Security Researcher jobs in Tel Aviv-Yafo

As a Senior Security Researcher for the Axonius Exposures team, you will conduct research into vulnerability detection, remediation, and prioritization to enhance our asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security data, automate workflows, and prototype logic to address enterprise attack surfaces. This is a high-impact role where your research directly shapes how our customers identify and mitigate their most critical security gaps. Responsibilities • Lead end-to-end security research projects focusing on vulnerability detection, risk prioritization, and exposure management logic. • Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate threat research, and prototype research tools. • Research and define remediation strategies, compensating controls, and configuration-based mitigations beyond standard patching. • Partner weekly with Product and Engineering teams to transform technical research into production-ready product capabilities. Minimum Qualifications • 4+ years of professional experience in security research, vulnerability analysis, or penetration testing. • Demonstrated proficiency with Python for scripting/automation and SQL for querying complex security data sets. • Hands-on experience integrating AI/LLMs into technical workflows to accelerate data analysis, parsing, or research output. • Practical understanding of security frameworks and metrics including CVSS, EPSS, and MITRE ATT&CK. Preferred Qualifications • Prior experience in B2B SaaS or enterprise cybersecurity product environments. • Experience in exposure management, attack surface management (ASM), or enterprise risk prioritization. • Experience creating custom prioritization and scoring algorithms combining vulnerability telemetry with asset criticality. • Deep knowledge of non-patching mitigation strategies, including registry tweaks, network policy shifts, and configuration hardening. • Proven track record of framing open-ended security problems into scalable software feature requirements. #LI-HYBRID, #LI-ZR1 About Axonius: Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence. Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world. Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. About the Role We are looking for a talented, passionate Offensive Researcher to join our innovative research team. If you’re eager to explore cutting-edge mobile security techniques and help safeguard the mobile app ecosystem, this is the role for you! As a key player in our security team, you'll design and execute sophisticated attack simulations on the Appdome platform. Your work will touch on diverse attack vectors, including file systems, networks, jailbreaks, memory injections, and more. Requirements • 1-3 years of experience in Offensive Security/Cyber. • Extended knowledge in researching, simulating, and analyzing different application attack vectors. • Advantage – Experience using a hacking framework or pen-testing tools such as Frida, Magisk, Multiproxy, and Cheat Engine. • Ability to create analysis plans and execute them, as well as document and troubleshoot errors. • Ability to understand the system from multiple perspectives, including high-level and low-level technical architecture. • Experience in Mobile (iOS/Android) analysis environments and automation tools. • Bachelor’s degree in a relevant field. • Software development and scripting experience.

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. Description We are looking for a Mobile Security Researcher to join our Research Team. As our Security Researcher, your primary focus will be on the inner workings of iOS and Android operating systems. You'll dive into codebases, analyze security mechanisms, and identify potential vulnerabilities. In addition, you'll work collaboratively with the team to develop protective strategies and contribute to ongoing innovations in mobile app security. This role requires a keen analytical mind, a passion for research, and a drive for continuous improvement in the mobile security domain. Join us in shaping secure solutions for the future of mobile apps. What will you do? • Research and implement security mechanisms for Android and iOS platforms, driving the full cycle from low-level platform analysis to hands-on feature development. • Conduct reverse engineering on a wide variety of devices running iOS/Android to gain deeper insights into their system. • Keep up to date with emerging trends in mobile application security and research methods to ensure that customers are protected. • Work with a talented security team where you'll learn and grow every day. Requirements • At least 2 years of experience in reverse engineering of large systems/OS, preferably with IDA • At least 2 years of experience in C/C++ programming • OS Internals/Low Level/Kernel experience • Eager to take on challenging tasks • Curious and quick to learn on your own • Team player with good interpersonal skills Advantages:  • Experience in vulnerability research • Familiarity with assembly and ARM instruction set • Mobile apps development experience • Low-Level experience in iOS or Android

Description Security Researcher Noma Security is redefining how organizations Safely adopt AI into their organization . As a key member of our research team, you’ll help us stay ahead of rapidly evolving threats by uncovering vulnerabilities, analyzing adversarial techniques, and producing groundbreaking insights that directly influence our product, marketing, and customer strategy. You’ll work alongside world-class engineers and security experts to conduct deep technical research, simulate real-world attacks, and create impactful proof-of-concepts (PoCs) that showcase how to protect AI-driven systems. This role is ideal for a hands-on security researcher who thrives on curiosity, creativity, and rigor, someone who wants to shape the future of AI security in a fast-moving product startup. What You’ll Do: • Drive AI Security Research: Investigate vulnerabilities in AI models, agentic platforms, and infrastructure- covering risks like prompt injection, adversarial manipulation, and model abuse. • Build Proof-of-Concepts: Develop technical PoCs that demonstrate real-world security threats and defenses, supporting both product validation and thought leadership. • Research new Prompt injection techniques: Implement novel techniques of adversarial attacks on AI systems in our automated red team module to evaluate resilience and inform customer-focused security offerings. • Track Competitors & Trends: Research the broader ecosystem of AI and cybersecurity to identify competitor capabilities, market shifts, and innovation opportunities. • Collaborate Across Teams: Partner with engineering and product to translate research into practical protections, product features, and marketing content. Requirements for Success: • 5+ years in security research or offensive engineering, with a focus on high-value targets • Strong background in application and AI security (prompt injection, adversarial ML, agent security). • Experience in red teaming or offensive security, including AI/ML pipelines, APIs, and infrastructure. • Proven ability to design and communicate PoCs for both technical and non-technical audiences. • Familiarity with bug bounty programs or military-grade research is a strong plus. • Curious, detail-oriented mindset with the ability to balance multiple research initiatives. • Experience with research for marketing, including blogs, thought leadership, conferneces, published researches- advantage. 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Description Join Noma Security and help shape the future of AI security in a fast-paced, high-impact environment. Noma is building the first comprehensive AI Security and Governance Platform, helping organizations adopt AI and LLMs with confidence and control. As AI becomes core to modern enterprises, we provide seamless visibility and protection across the entire AI lifecycle. Our team works at the intersection of AI, security, and cloud, shaping a new category in a rapidly evolving market. At Noma, you’ll have the opportunity to make a meaningful impact while working with exceptional people on technology that truly matters. We’re looking for a Security Vulnerability Researcher to be a core driver in how our product empowers security teams. You will be expected to deeply understand customer needs and translate them directly into product features that deliver real value. You'll own key parts of our frontend stack, drive key architectural decisions, and turn complex security data into clear, actionable business insights. This is a hands-on role for a seasoned offensive researcher who thrives on technical depth and creativity. You’ll collaborate closely with product, marketing, and engineering teams to deliver research that drives customer trust, informs product direction, and shapes industry thought leadership. 🛠️ What You’ll Do • Perform AI-Focused Vulnerability Research: Investigate security risks in AI models, APIs, and infrastructure to uncover exploitable weaknesses and publish insights that strengthen our market leadership. • Lead Red Teaming Against AI Systems: Simulate adversarial attacks on AI pipelines and APIs, creating impactful PoCs that showcase real-world risk and defensive strategies. • Build Customer-Facing Proof-of-Concepts: Partner with product and engineering teams to design and deliver PoCs that align with customer use cases and highlight Noma’s security capabilities. ✅ What You Bring • 5+ years in Security Research or Offensive Engineering with a proven track record in penetration testing or vulnerability discovery on complex targets. • Deep expertise in Application & AI Security, including experience exploiting APIs, web applications, and AI/ML vulnerabilities such as prompt injection, adversarial manipulation, or model abuse. • Offensive Security & Red Teaming Experience, with practical use of tools, custom exploits, or adversarial testing methods. • Proficiency in developing and presenting PoCs that clearly demonstrate security risks to both technical and non-technical audiences. • Recognized achievements in Bug Bounty or Military-Grade Security Research, or equivalent real-world offensive security experience. • Solid software engineering background, with the ability to read, write, and debug code (Python, JavaScript, Go, etc.). 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing businesses such as: banking, financial services, insurance, fintech, gaming, ecommerce/retail, telco / media, utilities, etc. About the Role: Transmit Security is a top player in its field and is heading into an exciting year. In this role, you will take an integral part in researching, designing, and improving advanced fraud and abuse detection capabilities for a cutting-edge SaaS product. We are looking for a hands-on security researcher who combines an attacker mindset, fraud-domain curiosity, strong technical depth, and data analysis skills. You will investigate real-world fraud patterns, reproduce attacker techniques, analyze telemetry, enrich our data collection capabilities, discover new security signals, and work closely with product, data, and engineering teams to turn research insights into production-grade detection and prevention mechanisms. This role is especially relevant for researchers with experience in browser technologies, mobile-native applications, or both. You may work on desktop and mobile browsers, browser APIs, browser automation, client-side signals, native mobile applications, Android/iOS behavior, mobile security, emulators, device signals, and mobile automation. You will help expand our visibility into new signals and patterns that improve fraud detection, model performance, and customer protection. If you are a talented researcher who enjoys solving complex problems, working with messy real-world data, and building practical defenses against modern fraud and abuse, we want you to join our team. What you’ll do: • Research emerging fraud and abuse techniques across account takeover, bots, automation, phishing, social engineering, device spoofing, emulators, remote access tools, suspicious network infrastructure, and related attack vectors. • Identify, design, and validate new data collection opportunities, security signals, behavioral patterns, device indicators, browser indicators, and mobile app indicators. • Analyze real-world telemetry, customer-provided labels, behavioral signals, device signals, network indicators, and attack patterns to identify detection opportunities. • Reproduce attacker techniques in lab and production-like environments, generate telemetry, identify detection gaps, and translate findings into detection logic. • Design, validate, and tune detection and prevention mechanisms with attention to coverage, explainability, false positives, customer impact, and production stability. • Build research infrastructure, analysis workflows, and internal tools using Python. • Produce robust data features that can later be used by machine learning models, detection logic, rules, dashboards, and customer-facing insights. • Work with model training pipelines, evaluate model behavior, compare training and validation results, and help determine whether new features improve detection quality. • Collaborate closely with data science, engineering and product, teams to take ideas from research hypothesis through validation, implementation, monitoring, and production feedback. • Stay up to date with fraud trends, attacker tooling, automation frameworks, browser abuse techniques, mobile abuse techniques, malware behavior, phishing techniques, and underground ecosystem developments. • Communicate findings clearly to technical and non-technical stakeholders, including recommended actions, tradeoffs, expected impact, and model/detection quality considerations. What you’ll need: • At least 3 years of experience in security research, fraud research, detection engineering, threat research, mobile security research, browser security research, or a similar hands-on technical role. • Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field or equivalent hands-on experience. • Strong hands-on experience with at least one of the following areas: • Desktop or mobile browsers, browser APIs, browser automation, browser fingerprinting, web signals, or client-side web security. • Native mobile applications for Android or iOS, mobile OS behavior, device signals, emulators, mobile automation, app instrumentation, or mobile security. • Strong understanding of web technologies, mobile technologies, APIs, application behavior, and modern attack techniques. • Strong Python skills and experience building research tools, automation, data analysis workflows, detection prototypes, or feature engineering pipelines. • Experience analyzing messy real-world data, investigating anomalies, validating hypotheses, and drawing practical conclusions from incomplete information. • Familiarity with machine learning training and validation concepts, such as train/test split, validation sets, overfitting, leakage, feature quality, precision/recall, false positives, false negatives, and model evaluation. • Ability to produce data features in a structured, reliable, and model-friendly way. • Ability to think like an attacker while designing reliable, scalable, and explainable defenses. • Strong problem-solving skills, independence, persistence, and a “getting things done” attitude. • Excellent communication and interpersonal skills. • Ability to work closely with engineering, product, and data science teams and translate research insights into practical product capabilities. Advantages: • Experience with both browser-based and mobile-native research. • Experience with fraud domains such as account takeover, new account fraud, identity theft, money mule activity, payment fraud, or first-party fraud. • Knowledge of bots, automation frameworks, credential stuffing, scraping, and anti-detection techniques. • Experience with browser internals, JavaScript runtime behavior, DOM APIs, WebView behavior, browser automation, headless browsers, or browser anti-detection techniques. • Experience with mobile app lifecycle, permissions, sensors, networking, storage, mobile identifiers, rooted/jailbroken devices, hooking, instrumentation, repackaging, or anti-tampering techniques. • Experience with browser fingerprinting, mobile fingerprinting, device intelligence, behavioral biometrics, or client-side telemetry. • Experience with malware analysis, phishing kits, remote access tools, proxy/VPN infrastructure, or underground fraud ecosystems. • Experience with detection quality measurement, false-positive analysis, rule tuning, model evaluation, feature evaluation, or production monitoring. • Experience using notebooks, pandas, SQL, data visualization tools, or other analysis environments for research and validation. • Experience working with data scientists, ML engineers, or ML training pipelines. #LI-TL1 #LI-Hybrid

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience The Security Research team is Salesforce’s offensive security engine, hunting for real-world attack paths across our products and infrastructure before adversaries do. We’re looking for a Principal Security Researcher, based in Israel, to bring deep offensive security expertise, autonomy, and a relentless attacker mindset to help drive lasting security improvements at scale. What You'll Actually Be Doing • Lead advanced penetration testing, red team operations, or security research against Salesforce’s cloud infrastructure, applications, and services, uncovering vulnerabilities that matter most • Build custom tools, exploits, and attack techniques that simulate real-world adversaries and raise the bar for our offensive security tradecraft • Partner with product teams to translate offensive findings into remediation and stronger secure design practices • Mentor team members and present findings to technical and executive audiences, growing the team’s overall offensive security capability You're Our Person If... • You have 10+ years of hands-on experience in offensive security, with deep, demonstrable expertise in at least one of: penetration testing, red teaming, application security research, or vulnerability discovery • You’ve identified and exploited complex vulnerabilities in web applications, APIs, cloud environments, or infrastructure • You have strong programming or scripting skills (Python, Go, Bash, PowerShell) for tooling and automation, and a solid grasp of attack frameworks (MITRE ATT&CK) and vulnerability classes (OWASP, CWE) Even Better If... • You have experience in cloud security (AWS, GCP, Azure) or containerized environments (Kubernetes, Docker) • You’ve contributed to CVE discoveries, security tooling, or CI/CD and supply chain security • You’re active in the security community (bug bounties, CTFs, conferences, open-source contributions) • You hold relevant certifications (OSCP, OSCE, OSWE, GXPN, or equivalent) • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience Join the Product Security team in Israel as an Offensive Security Engineer on our Red Team. You partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms, and enterprise environments, and you help make our defenses stronger, including as AI and Agentforce reshape our attack surface. What You'll Actually Be Doing • Run hands-on red team operations that simulate real-world attackers across applications, cloud, and enterprise environments, and chain weaknesses together to reach defined goals. • Design and carry out end-to-end attack campaigns with the Red Team Director, including bypassing security controls and abusing identity, access, and trust relationships. • Work with Detection and Response, Incident Response, and Engineering teams to test alerts and response workflows, and explain attack paths and root causes in clear, practical terms. • Improve red team tools, automation, and techniques with the AI-Automation team, and mentor junior engineers. You're Our Person If... • You have 4+ years of experience in offensive security, red teaming, or advanced penetration testing in production-like environments. • You understand attacker methods, identity and access abuse, and attack chains across applications, infrastructure, cloud, and hybrid environments. • You write custom scripts, tools, or payloads, and you are skilled at manual exploitation. • You communicate clearly about how an attack worked, why defenses failed, and which fixes reduce risk most. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have run continuous or programmatic red team operations, or have a background in adversary emulation or purple team work. • You have experience with malware analysis or exploit development. • You have published vulnerability research, responsible disclosures, blogs, or talks. • You know cloud-native architectures and identity-centric security models. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 6 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Mid-Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 4 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We are looking for a Senior Offensive AI Security Researcher with a strong offensive security and research mindset to lead novel adversarial research across Salesforce’s AI ecosystem - uncovering critical and systemic vulnerabilities before they can be exploited. This role goes beyond finding individual bugs - it focuses on scoping, designing, and executing advanced research into emerging AI threat vectors, combining academic research with practical offensive methodologies to establish new TTPs targeting complex AI paradigms, including indirect prompt injection, tool abuse/excessive agency, RAG system poisoning, data extraction, and model/data supply chain compromises. You will work as a trusted partner to engineering and architecture teams - providing an offensive security perspective that shapes internal threat models, guides AI architecture decisions, supports corporate governance, and directly contributes to Salesforce’s Generative AI Security Standard. What You’ll Actually Be Doing • Lead Novel AI Security Research: Scope, design, and execute advanced adversarial research across Salesforce’s AI ecosystem, applying a risk-based approach to uncover novel threat vectors before exploitation. • Innovate & Operationalize AI Attack Techniques: Combine academic research with practical offensive methodologies to establish new TTPs targeting complex AI paradigms- specifically indirect prompt injection, tool abuse/excessive agency, RAG system poisoning, data extraction, and model/data supply chain compromises. • Guide Strategy & Security Standards: Provide an offensive security perspective to guide AI architecture, shape internal threat models, support corporate governance, and directly contribute to Salesforce’s Generative AI Security Standard. • Disseminate Research: Publish internal and external threat intelligence, vulnerability analyses, and security research to keep Salesforce defenses aligned with state-of-the-art AI threat landscapes. You’re Our Person If... • 5+ years of experience in offensive security roles (vulnerability research, penetration testing, application security, or security engineering). • 2+ years of hands-on experience auditing, breaking, or researching ML/AI systems, with deep expertise in LLM attack surfaces and frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS). • Deep technical understanding of modern AI design patterns, including Retrieval-Augmented Generation (RAG), autonomous agentic workflows, model context protocols, and AI pipelines. • High degree of proficiency in Python for exploit proof-of-concept development, data analysis, and technical evaluation. • Proven track record of leading complex security initiatives and communicating critical, high-stakes technical risks to both research engineers and executive leadership. Even Better If... • Advanced degree (MS or PhD) in Computer Science, Machine Learning, Cybersecurity, or a related field. • A public portfolio of offensive security research, including conference presentations (e.g., Black Hat, DEF CON, NeurIPS), published papers, CVEs, advisories, or open-source research contributions. • Experience auditing modern AI development ecosystems and tools (e.g., PyTorch, Hugging Face, LangChain, vector databases, or open-weight models). Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We’re looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team. This is a role for someone who can perform offensive security testing at scale, combining deep security expertise with the judgment to direct and improve AI-driven tooling. What You'll Actually Be Doing • Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth that you will develop. • Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find. • Run end-to-end engagements: scoping, execution, reporting, and remediation guidance. • Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes. • Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness. • Produce high-quality technical reports with clear exploitation paths and prioritized remediation. • Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale. • Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting. • Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision. • Translate your own tradecraft into reusable, explainable automation that the team can run and build on. You're Our Person If... • 6+ years (Senior) / 8+ years (Lead) hands-on offensive security experience such as pentesting, red teaming, or app/security research, with proven complex engagement delivery. • Deep, must-have vulnerability knowledge in cloud and web application security: OWASP Top 10+ vulnerability classes, identity/authz attack vectors, and cloud/hybrid attack surfaces. • Hands-on experience using internal AI tools and frontier models to perform or accelerate security testing, not just conceptual familiarity! • Software engineering fundamentals: System design, API integration, working with distributed services and technologies. • Ability to write custom scripts/tooling/payloads and contribute to building automation and autonomous harnesses including prompt engineering. • Excellent written and verbal communication skills. Even Better If... • Experience with agentic frameworks, prompt optimization, agent evaluation, or lightweight model fine-tuning. • Published security research, CVEs, or conference talks. • Familiarity with MITRE ATT&CK/ATLAS and offensive AI/ML attack surfaces (prompt injection, agentic privilege abuse). Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We are looking for an Offensive Security Researcher with an attacker mindset to discover, analyze, and remediate security vulnerabilities across our products and platforms. This role focuses on identifying root causes, architectural weaknesses, and recurring security anti-patterns, and implementing secure-by-default solutions that prevent vulnerabilities. You will work alongside engineering teams to analyze design decisions, improve security posture, and support overall application security maturity. What You'll Actually Be Doing • Conduct offensive security assessments (manual testing, code review, architectural analysis, threat modeling) across application ecosystems. • Identify critical, high-impact, and systemic vulnerabilities alongside isolated issues. • Perform security research to identify emerging attack vectors, abuse cases, and bypass techniques relevant to our applications and platforms. • Partner closely with software engineers, tech leads, and architects to:Explain risk, impact, and exploitability.Design and implement effective remediations.Ensure fixes are scalable, maintainable, and aligned with engineering realities. • Execute Secure by Default initiatives by:Applying security guardrails, patterns, and baseline controls.Remediating insecure defaults and unsafe configurations.Preventing vulnerabilities through platform-level and framework-level updates. • Review application and platform designs early in the development lifecycle to prevent vulnerabilities before release. • Apply security standards, best practices, and architectural guidance during application development. • Share security knowledge and offensive techniques with engineering teams. • Collaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation. You're Our Person If... • 3+ years of experience in Application Security or Offensive Security with an attacker mindset. • Demonstrated experience finding and remediating vulnerabilities in complex applications. • Strong understanding of:Web application security (OWASP Top 10 and beyond)Authentication & authorization flawsAPI securityInjection attacks, logic flaws, and access control bypassesSecure design and threat modeling • Hands-on experience with manual security testing (beyond automated tools). • Ability to translate complex security findings into clear, actionable guidance for engineers. • Strong communication and collaboration skills with engineering teams. Even Better If... • Published security research or CVEs (technical blogs, advisories, whitepapers, or conference presentations). • Experience implementing platform-level or framework-level security improvements. • Background in vulnerability discovery, security research, or red teaming. • Experience implementing Secure by Default or security-by-design concepts. • Familiarity with cloud-native architectures, microservices, and distributed systems. • Ability to balance security requirements with product velocity and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Description About us Oligo is a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, we’re on a mission to make real-time security a reality. Oligo’s industry’s leading runtime security platform built to stop attacks in real time without stopping the business. We transform security from passive visibility to active protection across applications, cloud services, workloads, and AI systems. By uncovering the deepest layers of what actually runs in production, Oligo helps organizations prioritize exploitable vulnerabilities, detect malicious behavior as it happens, and stop modern attacks in their tracks. What You’ll Be Doing As a Security Researcher at Oligo, you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities. This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work. Specifically, you will: • Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems. • Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs. • Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection. • Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats. • Work closely with engineering and product teams to turn research into practical security capabilities. Requirements Qualifications • 5+ years of experience in security research, vulnerability research, detection engineering, threat detection engineer, or a related technical security role. • Strong understanding of modern application attack techniques, including the ability to analyze vulnerabilities and exploitation flows. • Deep expertise in Linux internals. • High degree of ownership and ability to independently navigate ambiguous technical problem spaces and turn them into structured research plans and actionable outcomes. • Experience designing and conducting hands-on technical research, including investigations, experiments, and PoC development. • Strong programming skills for code analysis, research tooling, and building proof-of-concepts and vulnerable test applications. • Strong communication and teamwork skills, with a collaborative approach to problem-solving across teams. • Data analysis skills and hands-on experience working with databases. We’ll be lucky if you have • Experience with cloud-native attack surfaces, such as Kubernetes. • Familiarity with eBPF, syscall tracing, or other low-level runtime observability techniques. • Knowledge of programming language internals, exploitation techniques, or low-level system behavior. • Experience with data science or statistical analysis in the context of security research. • Familiarity with AI security concepts and attack techniques targeting LLMs, agents, or AI-integrated applications.

Island is shaping the future of work - creating an enterprise workspace for both knowledge workers and agents - where access, security, and AI-powered productivity are built in. Our enterprise agentic control plane boosts productivity across devices, browsers, applications, networks, and data while protecting sensitive information, simplifying access, and helping enterprises scale AI safely. Behind all of that is a team of people who care deeply about their craft and want to do the biggest and best work of their careers. At Island, character and drive matter more than your resume. Backed by Coatue Management, Insight Partners, Sequoia Capital, Cyberstarts, and other world-class investors, Island is used by millions of people at some of the planet’s largest enterprises. Come build with us. Together, we’re changing how the world works. As a Senior Product Security Researcher at Island, you will attack our product the way a motivated adversary would. You will research how Island’s security controls, browser features, cloud services, and AI capabilities can be bypassed, abused, or turned against our customers, and you will work with R&D to fix the root causes. This role focuses on product logic, trust boundaries, and the application and cloud layers, rather than kernel or memory-level research. Key Responsibilities • Product Control Bypass Research: Find ways to bypass or weaken Island’s enforcement features, such as data loss prevention, clipboard, download and screenshot restrictions, data masking, and access policies, and help design controls that hold up under real attacks. • Browser & Extension Security: Research the security of Island’s browser features, web platform integrations, and extension ecosystem, including the browser security model, extension permissions, and interactions between web content and privileged browser features. • Backend, API & Identity Research: Assess Island’s management console, cloud services, and APIs for authorization flaws, tenant isolation issues, and weaknesses in authentication and identity flows (SSO, OAuth, SAML, OIDC). • AI & Agent Security: Research the attack surface of Island’s AI and agentic features, including prompt injection, agent tool abuse, data exposure through AI workflows, and the security of MCP and agent integrations. • Threat Modeling & Design Review: Work with developers, architects, and product managers to model threats for new features early in design, and turn research findings into concrete security requirements. • Proof of Concept & Impact Analysis: Build proof of concepts that show real customer impact, and clearly explain risk and fix priority to engineering and leadership. • Tooling & Automation: Build tools and AI-assisted workflows that scale research across a large and fast-moving codebase. • Community & Knowledge Sharing: Mentor team members, contribute to internal playbooks, support our bug bounty program, and present research externally when appropriate. Requirements • Several years of hands-on experience in application security research, product security, or offensive security, with a strong track record of finding real vulnerabilities (CVEs, bug bounty, published research, or equivalent). • Deep understanding of web and browser security: same-origin policy, CSP, cookies and sessions, extension security, and common web vulnerability classes (XSS, CSRF, SSRF, IDOR, auth bypass, logic flaws). • Strong knowledge of authentication and authorization protocols (OAuth, OIDC, SAML) and multi-tenant SaaS security. • Ability to read and review code in languages such as TypeScript/JavaScript, Go, Python, or C++. • Strong adversarial thinking and the ability to find logic and design flaws, not only known bug patterns. • Clear communication and the ability to work as a partner to engineering teams. Advantages • Experience with Chromium architecture or enterprise browser and endpoint products. • Experience researching LLM applications or agentic systems. • Cloud security experience (AWS, Kubernetes). • Experience building security tooling or using AI to speed up research. Data Privacy You can find information on how we process and protect your personal data in our Candidate and Employee Privacy Notice. For any privacy-related questions, contact us at [email protected].

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun! Minimum qualifications • 5+ years of hands-on experience in security or security research. • A strong threat-modeling mindset - deep understanding of both how attackers approach complex environments and how enterprises defend them • Deep understanding of how complex software systems are built, so you can find where they're vulnerable (Low-level, Distributed, or Core System Engineering mindset) • A foundation in program analysis - parsing, compilation and static code analysis — and comfort reasoning about code as data. • Proven ability to define and implement AI agents, and to make their output reproducible. • Proven ability to work independently, prioritize, and carry complex, multi-quarter projects from concept to working production grade software. Preferred qualifications • Security research experience in modern cloud environments (AWS, GCP, Azure, Kubernetes, etc) and infrastructure-as-code. • Familiarity with model benchmarking, evaluation, fine-tuning, and with grading agent output against ground truth. • Query languages for security telemetry, graph databases, or large-scale data-mining and clustering experience. • Excellent written and verbal communication, with a track record of shipping alongside cross-functional teams (Product, Engineering, Research). About the job We're looking for a talented Applied Security Researcher to join our team and play a major role in Wiz's frontier research team, enabling contextual code understanding across complex cloud deployments. Responsibilities • Drive continuous research from initial concept through PoC to product integration. • Build threat models for AI-native and cloud-native systems: how attackers approach them, how enterprises defend them, and where the gaps are. • Build AI agents that analyze code and/or cloud infrastructure to produce specific insights. • Analyze and understand real-world systems from a security perspective - architecture, data flows, and source code. • Partner across Product, Engineering, and Research to ship what you discover. Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun! Minimum Qualifications • 5+ years of hands-on experience in security or security research, with experience in risk analysis or threat modeling of complex systems. • Strong hands-on skills with scripting languages (e.g., Python, Go) for automation and research, as well as query languages (e.g., KQL, SQL) for efficient data analysis of security telemetry, and with AI tools to accelerate your impact. • Proven ability to work independently, prioritize effectively, and collaborate for clear, delivered impact. • Excellent written and verbal communication skills, with a track record of successfully collaborating with cross-functional teams (e.g. Product, Engineering, Marketing) to achieve shared goals. Preferred Qualifications • Familiarity or hands-on experience with modern cloud environments (AWS, GCP, Azure, Kubernetes) or adjacent cloud platforms. • Experience in public-facing work, such as presenting at recognized industry conferences, authoring technical blog posts, or publishing research. • Experience conducting data-driven research and working with large-scale security telemetry to derive statistically significant or high-impact findings. About The Job We're looking for a talented Security Researcher to join our team and play a critical role in Wiz's foundational, risk-driven approach to security. This role requires deep technical research into complex cloud- and AI-native platforms to identify the most significant, unaddressed risks. Responsibilities • Conduct deep technical research to discover and report novel risks and attack vectors relevant real-world architectures and systems. • Discover and articulate the highest unaddressed risk areas, working with Product and Engineering teams to translate research into product capabilities. • Work closely with Product and Engineering teams to ensure comprehensive risk coverage and support the investigation of new and complex product scope. • Leverage multi-disciplinary approaches to automate and scale the research process. Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.

At NVIDIA we tackle challenges no one else can solve. Our work in Networking and AI is transforming the world's largest industries and profoundly impacting society. NVIDIA Networking product security team is looking for an outstanding technical AI red teamer with hands-on safety and security experience to help us improve the safety posture of AI models, systems and infrastructure. In this role you will reduce risk, threats, and vulnerabilities in NVIDIA networking AI products. What you'll be doing: • Drive hands-on safety and security research on a range of AI and networking products. • Develop tools and processes to expose novel weaknesses in AI models and systems to preempt threats. • Participate in defining and ensuring AI development processes meet safety and security standards. • Partner with cross-functional teams to understand needs and implement solutions. • Be a technical focal point across multiple teams and provide hands-on AI safety, security and engineering expertise. What we need to see: • Bachelor’s or Master’s Degree in Computer Science, Computer Engineering, Data Science, or a related field (or equivalent experience). • Demonstrated experience of 5+ years in AI safety/security and offensive cybersecurity. • Knowledge of AI (both model and infrastructure) vulnerabilities and effective mitigation strategies. • In-depth understanding of LLM, MLLM, Generative AI, Agents and RAG workflows. • Proven Python programming expertise • Self-starter with a passion for growth, enthusiasm for continuous learning, and sharing findings across the team • Extremely motivated, highly passionate, and curious about new technologies. Ways to stand out from the crowd: • Hands-on experience designing and building software products, including infrastructure and system design. • Knowledge of MLOps technologies such as Docker and Kubernetes. • Familiarity with ML libraries (PyTorch, TensorRT, or TensorRT-LLM). With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

We are now looking for a Senior security researcher. NVIDIA Networking product security team is looking for an outstanding technical security researcher with hands-on experience to help us improve the security posture of NVIDIA networking software. In this role you will help reduce risk, threats, and vulnerabilities in NVIDIA networking products. What you’ll be doing: • Be involved in offensive security researcher on a wide range of products. • Assist with defining and making sure software development processes meet security and coding standards. • Perform security threat modeling for NVIDIA Networking products. • Design and make security architecture recommendations to satisfy security guidelines and requirements. • Mentor teams and developers, promoting guidelines on the best security practices. • Be a technical focal point across multiple development teams and provide hands-on security engineering expertise. What we need to see: • Academic degree in computer science, electrical engineering, or related field or equivalent experience. • Demonstrated experience of 3+ years in security research. • Familiarity with applied cryptography, threat modeling, common attack vectors and mitigation techniques. • Ability to work independently, and collaboratively in a constantly evolving environment. • Excellent communication and interpersonal skills. Ways to stand out from the crowd: • M.Sc. or PhD in computer science, electrical engineering, or related technical field. • Familiarity with the cloud environment security ecosystem. • Experience with high-scale deployment challenges. • Demonstrated security research experience and publications. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

Cato Networks is the converged network and security cloud for the AI era. As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents. Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide. Cato Networks is looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by Cato Networks, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified. This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums. Responsibilities: • Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends • Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence • Explore large-scale datasets using SQL and other data analysis methods to generate research insights • Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production • Research how attackers use AI and how AI can improve threat detection, investigation, and response • Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights • Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions • Collaborate with product, data, engineering, and research teams to improve detections and product intelligence • Independently lead research initiatives from idea and data exploration to publication and presentation. • Travel internationally for company events and cybersecurity conferences at least six times per year. Requirements: • At least 5 years of hands-on experience in cybersecurity, threat intelligence, security research, or security analysis • Strong understanding of the cybersecurity threat landscape, including threat actors, malware, phishing, C&C, exploitation, cloud threats, and attacker behavior • Proven experience in threat intelligence research, including IOCs, TTPs, MITRE ATT&CK, campaign tracking, and threat actor profiling • Strong data exploration skills, with practical experience using SQL to analyze large-scale security datasets • Experience using AI tools, AI coding assistants, and agentic workflows for research, automation, and data analysis • Ability to build scripts, internal tools, or agentic systems to support threat research and intelligence workflows • Strong technical writing skills, with experience publishing blogs, reports, whitepapers, or public research • Strong presentation skills, with the ability to represent the company at conferences and external events • Self-learner with high curiosity, strong ownership, and the ability to manage complex research independently • Ability to collaborate effectively with cross-functional teams, including product, engineering, and data teams • Fluent English with excellent written and verbal communication skills • Willingness to travel abroad for conferences, customer events, and company events at least six times per year Advantageous: • Experience researching AI threats, LLM abuse, AI-assisted attacks, or AI-powered detection • Experience building agentic systems, automation frameworks, or AI-based research workflows • Background in engineering, backend systems, data infrastructure, or security platform development • Experience with data warehouses, BI tools, notebooks, or large-scale telemetry analysis • Experience with XDR, MDR, SIEM, EDR, NDR, SASE, or cloud security products