top 10+ vulnerability classes, identity/authz attack vectors, and cloud/hybrid attack surfaces. • Hands-on experience using internal AI tools and frontier models to perform or accelerate security testing, not just conceptual familiarity! • Software engineering fundamentals: System design, API integration, working with distributed services and technologies. • Ability to write custom scripts/tooling/payloads and contribute to building automation and autonomous harnesses including prompt engineering. • Excellent written and verbal communication skills. Even Better If... • Experience with agentic frameworks, prompt optimization, agent evaluation, or lightweight model fine-tuning. • Published security research, CVEs, or conference talks. • Familiarity with MITRE ATT&CK/ATLAS and offensive AI/ML attack surfaces (prompt injection, agentic privilege abuse). Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Senior Security Researcher to join our Identity Threat Detection and Response team. In this role, you will research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities. You will focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale. Additionally, you will collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats. Key Responsibilities • Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments. • Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior. • Develop and refine statistics-based classification algorithms and techniques to create and improve detection models. • Research specific scenarios to enhance our model's capabilities. • Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product. • Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats. Qualifications Required Qualifications • At least 5 years’ experience with Active Directory security and identity related attacks. • In-depth knowledge of the inner-workings of operating systems. • In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc. • In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc. • Ability to drive and own projects from start to finish. • Independent and a team player, a critical thinker. Preferred Qualifications • 2+ years of experience with Entra ID (formerly Azure AD) or SAAS application. • At least 2 years of experience coding in Python. • Strong knowledge of SQL language. • Experience with red-teaming / pentesting of Entra ID. • Experience with machine learning, data analysis, cloud infrastructure, or security. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you. This is an opportunity to join an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their cloud environments. Key Responsibilities • Contribute to a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud infrastructure. • Drive the execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments. • Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms. • Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts. • Simulate real-world attacks and perform deep behavioral analysis to inform and validate detection content. • Collaborate across engineering, product management, and go-to-market teams to deliver impactful security solutions. • Share insights with the security community through blogs, conference talks, and publications. Qualifications Required Qualifications • 5+ years in security research with a proven track record of driving impactful projects. • Deep expertise in cloud-native security, with strong focus on AWS, Azure, and GCP. • Experience developing or working with detection and response products, such as XDR, EDR, or cloud workload protection platforms. • Excellent communication skills, with the ability to articulate complex research findings and drive alignment across diverse teams. • Proficient in hands-on coding and scripting (e.g., Python). • Direct experience conducting penetration testing and red team assessments against cloud infrastructure (AWS, Azure, or GCP) Preferred Qualifications • Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow). • Familiarity with cloud threat modeling frameworks (e.g., MITRE ATT&CK for IaaS). Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Description Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds What You'll Do • Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights • Map risk vectors, build threat models, and translate them into actionable posture recommendations • Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis • Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention • Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements • 5+ years in security research, cloud security, or DevSecOps • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows. • Ability to own research initiatives end-to-end in a fast-moving environment • Excellent written and spoken English Advantages • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines • Experience with DSPM, data classification, or data security tooling • Background in supply chain security (SBOM, dependency and artifact security) • Open-source contributions, published research, or conference talks

Job Description The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research. About the group: The Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale. About the position: Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments. You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers. This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity. What you'll do: • Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure • Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis • Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on • Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails • Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on • Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays • Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage • Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks Qualifications • 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research • Real exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact • Comfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point • Strong scripting and automation skills (Python preferred) • Clear written communication. You can explain a complex attack chain to an engineer and to a CISO Strong advantage • A consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it • Broad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side • Experience with template-based or automated scanning frameworks (for example, Nuclei) • Detection engineering experience (Snort/Suricata, YARA, SIEM detection logic) • Experience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work Nice to have • Offensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research Additional Information Why join us • Impact at scale. A technique you capture once runs across thousands of customer environments • A new category. Agentic exposure validation is being defined right now, and you help define it • A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world

Job Description We are looking for an exceptional researcher at the intersection of artificial intelligence and cybersecurity. This role is intended for someone who combines deep security expertise with a practical understanding of modern AI systems and the curiosity to explore how they can be attacked, abused, and defended. Key Responsibilities • Research vulnerabilities, attack techniques, and emerging security risks in AI models, agents, applications, and supporting infrastructure. • Develop innovative attacks, proofs of concept, evaluation methods, and defensive solutions. • Analyze how model behavior changes across problem domains, task structures, prompts, tools, resources, harnesses, and model architectures. • Translate research findings into clear security requirements, technical concepts, publications, and practical protections. • Present original research at leading international cybersecurity conferences. • Maintain a strong understanding of developments across the AI and cybersecurity landscapes. • Collaborate with security researchers, AI engineers, product teams, and other stakeholders to turn research into measurable impact. Qualifications • Strong cybersecurity background in reverse engineering, vulnerability research, cryptanalysis, malware research, or a similar advanced discipline. • Passion for AI and up-to-date knowledge of leading models, technologies, organizations, and emerging capabilities. • Solid understanding of modern AI concepts, including transformers, attention, RoPE, gradient descent, fine-tuning, RLHF, RLVR, inference, and agentic systems. • Ability to independently identify valuable research questions, design experiments, build proofs of concept, and validate findings. • Strong programming and rapid-prototyping skills. • Excellent writing, communication, and presentation skills, including the ability to clearly define requirements and introduce new technical concepts. • Ability and motivation to present original research at top-tier international cybersecurity conferences. Advantages • Experience researching AI security, LLM vulnerabilities, prompt injection, model behavior, AI agents, or adversarial machine learning. • Experience developing or evaluating AI-powered security systems. • A record of security publications, vulnerability disclosures, or presentations at leading security conferences. • Experience transforming research findings into production-grade security capabilities. • Familiarity with AI evaluation frameworks, inference infrastructure, model internals, and agent orchestration.

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: Cellebrite is seeking talented researchers to join our industry-leading Digital Intelligence Security Research Labs. As a security researcher on our team, you will focus on identifying vulnerabilities within Apple’s ecosystem and developing innovative exploit strategies to gain access to iPhones and other devices, enabling the extraction of crucial evidence for law enforcements. Key responsibilities: • Research on territories with little-explored vulnerability • Work on the production of world-unique capabilities to extract evidence from phones and other embedded devices. • iPhones and other iOS devices present tough challenges from a forensics perspective and involve hardware-backed encryption (SiDP), secure crypto coprocessor (SEP), and secured boot chain (SecureROM). • New iPhones present state-of-the-art exploit mitigations such as PAC, KTRR, and PPL. • Become a member of Labs Group, focusing on Security Research for mobile devices. • Execute your own (shell) code on top-notch technology mobile platforms hardened with challenging mitigations • Collaborate with a team of passionate researchers dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. • Take part in world-class research results, assisting law enforcement by enabling lawful evidence extraction, and putting criminals behind bars every day. Requirements • Proven vulnerability research experience (preferably in iOS) • Experience with advanced exploitation techniques • ARM reverse engineering • Cryptographic primitives and weaknesses • Hardware research/board design - Advantage • You are a security researcher who cares about the ethical values of your work • You love the art of engineering and crafting a platform-wide native payload, in a fragmented ecosystem of gaping variance • You are passionate about technology and keen to use your skills to make the world a safer place. NOTE: The position is located in our offices in Tel Aviv #LI-AS1

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: The Android research group in Cellebrite Security Research Labs (SRL) is where the most challenging problems get solved. We're the ones who find the weaknesses that let us unlock modern phones and turn them into extraction capabilities investigators can actually use in the field. Our work ships straight into Cellebrite's core products, which makes this one of the most important roles in the company. Our customers are law enforcement agencies working real cases under legal authority: child exploitation, human trafficking, homicide, terrorism. A device we unlock is often THE piece of evidence that moves an investigation forward. What you'll do Perform vulnerability research on a huge variety of mobile technologies and architectures, from the application layer down through the kernel, TrustZone, the bootloader, and the firmware running underneath it. Go first into areas nobody has published and become a world-class expert in them. Reverse engineer code that was never meant to be read: no source, no symbols, no documentation. Turn bugs into exploits that hold up in the real world, across a wide range of chipsets, vendors, and OS versions. Conduct long term widely scoped security research projects as part of a broader team effort Requirements Qualifications Practical experience performing vulnerability research and exploitation Practical reverse engineering experience Practical knowledge of current and upcoming security mitigations Advantage: knowledge of Android architecture and internals Advantage: LLM-based pipelines for vulnerability research / exploit development / fuzzing Advantage: Cryptographic primitives and weaknesses Advantage: ARM Reversing Advantage: Advanced fuzzing Advantage: Offensive hardware research/board design #LI-AS1