Security Researcher jobs in Tel Aviv-Yafo

We're looking for an experienced Security Researcher to join our core team and deep dive into CVEs, conducting cutting-edge vulnerability research that directly powers Echo's revolutionary approach to eliminating container vulnerabilities at the source. Responsibilities: • Conduct deep-dive research into CVEs and vulnerabilities, analyzing root causes and attack vectors to inform our AI-powered prevention platform • Perform reverse engineering analysis using tools like IDA Pro, Ghidra, or similar platforms to understand complex security vulnerabilities and exploitation techniques • Research and analyze complex low-level system mechanisms including kernel vulnerabilities, network security issues, and operating system weaknesses • Think outside the box, challenge existing assumptions, and create innovative approaches to vulnerability research and prevention • Work in a unique environment where your research insights are rapidly implemented into our product, creating direct real-world impact from your vulnerability research • Contribute to Echo's technical knowledge base and help establish new methodologies for proactive vulnerability identification and mitigation Requirements: • 5+ years of experience in security research with focus on vulnerability analysis and exploitation • Extensive hands-on experience with reverse engineering tools (IDA, Ghidra, Jeb, or similar) • Proven experience working with CVEs, and the broader security research domain • Deep knowledge of complex low-level system mechanisms (kernel, networking, services, operating systems, embedded systems) • Excellent written and verbal communication skills with ability to present complex technical findings • Innovative mindset with ability to think outside the box and challenge conventional approaches

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Vulnerability Research is the sharpest edge of our technical work - the team that takes systems apart to learn how they truly work, and where they break. We go deep into the mechanisms, protocols, and architectures that modern technology is built on, and we pressure-test the assumptions the rest of the industry takes for granted. Sometimes that work sharpens the platform, sometimes it stands entirely on its own, as an original research novelty. As a Vulnerability Researcher, you'll build first-principles understanding of the technologies and systems you investigate, then go looking for what's wrong with them: the flawed assumptions baked into established paradigms, the gap between how a system is meant to behave and how it actually behaves, and the novel vulnerabilities and exploitation techniques no one has named yet. This is hands-on, deep technical work - reverse-engineering, breaking, and finding what's exploitable before an attacker does. You'll have the room to follow the research where it leads, and the backing of an ecosystem created to set you up for success by providing every tool and access that could help. Some threads will feed directly into how Oak understands what's genuinely exploitable, grounding the platform in real attacker reality rather than theoretical risk. Others will be pure discovery, pursued because the problem is hard and the finding truly matters, and published to move the field forward. Either way, your work establishes Oak's authority in the field. Through original research, disclosures, and technical thought leadership, you'll build a body of work that earns the respect of the security community and sharpens how the industry thinks about what's truly secure. What you will Do: • Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names. • Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended. • Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do. • Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook. • Ground Oak's understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in. • Promote Oak's standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits. What you will bring: • 6+ years of hands-on vulnerability research, reverse engineering, or offensive security, with a proven track record of finding non-trivial flaws and the depth in systems, protocols, and architectures to understand precisely why they exist. • A first-principles approach to how things actually work, not how they're documented to work: you pull the thread until you hit ground truth, and you're not satisfied until you do. • The instinct and ability to see what others overlook - the unquestioned assumptions in established systems, the edges no one has tested, the failure modes that live in the gap between spec and implementation. • End-to-end ownership of research: you drive hypotheses to conclusions through dead ends, changes of directions and reach hard proofs • Strong hands-on expertise, converting theories and research into a working chain and proof of concept. • Result driven depth: you go as far as a problem deserves, because the result is worth it, and you know when it is. • A track record of original significant discoveries - published CVEs, novel vulnerability classes or exploitation techniques, research that named a problem the field didn't have words for yet. Nice to have: • History of presenting original research at Black Hat, DEFCON, OffensiveCon, Hexacon or a comparable security conference. • Significant CVEs (CVSS High or Critical) under your name.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Research is where deep security expertise becomes product. We translate how identity is weaponized and becomes an attack path - across human, machine, and AI agent identities - into the risk models and security content that exposes real identity risk inside customer environments. Research here doesn't end in a slide deck, it ships. As a Security Researcher, you'll own and evolve the core of the Oak platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it. Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it — defining how Oak discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk. You'll also shape Oak's voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves. What you will Do: • Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers. • Translate deep expertise in identity and security into the analytical engine that drives how Oak reasons about risk, governance, and access decisions across organizations. • Create and own Oak knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform. • Pioneer Oak's approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world • Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers. What you will bring: • 5+ years of hands-on security research experience, with a track record that demonstrates depth across identity, access control, or adjacent threat domains. • Low ego, high impact - you share findings freely, measure success by the team's impact and you are value-driven, Willing to roll up your sleeves for the foundational work creating knowledge and insights in order to provide real value to real customers. • Innovative and forward thinking - Continuous desire to learn, explore and create. • The instinct to find what others miss: you approach identity attack surfaces, NHI exposure, and AI agent behavior with genuine curiosity and a willingness to go where the research leads. • A collaborative default - happy to share and work alongside product, engineering, and go-to-market teams in order to translate raw research into intelligence that sharpens Oak's platform and customers' understanding of their identity risk. Nice to have: • A history of original, published work - conference presentations (Black Hat, DEFCON, or equivalent), blog series, or white papers that has moved the needle and made impact.

Overview Join one of the elite research teams powering Microsoft Defender, the dominant market leader in XDR, SIEM, Cloud, and AI Security. We protect the world’s largest enterprises by analyzing trillions of signals to protect against sophisticated cyberattacks across hybrid and multi-cloud environments. We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI. We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsoft’s dominant market position and the world’s most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains. • Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time. • Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions. • Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale. • Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy. Qualifications • 4+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments. • Programming proficiency (e.g., Python, C#, or similar), with a proven ability to develop and ship production-ready protection logic.Demonstrated ability to work effectively in cross-functional teams, bridging the gap between deep research and scalable engineering. Preferred Qualifications • B.Sc. or M.Sc. in Computer Science or Software Engineering OR/AND related field • Public track record of security research, such as technical blog posts, whitepapers, or presentations at major industry conferences. • Experience in offensive security or adversary simulation. • Deep understanding of AI-driven threats. • Proven ability to reason over large-scale datasets using big-data query languages, applying security expertise to identify novel patterns and make evidence-based decisions. • Familiarity with cloud environments (e.g., Azure, AWS) and the specific security challenges inherent to hybrid and multi-cloud infrastructures in large enterprise customers. By applying to this position, you are being considered for multiple like positions within our organization for an invitation-only virtual Interview Day. Position specifics, including hiring team, location, and position details will be determined following the interview process. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Come build community, explore your passions and do your best work at Microsoft with thousands of University interns from every corner of the world. This opportunity will allow you to bring your aspirations, talent, potential—and excitement for the journey ahead. As a Security Research Intern, under supervision you will design and conduct security research including malware analysis, threat and vulnerability analysis, adversary tracking, threat intelligence, detection and remediation development and other technology application focuses related to the understanding of the threat landscape with intent to disrupt adversaries or provide protection via defensive products and services. You will help generate solutions including first party mitigation and working closely with customers and partners and support operational security and security incidents as well as security reviews and reporting. We are building a cutting-edge Cloud solution that gives customers visibility and control without impeding agility and helps them stay ahead of cyber threats as they evolve. You will join the group that is responsible for advanced threat detection capabilities, leveraging machine learning and behavioral profiling to detect emerging threats and advanced attacks by engineering a hyper-scale service to defend millions of hosts. At Microsoft, Interns work on real-world projects in collaboration with teams across the world, while having fun along the way. You’ll be empowered to build community, explore your passions and achieve your goals. This is your chance to bring your solutions and ideas to life while working on cutting-edge technology. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities • Begin to analyze threat trends and anomalies to determine operational impact. Determine vectors that introduce threat and potential mitigation strategies. Learn about systemic security issues and how to address them. • Process threat reporting from internal and external sources. Provide discrete threat data based on intelligence requirements or customer requests. • Identify security defects or vulnerabilities and deficiencies in security guidance. • Contribute code to technical implementation and automation of solutions to address security issues, such as signature detection, malware, threat analysis, or reverse engineering. Use results from research and experimentation to support architecture or product direction. • Identify areas of dependency and overlap with other teams or team members. Provide constructive input so the work is integrated and timely. Communicate the status of deliverables and dependencies to meet schedule. • Engage in measures to protect tools, techniques, information, and results of security practices. Respond to incidents for systems or products as needed. Use results of pen testing to improve products and services. **This student position is structured as a one-and-a-half-year role, concluding upon completion of the academic degree. Qualifications • Currently pursuing a Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field, with an expected graduation date of Summer 2028 or later. • 2+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Join the elite Microsoft Defender Research team, where we turn deep security research into autonomous protection that detects, investigates, and disrupts sophisticated attacks in near real-time across endpoints, identities, cloud applications, and cloud infrastructure. Leveraging Microsoft’s global reach and one of the world’s largest security telemetry sets, you will have a direct, tangible impact on protecting organizations and the global economy. This is an opportunity for researchers who are passionate about transforming security operations and shaping how defenders investigate and stop attacks at scale. We are looking for a Principal Security Researcher to lead research for key agents within Project Perception, part of Microsoft’s broader agentic security evolution. You will lead research for this area end to end, from framing high-impact investigation problems and bringing domain expertise into agents design and evaluation, to partnering with data science, engineering, product, and other teams to move these capabilities into production and customer-facing experiences. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Lead security research for agents within Project Perception, from defining high-impact problems and research methodology through agent design, rigorous evaluation, production readiness, and customer-facing experiences. • Set the research strategy and align partner teams across the organization. Translate research priorities into clear requirements and experiments, use evidence to influence roadmap decisions, and communicate strategy, findings, and recommendations to senior stakeholders. • Drive research outcomes into production and customer-facing experiences. Partner with engineering, data science, and product teams to define success criteria, validate quality and safety, establish production readiness, measure customer impact, and iterate based on real-world performance. • Analyze large-scale data and conduct investigations to improve the quality and effectiveness of Project Perception agents, building on and contributing to Microsoft Defender’s protection knowledge layer. • Apply and champion AI in security research, using current models, agentic architectures, coding agents, and tooling to accelerate triage, investigation, and detection and increase researcher productivity. Validate AI outputs and develop reusable workflows. • Mentor and grow researchers, elevating the team’s technical bar. Qualifications • You have at least 10+ years of experience in security research or a closely related cybersecurity research role. • Strong, evidence-backed adoption of AI in technical work. Regularly use and develop AI skills, coding agents, agentic tools, or AI-assisted workflows, while evaluating and validating outputs. • Deep expertise in security research and modern attacker tradecraft, with the ability to conduct complex investigations and translate security knowledge into reliable agent and protection outcomes. • Experience leading technical work from research and design through production delivery, partnering with engineering and product teams, and influencing roadmaps and senior stakeholders across organizational boundaries. • Proficiency in programming, such as Python or C#, and large-scale query languages, such as KQL or SQL, with experience analyzing security data and developing or validating research and protection capabilities. • Demonstrated technical leadership through mentoring researchers, raising the quality bar, and communicating complex findings clearly. Preferred Qualifications • Bachelor’s, master’s, or doctoral degree in Computer Science, Computer Security, Software Engineering, or a related field; equivalent practical experience is also valued. Other Requirements • Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter. #MSFTSecurity This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description We are 48% of breaches now come through vendors. Yet most companies still manage vendor risk through certifications and questionnaires, essentially trusting what vendors say about their security. Lema changes that. We analyze every vendor like a vulnerability researcher would: how could an attacker use this vendor to get in, and what could they reach? We’re turning vendor risk from a paperwork exercise into a true security discipline. Backed by Team8, Salesforce Ventures, and F2, and already trusted by leading enterprises, Lema is entering hypergrowth and tripling our team to build a category-defining platform. We move fast, with radical ownership, transparency, and high impact. More about Lema: • Lema.ai website • Business Insider - Cybersecurity startup Lema has come out of stealth to raise $24 million • Team8 - Why We Invested In Lema About the Role We're looking for a security researcher with 5+ years of experience to discover new ways vendors put their customers at risk. You'll own research end to end, from the first hypothesis to a shipped capability, and help decide where Lema looks next. What You'll Do • Discover new ways attackers can use vendors to get in, and prove or kill each idea with real data. • Decide which security tools and data sources we should integrate next, and why. • Shape the logic and knowledge behind our AI risk agents. • Build your own tools when the one you need doesn't exist. • Partner with engineering to turn validated research into product. • Work alongside the best security researchers in the industry. Requirements What You Bring • 4+ years of hands-on experience in security research, threat intelligence, or offensive security. • Original research to show: vulnerabilities, techniques, tools, or findings. • A strong grasp of core security domains, including identity, cloud, SaaS, endpoint, and network, and how they connect. • Rigor. You prove a finding before you claim it, and you read AI output adversarially. • Independence. You take a fuzzy question and turn it into a result without needing each step defined. • A track record of research that became a product, a detection, or a published finding. Why Join Lema AI • Impact: Build a category-defining platform that safeguards how modern businesses operate. • Ownership: Join a culture that gives you full context, autonomy, and trust to drive outcomes. • Compensation & Benefits: Competitive salary, equity package, and additional perks • Velocity: Work with exceptional peers in a high-energy, low-bureaucracy environment. • Growth: Shape a company that’s scaling rapidly, backed by Tier 1 investors and visionary customers.

About Irregular Irregular is the first frontier security lab with the mission of protecting the world in the time of increasingly capable and sophisticated AI systems. We build next-generation defenses through high-fidelity research platforms that simulate and monitor real-world AI security scenarios. As AI systems become more powerful, we focus on staying ahead of emerging threats and vulnerabilities, ensuring these transformative technologies can be deployed safely and securely. About the Role As a cyber researcher at Irregular, you will be at the forefront of research on AI security. You will engage with questions such as how to protect the weights of an advanced model against cyber threats, and how to evaluate cyber capabilities such as AI’s ability to exploit vulnerabilities, carry out network attacks, and develop malware. This role sits at a unique intersection of cybersecurity expertise and AI capabilities, where your background in vulnerability and security research will help shape the future of AI security. Representative projects: • Expanding the quantity, quality, and variety of our cyber capabilities evaluation challenges (e.g. constructing original CTF-style vulnerability & exploitation challenges, network attack simulation challenges, and more, including original types of challenges). • Leading research into methods to mitigate cybersecurity risks related to the misuse of AI, the theft of model weights, or risks associated with integrating models with dangerous capabilities in AI agents. • Publishing your research and/or delivering research to our customers. • Advising and supporting the development of the products we’re building. Representative research questions about AI frontier models: • Can an AI find and exploit 0-days? • What’s the best way to measure a CTF challenge's difficulty level vs. an AI player's skill level? • Can an AI elevate an average computer science student’s cyber capabilities to that of a nation-state? You may be a good fit if you: • Have a strong background in vulnerability/security research & development such as having found vulnerabilities/CVEs, analyzed malware, researched detection methods for attacks, developed pentesting products or other attack tools, participated in CTF competitions or authored CTF challenges, or participated in other types of security research & development. • Work well in a multidisciplinary team and can adapt to rapidly evolving challenges. • Care about the societal impacts of your work.

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

Description About Tenzai Tenzai is building autonomous AI hackers that think like the world's best offensive security experts, act like them, and then help fix what they find before the real ones do. If this mission speaks to you, come defend the world's software: autonomously, continuously, and in-depth. About the role This is a rare opportunity to work at the intersection of vulnerability research and AI. You will perform vulnerability and general cybersecurity research, experimenting and pushing the boundaries of what AI can and cannot reliably do in this space.You'll be working with other researchers on individual and group projects around research and prototyping AI agents, building evaluations and finding bugs. Responsibilites • Vulnerability research on public and private targets, building harnesses to automate work, and writing up the results • Building evaluations and challenge benchmarks to find boundaries of what specific AI agents and models can and cannot do • Analyze where Tenzai’s AI agent needs to improve, investigate cases where the AI missed, misclassified, or hallucinated vulnerabilities • Develop new attack strategies and offensive testing techniques for web and network targets, and translate real-world knowledge into prototypes of new AI agents Requirements • Deep expertise in Web security, particularly authentication, business logic, and injection flaws OR deep expertise in network security • 3+ years of experience In vulnerability research or any security research in these fields • Ability to articulate complex vulnerabilities clearly, both in writing and verbally • Experience in writing code to develop tooling • Strong preference for someone with background in static or dynamic analysis, protocol design or other adjacent fields • Comfortable working in a fast-paced startup environment with a high degree of ownership Why Tenzai • Working on problems that matter - Software is now written and deployed faster than it can be secured. Attackers are beginning to use AI to find vulnerabilities at scale. Tenzai exists to close that gap. It's a mission that requires elite hackers, and also sharp storytellers, wicked-smart operators, and experienced market builders. • Building a category in the making - Tenzai is defining a new category in cybersecurity. That means every team — from research and engineering to product, brand, and go-to-market — has a chance to shape how the industry understands and adopts autonomous security. If you thrive building something from zero and helping a new idea take hold in the world, keep reading. • Talent density - We believe small teams of exceptional people outperform large organizations. Tenzai was founded by veteran security experts and repeat entrepreneurs. We hire deliberately and value curiosity, initiative, and craftsmanship, whatever your discipline. • Creating real impact, quickly - Whether you're building systems, shaping product experiences, telling the story, or helping customers succeed, your work will immediately influence how organizations secure their software. We move quickly, keep teams lean, and give humans ownership. • Ambition with humility - We're tackling hard problems with a team that values deep expertise and thoughtful collaboration. Everyone here is learning, experimenting, and pushing the boundaries of what's possible. Plus, we love eating lunch together.

Description Join Noma Security and help shape the future of AI security in a fast-paced, high-impact environment. Noma is building the first comprehensive AI Security and Governance Platform, helping organizations adopt AI and LLMs with confidence and control. As AI becomes core to modern enterprises, we provide seamless visibility and protection across the entire AI lifecycle. Our team works at the intersection of AI, security, and cloud, shaping a new category in a rapidly evolving market. At Noma, you’ll have the opportunity to make a meaningful impact while working with exceptional people on technology that truly matters. We’re looking for a Security Vulnerability Researcher to be a core driver in how our product empowers security teams. You will be expected to deeply understand customer needs and translate them directly into product features that deliver real value. You'll own key parts of our frontend stack, drive key architectural decisions, and turn complex security data into clear, actionable business insights. This is a hands-on role for a seasoned offensive researcher who thrives on technical depth and creativity. You’ll collaborate closely with product, marketing, and engineering teams to deliver research that drives customer trust, informs product direction, and shapes industry thought leadership. 🛠️ What You’ll Do • Perform AI-Focused Vulnerability Research: Investigate security risks in AI models, APIs, and infrastructure to uncover exploitable weaknesses and publish insights that strengthen our market leadership. • Lead Red Teaming Against AI Systems: Simulate adversarial attacks on AI pipelines and APIs, creating impactful PoCs that showcase real-world risk and defensive strategies. • Build Customer-Facing Proof-of-Concepts: Partner with product and engineering teams to design and deliver PoCs that align with customer use cases and highlight Noma’s security capabilities. ✅ What You Bring • 5+ years in Security Research or Offensive Engineering with a proven track record in penetration testing or vulnerability discovery on complex targets. • Deep expertise in Application & AI Security, including experience exploiting APIs, web applications, and AI/ML vulnerabilities such as prompt injection, adversarial manipulation, or model abuse. • Offensive Security & Red Teaming Experience, with practical use of tools, custom exploits, or adversarial testing methods. • Proficiency in developing and presenting PoCs that clearly demonstrate security risks to both technical and non-technical audiences. • Recognized achievements in Bug Bounty or Military-Grade Security Research, or equivalent real-world offensive security experience. • Solid software engineering background, with the ability to read, write, and debug code (Python, JavaScript, Go, etc.). 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Description Security Researcher Noma Security is redefining how organizations Safely adopt AI into their organization . As a key member of our research team, you’ll help us stay ahead of rapidly evolving threats by uncovering vulnerabilities, analyzing adversarial techniques, and producing groundbreaking insights that directly influence our product, marketing, and customer strategy. You’ll work alongside world-class engineers and security experts to conduct deep technical research, simulate real-world attacks, and create impactful proof-of-concepts (PoCs) that showcase how to protect AI-driven systems. This role is ideal for a hands-on security researcher who thrives on curiosity, creativity, and rigor, someone who wants to shape the future of AI security in a fast-moving product startup. What You’ll Do: • Drive AI Security Research: Investigate vulnerabilities in AI models, agentic platforms, and infrastructure- covering risks like prompt injection, adversarial manipulation, and model abuse. • Build Proof-of-Concepts: Develop technical PoCs that demonstrate real-world security threats and defenses, supporting both product validation and thought leadership. • Research new Prompt injection techniques: Implement novel techniques of adversarial attacks on AI systems in our automated red team module to evaluate resilience and inform customer-focused security offerings. • Track Competitors & Trends: Research the broader ecosystem of AI and cybersecurity to identify competitor capabilities, market shifts, and innovation opportunities. • Collaborate Across Teams: Partner with engineering and product to translate research into practical protections, product features, and marketing content. Requirements for Success: • 5+ years in security research or offensive engineering, with a focus on high-value targets • Strong background in application and AI security (prompt injection, adversarial ML, agent security). • Experience in red teaming or offensive security, including AI/ML pipelines, APIs, and infrastructure. • Proven ability to design and communicate PoCs for both technical and non-technical audiences. • Familiarity with bug bounty programs or military-grade research is a strong plus. • Curious, detail-oriented mindset with the ability to balance multiple research initiatives. • Experience with research for marketing, including blogs, thought leadership, conferneces, published researches- advantage. 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Description About us Oligo is a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, we’re on a mission to make real-time security a reality. Oligo’s industry’s leading runtime security platform built to stop attacks in real time without stopping the business. We transform security from passive visibility to active protection across applications, cloud services, workloads, and AI systems. By uncovering the deepest layers of what actually runs in production, Oligo helps organizations prioritize exploitable vulnerabilities, detect malicious behavior as it happens, and stop modern attacks in their tracks. What You’ll Be Doing As a Security Researcher at Oligo, you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities. This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work. Specifically, you will: • Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems. • Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs. • Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection. • Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats. • Work closely with engineering and product teams to turn research into practical security capabilities. Requirements Qualifications • 5+ years of experience in security research, vulnerability research, detection engineering, threat detection engineer, or a related technical security role. • Strong understanding of modern application attack techniques, including the ability to analyze vulnerabilities and exploitation flows. • Deep expertise in Linux internals. • High degree of ownership and ability to independently navigate ambiguous technical problem spaces and turn them into structured research plans and actionable outcomes. • Experience designing and conducting hands-on technical research, including investigations, experiments, and PoC development. • Strong programming skills for code analysis, research tooling, and building proof-of-concepts and vulnerable test applications. • Strong communication and teamwork skills, with a collaborative approach to problem-solving across teams. • Data analysis skills and hands-on experience working with databases. We’ll be lucky if you have • Experience with cloud-native attack surfaces, such as Kubernetes. • Familiarity with eBPF, syscall tracing, or other low-level runtime observability techniques. • Knowledge of programming language internals, exploitation techniques, or low-level system behavior. • Experience with data science or statistical analysis in the context of security research. • Familiarity with AI security concepts and attack techniques targeting LLMs, agents, or AI-integrated applications.

Description We are a fast-growing stealth cyber startup, backed by Team8, on a mission to solve one of the most critical challenges in the modern cyber landscape. We are looking for a brilliant Founding Vulnerability Researcher to join our core R&D team and help shape the technical heart of our product from the ground up. Role description We are looking for a strong offensive security researcher to join our core team, become a true partner in building the product end-to-end, and take a key role in shaping our research methodology, technical direction, and product capabilities. This is a hands-on role in a small team, sitting at the intersection of world-class offensive research and core agentic AI research — with a lot of responsibility, autonomy, and influence over the technical and business direction. What you will do • Discover novel vulnerabilities, attack primitives, and exploitation techniques across various surfaces. • Build reliable, weaponizable proof-of-concepts that hold up in real production environments. • Translate offensive techniques and original research into real product capabilities. • Develop methodologies that mirror how top attackers actually operate end-to-end. • Stress-test the product against hardened targets and push the ceiling of what it can do. • Represent the company in the research community through talks, papers, and disclosures. Requirements • 5+ years of hands-on experience in offensive security research or exploit development. • Demonstrable track record of offensive work — previous roles, bug bounty, CTF reputation, published CVEs, or original research. • Deep expertise in at least one offensive domain — web/app vulnerability research, cloud, identity, kernel/OS internals, network protocols, or AI/LLM security. • Comfortable in Python, Go, or Rust, with the ability to ship research into production-quality code. • Comfortable with ambiguity and zero-to-one work; founding DNA and a strong sense of ownership. • High proficiency in English, written and spoken. • Based in Tel Aviv, in-person — this is a founding team role.

Description Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences. Key Responsibilities • Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities. • Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks. • Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems. • Author high-quality technical blogs, whitepapers, and vulnerability reports. • Represent the company by speaking and participating in leading global security conferences. Requirements • Experience: 6+ years of proven experience in Offensive Security, Vulnerability Research, or Web Application Security. • Proven Track Record: Demonstrated background in discovering and disclosing vulnerabilities (e.g., published CVEs, strong bug bounty profiles, or independent research). • Technical Proficiency: Strong programming and scripting skills in languages such as Python, Go, C/C++, or Rust to build custom exploits and tooling. • Cloud/AI Knowledge: Solid understanding of modern Cloud environments (AWS, GCP, or Azure) and a foundational understanding of AI/ML architectures and their unique attack surfaces (e.g., LLM vulnerabilities, model poisoning). • Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical findings into clear business value for clients. Advantages • Low-Level Expertise: Proven background in low-level exploitation (e.g., binary analysis, reverse engineering, memory corruption vulnerabilities).

Job Description • Research the security of AI systems end to end, from the agents and frameworks they're built on to the runtimes and infrastructure that run them • Take apart complex software and find where it breaks • Turn a vulnerability into a full, working exploit, not just a proof that the bug exists • Understand the defenses modern systems lean on, and how to get past them • Share what you find, through coordinated disclosure and conference talks Qualifications • 4+ years in security research, vulnerability research, or a closely related field • A strong sense of how software works under the hood, whether that's a modern framework or the system underneath it • Comfortable reading complex code, and reverse engineering with IDA Pro or Ghidra when there's no source • Working knowledge of common vulnerability classes, from unsafe deserialization and logic flaws to memory corruption, and the experience to take one all the way to a working exploit • Excited about AI, and eager to get to its security problems first • Real curiosity, and the drive to go deep when the answer isn't obvious Nice to have • Experience researching AI systems, agent frameworks, or the infrastructure behind them • Published research, whether CVEs, blog posts, or conference talks • A degree in computer science, mathematics, or engineering, or the hands-on experience to match