Security Researcher jobs in Tel Aviv-Yafo

About Dash Security Dash Security is building the security layer for the agentic enterprise - so teams can let AI run, securely. Enterprises are adopting AI agents across coding tools, SaaS, cloud, and endpoints, and traditional security stacks don't work where agents interpret instructions, plan, and act at runtime. Dash discovers every agent, MCP server, skill, and interaction; captures full agentic sessions end to end; and observes, governs, and acts across every agent and interaction, everywhere they run - instantly. We exist to close the agent security gap with intent-aware runtime protection that scales with enterprise AI adoption. Role Overview We are seeking an AI Security Researcher to join Dash's core research team. You'll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security. Responsibilities Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms. Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available. Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns. Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders. Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points. Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies. Collaborate with engineering: Embed research into Dash's detection pipelines, session-aware runtime protection, and policy/governance modules. Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dash's detection and enforcement coverage. Qualifications BSc./MSc. in Computer Science, Security, or equivalent military/industry experience. 4+ years of security research (AppSec, malware, adversarial AI, or platform security). Experience with Agentic AI security research is an advantage. Hands-on experience working with coding agents (e.g., Cursor, Claude Code) is a must, including practical use of agentic capabilities such as MCP servers, Skills, hooks, and similar agent tooling. Experience with AI systems, agent frameworks, or protocol security (e.g., LangChain, MCP, A2A) is a strong plus. Proficiency in Python for prototyping, research tooling, and detection logic; familiarity with TypeScript or Go is a plus for collaborating with engineering. Strong grasp of cloud, SaaS, and endpoint security models, especially identity and data access. Demonstrated ability to transform research into productized runtime detections. Self-driven, curious, and eager to define the next frontier of enterprise security.

About the role We're looking for a Security Researcher to join our Research team - a small, curious, and highly technical group at the heart of what we do, defining how cyber resilience is evaluated. As one of our resilience experts, you'll make sure our platform delivers accurate, meaningful insights across complex enterprise environments, tackling challenging technical problems and exploring unfamiliar technologies every day. This isn't a traditional vulnerability research or red-team role. It's a high-impact role at the intersection of cybersecurity, cloud infrastructure, data, and AI, for someone who wants the freedom to explore new ideas and turn research into real product impact. Responsibilities Shape the product through research. Proactively identify new capabilities, challenge assumptions, and work with Product to turn research into product improvements. Influence our core algorithms. Partner with R&D to improve our resilience assessments, investigate edge cases, and validate results against real environments. Solve complex technical questions. Dive into cloud technologies, configurations, and documentation to uncover risks, and translate research into detection logic and product requirements. Investigate real enterprise environments. Lead research for strategic POCs, analyze customer infrastructure, validate findings, and uncover insights with meaningful business impact. Turn data into evidence. Analyze large datasets, identify patterns and anomalies, and deliver evidence-backed conclusions that inform product and customer decisions. Scale research with AI and automation. Build tools, workflows, and AI agents that make research faster and repeatable, and continuously rethink how research gets done. Communicate research to customers. Join customer calls to explain complex findings and answer challenging questions with clarity and confidence. Requirements 4+ years of hands-on technical experience in cybersecurity, cloud infrastructure, networking, technical research, or data analysis. A researcher's mindset, with the ability to break down complex problems, investigate systematically, and turn assumptions into evidence. A strong sense of ownership - spotting opportunities, questioning existing approaches, and driving open-ended problems to completion in a fast-moving startup environment. Hands-on analytical skills, including working with SQL, Python, or similar tools to investigate complex datasets and identify patterns. Technical curiosity and the ability to quickly build a deep understanding of unfamiliar technologies. Solid foundations in cloud infrastructure, networking, and modern IT environments. Good communication skills in English, with the ability to explain complex technical findings to engineers, product managers, and customers, both verbally and in writing. Nice to have Hands-on experience with public clouds (AWS, Azure, or GCP). Familiarity with backup, disaster recovery, replication, or high-availability technologies. Experience with Kubernetes, virtualization, or infrastructure-as-code. Experience using LLMs or AI agents for technical research and automation. Experience supporting technical POCs, customer investigations, or technical presentations. Published research, technical articles, or conference talks.

Description About Nagomi Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. The Opportunity As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production. What You'll Do • Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features. • Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats. • Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data. • Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments. • Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter. • Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation. • Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build. Requirements • Experience: 5+ years of hands-on experience in cybersecurity research, exposure management, vulnerability analysis, or threat intelligence. • Product Mindset: Strong ability to tackle projects end-to-end, translating theoretical security research into tangible product features and automated detection logic. • Broad Security Knowledge: Deep understanding of enterprise security tools (EDR, NDR, SIEM, VM, etc.), network topology, and how security components interact to impact network posture. • AI/Agentic Expertise: Proven experience building or heavily shaping AI-powered systems and agentic workflows. You must be able to point to concrete examples where you have integrated LLMs or AI processes to solve complex technical problems. • Attacker's Perspective: Solid foundation in how adversaries think, move laterally, and exploit enterprise environments, paired with expertise in leading vulnerability prioritization standards (MITRE ATT&CK, CISA KEV, EPSS). • Communication: Strong communication skills with demonstrated experience working directly with customers, stakeholders, and cross-functional engineering teams. It’s nice if you have • Experience collaborating with data science, data engineering, or analytics teams to structure security datasets and build scalable intelligence pipelines. • Published research, CVEs, conference talks, or open-source contributions.

We're looking for an experienced Security Researcher to join our core team and deep dive into CVEs, conducting cutting-edge vulnerability research that directly powers Echo's revolutionary approach to eliminating container vulnerabilities at the source. Responsibilities: • Conduct deep-dive research into CVEs and vulnerabilities, analyzing root causes and attack vectors to inform our AI-powered prevention platform • Perform reverse engineering analysis using tools like IDA Pro, Ghidra, or similar platforms to understand complex security vulnerabilities and exploitation techniques • Research and analyze complex low-level system mechanisms including kernel vulnerabilities, network security issues, and operating system weaknesses • Think outside the box, challenge existing assumptions, and create innovative approaches to vulnerability research and prevention • Work in a unique environment where your research insights are rapidly implemented into our product, creating direct real-world impact from your vulnerability research • Contribute to Echo's technical knowledge base and help establish new methodologies for proactive vulnerability identification and mitigation Requirements: • 5+ years of experience in security research with focus on vulnerability analysis and exploitation • Extensive hands-on experience with reverse engineering tools (IDA, Ghidra, Jeb, or similar) • Proven experience working with CVEs, and the broader security research domain • Deep knowledge of complex low-level system mechanisms (kernel, networking, services, operating systems, embedded systems) • Excellent written and verbal communication skills with ability to present complex technical findings • Innovative mindset with ability to think outside the box and challenge conventional approaches

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Research is where deep security expertise becomes product. We translate how identity is weaponized and becomes an attack path - across human, machine, and AI agent identities - into the risk models and security content that exposes real identity risk inside customer environments. Research here doesn't end in a slide deck, it ships. As a Security Researcher, you'll own and evolve the core of the Oak platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it. Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it — defining how Oak discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk. You'll also shape Oak's voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves. What you will Do: • Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers. • Translate deep expertise in identity and security into the analytical engine that drives how Oak reasons about risk, governance, and access decisions across organizations. • Create and own Oak knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform. • Pioneer Oak's approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world • Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers. What you will bring: • 5+ years of hands-on security research experience, with a track record that demonstrates depth across identity, access control, or adjacent threat domains. • Low ego, high impact - you share findings freely, measure success by the team's impact and you are value-driven, Willing to roll up your sleeves for the foundational work creating knowledge and insights in order to provide real value to real customers. • Innovative and forward thinking - Continuous desire to learn, explore and create. • The instinct to find what others miss: you approach identity attack surfaces, NHI exposure, and AI agent behavior with genuine curiosity and a willingness to go where the research leads. • A collaborative default - happy to share and work alongside product, engineering, and go-to-market teams in order to translate raw research into intelligence that sharpens Oak's platform and customers' understanding of their identity risk. Nice to have: • A history of original, published work - conference presentations (Black Hat, DEFCON, or equivalent), blog series, or white papers that has moved the needle and made impact.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Vulnerability Research is the sharpest edge of our technical work - the team that takes systems apart to learn how they truly work, and where they break. We go deep into the mechanisms, protocols, and architectures that modern technology is built on, and we pressure-test the assumptions the rest of the industry takes for granted. Sometimes that work sharpens the platform, sometimes it stands entirely on its own, as an original research novelty. As a Vulnerability Researcher, you'll build first-principles understanding of the technologies and systems you investigate, then go looking for what's wrong with them: the flawed assumptions baked into established paradigms, the gap between how a system is meant to behave and how it actually behaves, and the novel vulnerabilities and exploitation techniques no one has named yet. This is hands-on, deep technical work - reverse-engineering, breaking, and finding what's exploitable before an attacker does. You'll have the room to follow the research where it leads, and the backing of an ecosystem created to set you up for success by providing every tool and access that could help. Some threads will feed directly into how Oak understands what's genuinely exploitable, grounding the platform in real attacker reality rather than theoretical risk. Others will be pure discovery, pursued because the problem is hard and the finding truly matters, and published to move the field forward. Either way, your work establishes Oak's authority in the field. Through original research, disclosures, and technical thought leadership, you'll build a body of work that earns the respect of the security community and sharpens how the industry thinks about what's truly secure. What you will Do: • Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names. • Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended. • Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do. • Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook. • Ground Oak's understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in. • Promote Oak's standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits. What you will bring: • 6+ years of hands-on vulnerability research, reverse engineering, or offensive security, with a proven track record of finding non-trivial flaws and the depth in systems, protocols, and architectures to understand precisely why they exist. • A first-principles approach to how things actually work, not how they're documented to work: you pull the thread until you hit ground truth, and you're not satisfied until you do. • The instinct and ability to see what others overlook - the unquestioned assumptions in established systems, the edges no one has tested, the failure modes that live in the gap between spec and implementation. • End-to-end ownership of research: you drive hypotheses to conclusions through dead ends, changes of directions and reach hard proofs • Strong hands-on expertise, converting theories and research into a working chain and proof of concept. • Result driven depth: you go as far as a problem deserves, because the result is worth it, and you know when it is. • A track record of original significant discoveries - published CVEs, novel vulnerability classes or exploitation techniques, research that named a problem the field didn't have words for yet. Nice to have: • History of presenting original research at Black Hat, DEFCON, OffensiveCon, Hexacon or a comparable security conference. • Significant CVEs (CVSS High or Critical) under your name.

Overview Join the elite Microsoft Defender Research team, where we turn deep security research into autonomous protection that detects, investigates, and disrupts sophisticated attacks in near real-time across endpoints, identities, cloud applications, and cloud infrastructure. Leveraging Microsoft’s global reach and one of the world’s largest security telemetry sets, you will have a direct, tangible impact on protecting organizations and the global economy. This is an opportunity for researchers who are passionate about transforming security operations and shaping how defenders investigate and stop attacks at scale. We are looking for a Principal Security Researcher to lead research for key agents within Project Perception, part of Microsoft’s broader agentic security evolution. You will lead research for this area end to end, from framing high-impact investigation problems and bringing domain expertise into agents design and evaluation, to partnering with data science, engineering, product, and other teams to move these capabilities into production and customer-facing experiences. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Lead security research for agents within Project Perception, from defining high-impact problems and research methodology through agent design, rigorous evaluation, production readiness, and customer-facing experiences. • Set the research strategy and align partner teams across the organization. Translate research priorities into clear requirements and experiments, use evidence to influence roadmap decisions, and communicate strategy, findings, and recommendations to senior stakeholders. • Drive research outcomes into production and customer-facing experiences. Partner with engineering, data science, and product teams to define success criteria, validate quality and safety, establish production readiness, measure customer impact, and iterate based on real-world performance. • Analyze large-scale data and conduct investigations to improve the quality and effectiveness of Project Perception agents, building on and contributing to Microsoft Defender’s protection knowledge layer. • Apply and champion AI in security research, using current models, agentic architectures, coding agents, and tooling to accelerate triage, investigation, and detection and increase researcher productivity. Validate AI outputs and develop reusable workflows. • Mentor and grow researchers, elevating the team’s technical bar. Qualifications • You have at least 10+ years of experience in security research or a closely related cybersecurity research role. • Strong, evidence-backed adoption of AI in technical work. Regularly use and develop AI skills, coding agents, agentic tools, or AI-assisted workflows, while evaluating and validating outputs. • Deep expertise in security research and modern attacker tradecraft, with the ability to conduct complex investigations and translate security knowledge into reliable agent and protection outcomes. • Experience leading technical work from research and design through production delivery, partnering with engineering and product teams, and influencing roadmaps and senior stakeholders across organizational boundaries. • Proficiency in programming, such as Python or C#, and large-scale query languages, such as KQL or SQL, with experience analyzing security data and developing or validating research and protection capabilities. • Demonstrated technical leadership through mentoring researchers, raising the quality bar, and communicating complex findings clearly. Preferred Qualifications • Bachelor’s, master’s, or doctoral degree in Computer Science, Computer Security, Software Engineering, or a related field; equivalent practical experience is also valued. Other Requirements • Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter. #MSFTSecurity This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Come build community, explore your passions and do your best work at Microsoft with thousands of University interns from every corner of the world. This opportunity will allow you to bring your aspirations, talent, potential—and excitement for the journey ahead. As a Security Research Intern, under supervision you will design and conduct security research including malware analysis, threat and vulnerability analysis, adversary tracking, threat intelligence, detection and remediation development and other technology application focuses related to the understanding of the threat landscape with intent to disrupt adversaries or provide protection via defensive products and services. You will help generate solutions including first party mitigation and working closely with customers and partners and support operational security and security incidents as well as security reviews and reporting. We are building a cutting-edge Cloud solution that gives customers visibility and control without impeding agility and helps them stay ahead of cyber threats as they evolve. You will join the group that is responsible for advanced threat detection capabilities, leveraging machine learning and behavioral profiling to detect emerging threats and advanced attacks by engineering a hyper-scale service to defend millions of hosts. At Microsoft, Interns work on real-world projects in collaboration with teams across the world, while having fun along the way. You’ll be empowered to build community, explore your passions and achieve your goals. This is your chance to bring your solutions and ideas to life while working on cutting-edge technology. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities • Begin to analyze threat trends and anomalies to determine operational impact. Determine vectors that introduce threat and potential mitigation strategies. Learn about systemic security issues and how to address them. • Process threat reporting from internal and external sources. Provide discrete threat data based on intelligence requirements or customer requests. • Identify security defects or vulnerabilities and deficiencies in security guidance. • Contribute code to technical implementation and automation of solutions to address security issues, such as signature detection, malware, threat analysis, or reverse engineering. Use results from research and experimentation to support architecture or product direction. • Identify areas of dependency and overlap with other teams or team members. Provide constructive input so the work is integrated and timely. Communicate the status of deliverables and dependencies to meet schedule. • Engage in measures to protect tools, techniques, information, and results of security practices. Respond to incidents for systems or products as needed. Use results of pen testing to improve products and services. **This student position is structured as a one-and-a-half-year role, concluding upon completion of the academic degree. Qualifications • Currently pursuing a Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field, with an expected graduation date of Summer 2028 or later. • 2+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Join one of the elite research teams powering Microsoft Defender, the dominant market leader in XDR, SIEM, Cloud, and AI Security. We protect the world’s largest enterprises by analyzing trillions of signals to protect against sophisticated cyberattacks across hybrid and multi-cloud environments. We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI. We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsoft’s dominant market position and the world’s most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains. • Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time. • Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions. • Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale. • Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy. Qualifications • 4+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments. • Programming proficiency (e.g., Python, C#, or similar), with a proven ability to develop and ship production-ready protection logic.Demonstrated ability to work effectively in cross-functional teams, bridging the gap between deep research and scalable engineering. Preferred Qualifications • B.Sc. or M.Sc. in Computer Science or Software Engineering OR/AND related field • Public track record of security research, such as technical blog posts, whitepapers, or presentations at major industry conferences. • Experience in offensive security or adversary simulation. • Deep understanding of AI-driven threats. • Proven ability to reason over large-scale datasets using big-data query languages, applying security expertise to identify novel patterns and make evidence-based decisions. • Familiarity with cloud environments (e.g., Azure, AWS) and the specific security challenges inherent to hybrid and multi-cloud infrastructures in large enterprise customers. By applying to this position, you are being considered for multiple like positions within our organization for an invitation-only virtual Interview Day. Position specifics, including hiring team, location, and position details will be determined following the interview process. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description We are 48% of breaches now come through vendors. Yet most companies still manage vendor risk through certifications and questionnaires, essentially trusting what vendors say about their security. Lema changes that. We analyze every vendor like a vulnerability researcher would: how could an attacker use this vendor to get in, and what could they reach? We’re turning vendor risk from a paperwork exercise into a true security discipline. Backed by Team8, Salesforce Ventures, and F2, and already trusted by leading enterprises, Lema is entering hypergrowth and tripling our team to build a category-defining platform. We move fast, with radical ownership, transparency, and high impact. More about Lema: • Lema.ai website • Business Insider - Cybersecurity startup Lema has come out of stealth to raise $24 million • Team8 - Why We Invested In Lema About the Role We're looking for a security researcher with 5+ years of experience to discover new ways vendors put their customers at risk. You'll own research end to end, from the first hypothesis to a shipped capability, and help decide where Lema looks next. What You'll Do • Discover new ways attackers can use vendors to get in, and prove or kill each idea with real data. • Decide which security tools and data sources we should integrate next, and why. • Shape the logic and knowledge behind our AI risk agents. • Build your own tools when the one you need doesn't exist. • Partner with engineering to turn validated research into product. • Work alongside the best security researchers in the industry. Requirements What You Bring • 4+ years of hands-on experience in security research, threat intelligence, or offensive security. • Original research to show: vulnerabilities, techniques, tools, or findings. • A strong grasp of core security domains, including identity, cloud, SaaS, endpoint, and network, and how they connect. • Rigor. You prove a finding before you claim it, and you read AI output adversarially. • Independence. You take a fuzzy question and turn it into a result without needing each step defined. • A track record of research that became a product, a detection, or a published finding. Why Join Lema AI • Impact: Build a category-defining platform that safeguards how modern businesses operate. • Ownership: Join a culture that gives you full context, autonomy, and trust to drive outcomes. • Compensation & Benefits: Competitive salary, equity package, and additional perks • Velocity: Work with exceptional peers in a high-energy, low-bureaucracy environment. • Growth: Shape a company that’s scaling rapidly, backed by Tier 1 investors and visionary customers.

Description We’re looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team. Why Mitiga? EDR protects the endpoint. Mitiga protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business. Mitiga is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure — cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools can’t see, Mitiga provides Zero-Impact Breach Prevention, in runtime. The Role We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization. You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team. What You'll Do Drive Groundbreaking Research • Own and drive Mitiga's most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication. • Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats. • Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities. • Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it. Be a Voice in the Community • Represent Mitiga as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions. • Build and maintain Mitiga's reputation as a research-driven company that advances the field - not just a vendor with a blog. • Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing. Shape the Product • Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats. • Design and develop advanced detection algorithms that directly feed into Mitiga's platform, closing the gap between research insight and customer protection. Elevate the Team • Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to. • Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices. • Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities. • Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity. Requirements Who You Are • 8+ years in security research, threat research, or closely related fields (offensive security, detection engineering, incident response, cloud security engineering). Fewer years are fine if your depth and track record are exceptional. • Deep multi-cloud expertise - strong hands-on experience across at least two of the major cloud providers (AWS, Azure, GCP), with working knowledge of the third. You understand the IAM models, logging pipelines, APIs, and attack surfaces that matter in each. • A track record of original research - you've published meaningful technical findings through blog posts, conference talks, open-source tools, or vulnerability discoveries that moved the needle. We want someone who doesn't just consume research - you produce it. • Strong adversarial mindset and critical thinking - you think like an attacker targeting cloud infrastructure, SaaS platforms, identity systems, and Kubernetes. You can model threat scenarios, map out attack paths, and poke holes in defenses. • Ability to operate autonomously on ambiguous, high-stakes problems. You don't wait for detailed specs - you identify what matters and drive it forward. It Would Be Nice If You Also Had • Experience with cloud forensics and incident response (DFIR in cloud/SaaS environments). • Background in red teaming or penetration testing targeting cloud environments. • Familiarity with Kubernetes security, container escape techniques, and cloud-native supply chain risks. • Experience building or contributing to threat intelligence frameworks or detection content libraries. Some More Details and Perks • Location: Tel Aviv, IL • Hybrid work Environment • Competitive compensation package with stock options, educational fund, cibus. • Top of the line equipment For more information visit us at www.mitiga.io Mitiga is an equal opportunity employer, committed to diversity and inclusiveness and aim to attract, retain, and engage a diverse workforce. We consider all qualified applicants without regard to race, color, nationality, gender, gender identity, sexual orientation, religion, disability, age or any other characteristic protected by law.

About Irregular Irregular is the first frontier security lab with the mission of protecting the world in the time of increasingly capable and sophisticated AI systems. We build next-generation defenses through high-fidelity research platforms that simulate and monitor real-world AI security scenarios. As AI systems become more powerful, we focus on staying ahead of emerging threats and vulnerabilities, ensuring these transformative technologies can be deployed safely and securely. About the Role As a cyber researcher at Irregular, you will be at the forefront of research on AI security. You will engage with questions such as how to protect the weights of an advanced model against cyber threats, and how to evaluate cyber capabilities such as AI’s ability to exploit vulnerabilities, carry out network attacks, and develop malware. This role sits at a unique intersection of cybersecurity expertise and AI capabilities, where your background in vulnerability and security research will help shape the future of AI security. Representative projects: • Expanding the quantity, quality, and variety of our cyber capabilities evaluation challenges (e.g. constructing original CTF-style vulnerability & exploitation challenges, network attack simulation challenges, and more, including original types of challenges). • Leading research into methods to mitigate cybersecurity risks related to the misuse of AI, the theft of model weights, or risks associated with integrating models with dangerous capabilities in AI agents. • Publishing your research and/or delivering research to our customers. • Advising and supporting the development of the products we’re building. Representative research questions about AI frontier models: • Can an AI find and exploit 0-days? • What’s the best way to measure a CTF challenge's difficulty level vs. an AI player's skill level? • Can an AI elevate an average computer science student’s cyber capabilities to that of a nation-state? You may be a good fit if you: • Have a strong background in vulnerability/security research & development such as having found vulnerabilities/CVEs, analyzed malware, researched detection methods for attacks, developed pentesting products or other attack tools, participated in CTF competitions or authored CTF challenges, or participated in other types of security research & development. • Work well in a multidisciplinary team and can adapt to rapidly evolving challenges. • Care about the societal impacts of your work.

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

Description About Us Zenity is the leader in AI Agent Security and the first company to bring an agent-centric security platform to market. As enterprises accelerate AI agent adoption, we are establishing the security framework for how AI agents are secured and governed at enterprise scale. We deliver full-lifecycle visibility, governance, detection, prevention, and response for AI agents from build time to runtime, across SaaS, home-grown platforms, and end-user devices. Backed by $180M+ in total funding, including a $125M Series C led by Norwest, with participation from SoftBank Vision Fund 2 and Microsoft's M12, Zenity is trusted by Fortune 500 and Global 2000 enterprises worldwide. Join us in shaping how AI agents are secured at enterprise scale. About the Role We’re seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen Zenity’s detection capabilities. In this role, you’ll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. It’s a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses. Responsibilities • Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies. • Conduct research on cloud, web, and API security to uncover new threats and attack vectors. • Develop, refine, and design world-class detection logic and rules to enhance Zenity's runtime protection. • Perform threat-hunting activities across large data sources to identify emerging attack patterns • Drive full-cycle research: from hypothesis and experimentation to production validation. • Collaborate with engineering and product teams to deliver actionable insights. Requirements • 4+ years in security research, including cloud, web, or API security. • Experience in detection engineering and building or working with detection-driven security products. • Strong coding and data analytics skills in scripting and programming languages such as Python, JavaScript and bash, and proficiency with SQL-like queries. • Solid grasp of security principles, cloud security, and runtime defense. • Curiosity, creativity, and a self-driven approach to research. • Experience tinkering with LLMs and AI security - a strong plus.

🔹 Title: Security Researcher 📍 Locations (Hybrid): Tel Aviv (Sky Tower) 👥 Reporting To: Threat Research Team Leader 🌟 Opportunity Highlights We are looking for a Security Researcher to join our team; an enthusiastic, autodidact who is passionate about analyzing vulnerabilities and malware techniques. He/she will build offensive breach scenarios, integrating the latest security knowledge into the SafeBreach platform of threats and 1-day exploits. 👋 Who We Are SafeBreach is on a mission to help organizations have certainty in their security. Long trusted as the global leader in adversarial exposure validation (AEV), SafeBreach empowers organizations to take command of risk by operationalizing the full CTEM lifecycle with the SafeBreach CTEM Platform. Powered by the SafeBreach Helm AI infrastructure layer and grounded in the award-winning SafeBreach Exposure Validation Platform, the SafeBreach CTEM Platform is the first enterprise-grade, closed-loop solution designed to move organizations beyond siloed security activities toward a continuous, intelligence-driven exposure management program. Backed by world-renowned threat researchers and an unrivaled customer success team, SafeBreach provides the capabilities enterprises need to holistically understand threat exposure, make data-driven decisions that reduce risk, and measurably improve cyber resilience—safely and at scale. We are a team of passionate security professionals and innovators. If you’re ready to tackle complex security challenges and make a tangible impact on enterprise defense, we’d love to meet you. 🚀 The Impact You Will Have • Research in rich environments: Work across Windows, Linux, Mac, Docker, and advanced cloud environments (AWS, Azure, GCP). • Research and implement a huge variety of cyber tactics (privilege escalation, defense evasion, lateral movement, OS persistence, credential access, etc) • Exploit complex 1-days on apps & native OS. • Innovate & Build: Work with a wide variety of technologies to simulate real-world adversarial behavior. 🧬 What Sets You Apart • 5+ years of security research experience • Deep understanding of windows internals and reverse engineering • Experience in exploitations and vulnerabilities • Knowledge of development in C • Ability to handle new technological concepts • Self-driven, autonomous learning abilities • Knowledge in developing with Python • Knowledge in offensive or red-team approach 💰 What We Offer • Competitive salary and equity grants • Hybrid flexibility • Quarterly recharge weekends • Learning & development stipend • Generous paid leave policies including flexible PTO and parental leave 🤝 HOW WE'LL GET TO KNOW EACH OTHER We view interviewing as a two-way street. We want you to interview us just as much as we interview you! (Avg. timeline: 21 days) Step 1: The Intro (15 min) A casual meeting with the Talent team to break the ice. Step 2: The Vision (45 min meeting) Connect your future manager to discuss the role, the challenges, and how you can make an impact Step 3: The Squad & The Big Picture (45-60 min meetings) Meet some of your future teammates in our Tel Aviv office, as well as our HR Team and VP of R&D to ensure our values and long-term goals align with yours. Step 4: The Offer If the vibe is right, we make it official! 🌍 DEI&B Commitment (Diversity, Equity, Inclusion & Belonging) At SafeBreach, we celebrate the rich diversity of our team, where every employee's unique perspective is a valued thread in our collective success. We are unwavering in our commitment to fostering an inclusive workplace that nurtures a sense of belonging and empowers each individual to unleash their full potential. We are dedicated to creating opportunities for collaboration, innovation, and meaningful career growth, ensuring that every voice is not just heard, but cherished.

About the Role Token Security is looking for a Senior Security Researcher to join our research team. In this role, you will be at the bleeding edge of AI security, leading deep-dive research into AI products, LLM frameworks, and modern Agentic AI ecosystems. You will combine hands-on defensive and offensive research techniques with Tokenʼs cutting-edge platform to analyze modern AI products, dissect non-human identity architectures, and uncover privilege escalation paths in dynamic AI agent workflows. In this role, you will bridge deep security research, product engineering, and technical storytelling turning novel insights into real-world enforcement mechanisms, core platform capabilities, high-impact blogs, and talks at top global security conferences. What We Do The Frontier of Identity and Agentic AI Security Token Security is pioneering the AI Agent & Non-Human Identity NHI) security space. Research-Driven Innovation Our research directly powers our product capabilities uncovering complex identity attack vectors, analyzing enterprise AI products, and building security enforcement models for autonomous AI Agents. Thought Leadership & PR We showcase our findings to the broader security community through technical publications, vulnerability disclosures, and global conference presentations. Innovation via Automation We use AI Agents ourselves to accelerate research workflows, streamline environment analysis, and build smarter security checks. Direct Market & Product Impact Our research bridges deep technical investigation and real-world defense, powering core platform enforcement 1 Senior Security Researcher capabilities, threat intelligence, and high-impact advisory for global enterprise customers. Your Responsibilities • Agentic AI & Product Security Research: Perform deep technical analysis on modern AI products, SaaS LLM offerings, and agentic tools to expose security gaps, privilege escalation risks, and data leakage vectors. • Enforcement & Architectural Design: Research and prototype security enforcement models to protect, monitor, and govern autonomous AI Agents, enforcing token boundaries and runtime access controls. Public Research, PR & Thought Leadership: Author technical blog posts, research papers, and vulnerability disclosures. Represent Token Security by submitting and presenting original research at top global security conferences (e.g., Black Hat, DEF CON, RSA). • AI Driven Research Methodology: Leverage AI Agents and modern AI tooling to scale research workflows, automate environment discovery, and accelerate vulnerability analysis across complex environments. • Hands-on Research in POCs: Conduct deep security research into active customer environments during key POCs, identifying complex NHI and AI misconfigurations to build actionable, high-impact security reports. • Cross-Functional Impact: Collaborate closely with Product, Engineering, and Sales to convert research findings into automated detections, platform features, and executive presentations. What You Bring • 5+ years of experience in security research, cloud security research, defensive or offensive security, or vulnerability research. • AI & Agentic Security Expertise: Practical experience or deep technical research into AI architectures, LLM execution pipelines, API security, and agentic execution environments. • Understanding of Organizational Security & IAM Thorough understanding of organizational security, cloud environments, and enterprise IAM models, as 2 Senior Security Researcher well as enterprise AI platforms and SaaS AI ecosystems (e.g., OpenAI, Claude Enterprise, Copilot). • Technical Writing & Public Speaking • Proven ability (or strong desire) to articulate complex research findings into engaging technical blogs, whitepapers, and public presentations for global security audiences. • Scripting & Development • Advanced proficiency in modern programming/scripting languages to write custom research tools, interact with APIs at scale, and build dynamic agent workflows. Analytical Problem Solver • Ability to analyze how enterprise AI products work end-to-end and invent novel, frictionless ways to enforce security policies without breaking user experience or usability. • Fluent English (written and verbal). Nice to have: • Track record of speaking at security conferences (e.g., Black Hat, DEF CON, RSA, OWASP, BSides). • Published security advisories, CVEs, or high-impact technical blog posts. Location & Employment Details Employment Type Full-Time Work Model: Hybrid – Tel Aviv, Israel In-office with Work From Home on Tuesdays

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Opportunity: Tenable Research is seeking a Senior Security Researcher - Cloud Security to join our highly technical product research team working at the core of our cloud security platform. This is a rare opportunity to join an elite research team and do work that directly shapes our product. In this role, you will define how vulnerabilities in cloud assets are understood, enriched, and remediated. As AI floods production with vulnerabilities, you design the model and system that keeps teams ahead of it. You will define the foundation for how cloud vulnerabilities are treated across the platform, from reachability and exploitability to effective resolution. Your work will directly shape product direction and set the standard for what handling vulns at scale actually means. We are looking for an exceptional researcher who can bridge cloud security, application security, and vulnerability management. You are curious, comfortable with ambiguity, and driven to deeply understand how vulnerabilities manifest and how they are fixed across cloud environments and code. Your Role: • Own Vulnerability Management Across Tenable's Cloud Security Platform: Define cloud vulnerability management by grounding findings in how exposure is actually created and what resolving it means for organizations. Collaborate with engineering and product teams to introduce the signals and data that validate exploitability and drive remediation. Establish the standard for what separates an actionable finding from a theoretical one. • Research Exploitability and Risk Context: Research how the security context around a finding affects its real-world risk and what resolving it looks like. Define how these factors shape prioritization and remediation across the platform. • Lead Remediation Research: Define how vulnerabilities across cloud and code map to the fixes that resolve them, and drive AI innovation in how remediation is understood and delivered at scale. Work with engineering and product to build the capabilities that close the loop from detection to resolution. • Publish and Present: Share research through technical blogs, reports, and leading industry conferences. What You'll Need: • 5+ years of hands-on experience in security research • Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact • Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code • Familiarity with application security tooling • Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces • Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings And Ideally: • Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains • Experience leveraging AI and agentic workflows for security research and analysis • Background in application security, secure code review, or supply chain security • Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines • Track record of published research, conference talks, or technical blog posts • Experience working with product teams and delivering value to customers through the product We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact [email protected] for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Description About Tenzai Tenzai is building autonomous AI hackers that think like the world's best offensive security experts, act like them, and then help fix what they find before the real ones do. If this mission speaks to you, come defend the world's software: autonomously, continuously, and in-depth. About the role This is a rare opportunity to work at the intersection of vulnerability research and AI. You will perform vulnerability and general cybersecurity research, experimenting and pushing the boundaries of what AI can and cannot reliably do in this space.You'll be working with other researchers on individual and group projects around research and prototyping AI agents, building evaluations and finding bugs. Responsibilites • Vulnerability research on public and private targets, building harnesses to automate work, and writing up the results • Building evaluations and challenge benchmarks to find boundaries of what specific AI agents and models can and cannot do • Analyze where Tenzai’s AI agent needs to improve, investigate cases where the AI missed, misclassified, or hallucinated vulnerabilities • Develop new attack strategies and offensive testing techniques for web and network targets, and translate real-world knowledge into prototypes of new AI agents Requirements • Deep expertise in Web security, particularly authentication, business logic, and injection flaws OR deep expertise in network security • 3+ years of experience In vulnerability research or any security research in these fields • Ability to articulate complex vulnerabilities clearly, both in writing and verbally • Experience in writing code to develop tooling • Strong preference for someone with background in static or dynamic analysis, protocol design or other adjacent fields • Comfortable working in a fast-paced startup environment with a high degree of ownership Why Tenzai • Working on problems that matter - Software is now written and deployed faster than it can be secured. Attackers are beginning to use AI to find vulnerabilities at scale. Tenzai exists to close that gap. It's a mission that requires elite hackers, and also sharp storytellers, wicked-smart operators, and experienced market builders. • Building a category in the making - Tenzai is defining a new category in cybersecurity. That means every team — from research and engineering to product, brand, and go-to-market — has a chance to shape how the industry understands and adopts autonomous security. If you thrive building something from zero and helping a new idea take hold in the world, keep reading. • Talent density - We believe small teams of exceptional people outperform large organizations. Tenzai was founded by veteran security experts and repeat entrepreneurs. We hire deliberately and value curiosity, initiative, and craftsmanship, whatever your discipline. • Creating real impact, quickly - Whether you're building systems, shaping product experiences, telling the story, or helping customers succeed, your work will immediately influence how organizations secure their software. We move quickly, keep teams lean, and give humans ownership. • Ambition with humility - We're tackling hard problems with a team that values deep expertise and thoughtful collaboration. Everyone here is learning, experimenting, and pushing the boundaries of what's possible. Plus, we love eating lunch together.

Description Remedio is transforming how organizations reduce cyber risk. While most security tools focus on finding problems, Remedio focuses on fixing them. Our Autonomous Remediation Platform helps enterprises continuously and safely reduce exposure by remediating vulnerabilities and misconfigurations, closing patching gaps, hardening systems, enforcing compliance, governing applications, and controlling AI risk. By combining deep dependency awareness, pre-execution validation, automated remediation, and instant rollback, Remedio enables organizations to eliminate risk across endpoints, servers, applications, and AI systems - without disrupting business operations. Founded in 2019, Remedio spent its first years as a bootstrapped, profitable company, building a strong enterprise customer base before raising a $65M Series A led by Bessemer Venture Partners. Today, more than 300 enterprise organizations trust Remedio to protect over 3M devices worldwide, including Amazon, Colgate-Palmolive, Kraft Heinz, Coca Cola Hellenic Bottling Company, and many more. As we continue expanding our platform and growing our global business, we’re looking for exceptional people who want to take ownership, solve meaningful challenges, and help shape the next chapter of Remedio’s journey. Were looking for a Senior Security Researcher to join our team! Responsibilities • Conduct advanced vulnerability research on operating systems and third-party software installed on endpoints. • Develop proof-of-concept exploits and techniques to validate research findings. • Document and publish research through reports, whitepapers, and public presentations to highlight emerging risks. • Collaborate with product and engineering teams to translate findings into improved security protections. • Stay on top of the evolving vulnerability landscape and proactively choose research areas of focus. Requirements • 3+ years of experience in low level development on Windows operating system. • Fluent in English, C/C++, Python. • Reverse engineering experience. • Strong ability to get the job done - from idea to a vulnerability. • A proven solo contributor at heart, capable of driving independent research. • Jack of all trades - comfortable moving between Java, C++, Python, COM objects, or whatever the target requires. • Deep understanding of operating system internals and network protocols. • Experience in an elite Israeli army technology/cybersecurity unit is highly regarded.