Security Researcher jobs in Tel Aviv-Yafo

At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey? As an Offensive Security Engineer, you will spearhead JFrog’s offensive security operations and lead advanced threat research initiatives, playing a pivotal role in safeguarding our organization and customers from evolving cyber threats. You will develop and execute Red Team exercises, simulate real-world attacks, and identify security weaknesses in JFrog’s systems and applications. We seek a highly skilled, proactive tech leader who thrives in challenging environments and is passionate about advancing security research and offensive strategies. As an Offensive Security Engineer, you will… • Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against JFrog’s infrastructure and cloud environments. • Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities. • Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving JFrog’s security posture. • Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses. • Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises. • Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning. • Participate in incident responses when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation. • Continuously assess and improve security processes, playbooks, and threat detection mechanisms. To be an Offensive Security Engineer at JFrog, you need… • 7+ years of experience in offensive security operations, Red Teaming, threat hunting, or threat research • Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies • Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development • Strong experience with cloud platforms (AWS, GCP, Azure) and containerized environments (Kubernetes, Docker) • Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios • Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation • Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis • Ability to effectively communicate and collaborate with cross-functional teams, translating complex security concepts into actionable insights • A passion for continuous learning, research, and innovation in the fields of offensive security, threat hunting, and cyber threats

Description We are a fast-growing stealth cyber startup, backed by Team8, on a mission to solve one of the most critical challenges in the modern cyber landscape. We are looking for a brilliant Founding Vulnerability Researcher to join our core R&D team and help shape the technical heart of our product from the ground up. Role description We are looking for a strong offensive security researcher to join our core team, become a true partner in building the product end-to-end, and take a key role in shaping our research methodology, technical direction, and product capabilities. This is a hands-on role in a small team, sitting at the intersection of world-class offensive research and core agentic AI research — with a lot of responsibility, autonomy, and influence over the technical and business direction. What you will do • Discover novel vulnerabilities, attack primitives, and exploitation techniques across various surfaces. • Build reliable, weaponizable proof-of-concepts that hold up in real production environments. • Translate offensive techniques and original research into real product capabilities. • Develop methodologies that mirror how top attackers actually operate end-to-end. • Stress-test the product against hardened targets and push the ceiling of what it can do. • Represent the company in the research community through talks, papers, and disclosures. Requirements • 5+ years of hands-on experience in offensive security research or exploit development. • Demonstrable track record of offensive work — previous roles, bug bounty, CTF reputation, published CVEs, or original research. • Deep expertise in at least one offensive domain — web/app vulnerability research, cloud, identity, kernel/OS internals, network protocols, or AI/LLM security. • Comfortable in Python, Go, or Rust, with the ability to ship research into production-quality code. • Comfortable with ambiguity and zero-to-one work; founding DNA and a strong sense of ownership. • High proficiency in English, written and spoken. • Based in Tel Aviv, in-person — this is a founding team role.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary As a Principal Security Researcher , you will act as an architect for the Autonomous SOC, focusing directly on Cortex AgentiX. You will design and build intelligent, automated investigation and remediation agents that empower thousands of customers to secure their environments at scale. We are looking for a practitioner who combines deep hands-on expertise investigating threats and protecting organizations with a pragmatic approach to solving complex security challenges. Key Responsibilities • Develop in-product specialized agents to accelerate detection, respond to real-time threats, prioritize, and mitigate risks. • Establish guardrails, continuous evaluation metrics, and deterministic controls for agentic AI, ensuring complex multi-step plans execute reliably. • Drive the complete product development lifecycle, encompassing definition, design, implementation, and testing phases. • Partner cross-functionally with product management, engineering, and research teams. Qualifications Required Qualifications • 10+ years of hands-on experience securing enterprise organizations. • Proven track record in DFIR and threat hunting, including containing and remediating complex security incidents using dozens of tools. • Practical experience utilizing industry standard frameworks, such as MITRE ATT&CK, for threat modeling. • Coding proficiency, preferably Python. • Advanced expertise leveraging AI capabilities for cybersecurity. • Exceptional analytical and problem-solving skills with a demonstrated ability to resolve complex challenges. • Excellent written and verbal communication skills to effectively collaborate with cross-functional teams. Preferred Qualifications • Experience with Agentic AI SOC and Security Orchestration, Automation, and Response (SOAR) platforms, preferably Cortex XSOAR/XSIAM. • Relevant security certifications, such as CISSP. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Security Researcher to join our Windows EDR behavioral detection team. You will create statistics-based classification algorithms to detect new malware, process behavior anomalies, and attackers in enterprise networks using data from multiple Windows endpoints. This involves analyzing attack patterns, finding statistical anomalies, and validating detections against real attacks and APTs on customer data. Key Responsibilities • Research new methods to detect various attack techniques by utilizing enormous amounts and varied types of data. • Use and develop statistical algorithms and techniques to create and improve our analytics detection capabilities. • Take an active role in our collection modules by improving existing ones and investigating new ones to improve detection quality. • Simulate attacks in the lab and conduct a deep analysis of the behavior. • Be part of a diverse research group, improving our research processes to create a better product. • Stay up to date with APTs, attacker methodologies, and TTPs. Qualifications Required Qualifications • In-depth knowledge of the inner-workings of operating systems (Especially Windows). • Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise networks. • Vast experience and interest in malware research or development. • Python software development experience. • Comfortable conducting research and gathering insights by querying large databases. • Ability to drive and own projects. • Independent and team player, critical thinker. Preferred Qualifications • Experience in machine learning or data analysis. • Reverse engineering knowledge and experience. • Advanced knowledge of Microsoft AD infrastructure. • Exploitation knowledge and experience. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you. This is an opportunity to join an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their cloud environments. Key Responsibilities • Contribute to a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud infrastructure. • Drive the execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments. • Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms. • Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts. • Simulate real-world attacks and perform deep behavioral analysis to inform and validate detection content. • Collaborate across engineering, product management, and go-to-market teams to deliver impactful security solutions. • Share insights with the security community through blogs, conference talks, and publications. Qualifications Required Qualifications • 5+ years in security research with a proven track record of driving impactful projects. • Deep expertise in cloud-native security, with strong focus on AWS, Azure, and GCP. • Experience developing or working with detection and response products, such as XDR, EDR, or cloud workload protection platforms. • Excellent communication skills, with the ability to articulate complex research findings and drive alignment across diverse teams. • Proficient in hands-on coding and scripting (e.g., Python). • Direct experience conducting penetration testing and red team assessments against cloud infrastructure (AWS, Azure, or GCP) Preferred Qualifications • Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow). • Familiarity with cloud threat modeling frameworks (e.g., MITRE ATT&CK for IaaS). Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Security Researcher to join our research group as part of a growing team developing Autopilot, an innovative product for autonomous investigation and response. As a core member of the team, you'll go beyond research: you’ll research, design, and develop investigation modules that allow Autopilot to autonomously detect, investigate, and respond to advanced threats at a massive scale. You’ll analyze everything from new malware behaviors to attacker techniques and process activity in enterprise-scale networks, using data collected from across millions of endpoints. Your work will span identifying attack patterns and uncovering statistical anomalies, as well as validating that the system responds effectively to real-world attacks and APT campaigns using production data. Key Responsibilities • Research and implement new autonomous methods for investigating and responding to targeted attackers, using large-scale, diverse security datasets • Develop and design the graph-based algorithms that power autonomous investigation and decision-making capabilities • Design automated incident response by developing reusable logic that transforms raw security data and alerts into clear, actionable insights. • Leverage graph algorithms, AI techniques, and statistical methods to mimic and scale human security analyst workflows • Conduct deep, hands-on investigations into modern malware, APTs, and complex attack flows to inform detection and response logic • Stay up to date with attacker methodologies, tools, and techniques (TTPs), ensuring our product remains effective against evolving threats • Contribute to a collaborative, fast-paced research team, helping shape our research strategy, improve processes, and continuously enhance the product Qualifications Required Qualifications • 5+ years of experience in security or threat research, in which you conducted deep research with actionable insights and real-world impact. • Proven experience as part of an R&D/development team, along with strong proficiency in Python programming • Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise networks • Comfortable working with large-scale datasets to extract meaningful insights through advanced analysis • Strong sense of ownership and ability to independently drive projects from concept to execution • Critical thinker who thrives both independently and in collaborative team environments • Excellent verbal and written communication skills • A cybersecurity professional driven to solve the next generation of security challenges. Preferred Qualifications • In-depth knowledge of the inner workings of operating systems (especially Windows) • Experience working with graph DB and algorithms • Experience in statistics, advanced data studies, or machine learning. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are seeking a Senior/Principal Linux Security Researcher for our Tel Aviv R&D center to advance our Cortex-XDR Agent for the Linux platform, which provides runtime protection to servers and cloud workloads. In this role, you will be a key member of a team responsible for researching, developing, and improving our Anti-Exploit and Anti-Malware capabilities. Your work will involve deep exploration of OS internals, exploits, malware, delving into cloud security, and finding ways to mitigate new attack vectors. Key Responsibilities • Research, develop, and improve state-of-the-art endpoint security solutions focused on comprehensive prevention. This includes broad defense against attack classes like malware and exploits, spanning from low-level mitigations to application-level security • Research Linux OS internals, kernel, application codebases, vulnerabilities, malware and exploits • Respond to security events coming from customers, in the context of malware and exploitation prevention Qualifications Required Qualifications • In-depth knowledge of some operating system internals is a must - Knowledge of Linux is an advantage • Development experience in C/C++/Rust is a must, 3 years at least • Experience in security research - 3 years at least • Experience in reverse engineering - both static and dynamic, is a must (x86/64 architectures), 3 years at least • Development knowledge in some scripting languages is a must - Experience with Python is an advantage • Ability to work independently and as a part of a team • Strong attention to detail • Ability to take initiative Preferred Qualifications • Exploitation experience is an advantage (either application-level security or memory corruption) • Familiarity with Kubernetes, containers, and cloud workload security. • Experience leading endpoint security projects across organizational boundaries and teams • Academic experience • Published security research, conference presentations, or CVEs. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are seeking a visionary and highly technical Principal / Sr. Principal Security Researcher to join our security research team. In this role, you will be at the forefront of innovating automated defense systems to rapidly protect platform customers against advanced cyber threats at an unprecedented scale. This position offers a unique opportunity to blend deep traditional cybersecurity expertise - including OS internals, reverse engineering, and advanced detection engineering with cutting-edge AI technologies like LLMs, SLMs, and agentic workflows. You will spearhead the creation of innovative prevention solutions, leveraging massive streams of agent telemetry to design AI-driven logic that neutralizes threats before they execute. As a key technical leader, you will partner closely with top-tier data scientists and product engineers to translate cutting-edge security research into production-grade capabilities, ensuring we stay ahead of the evolving threat landscape. Key Responsibilities • Develop Automated Defense Systems: Create, engineer, and deploy automated solutions for the prevention and detection of advanced cyber threats, analyzing complex data to rapidly protect platform customers at scale. • Innovate with AI: Partner closely with data scientists to leverage LLMs, SLMs & deeplearning techniques to fuel these advanced prevention solutions and automated defense capabilities. • Enhance Palo Alto Networks Agentix: Research, develop, and continuously improve the Agentix solution. Drive the development of next-generation security content by designing and implementing specialized AI agents to automate security operations and workflows. • Drive Security Innovations: Spearhead new research initiatives from the ground up. Act as the primary driver across key stakeholders, leading top-tier data scientists and engineers to ensure the successful delivery of enterprise-grade security capabilities. Qualifications Required Qualifications • 5+ years of hands-on experience in the cybersecurity research field. • Threat Research & OS Internals: Proven track record of applying deep cyber and analytical expertise to build robust security logic using endpoint telemetry. Supported by a profound understanding of Windows and Linux OS/kernel internals to engineer advanced defenses. • Reverse engineering experience: Demonstrated expertise in reverse engineering (e.g., IDA Pro, Ghidra) across multiple platforms to dissect malware and identify sophisticated attack vectors. • Programming & Native Code Comprehension: Strong proficiency in Python for data analysis and rapid prototyping, combined with the ability to comprehend native code (C, C++, or Rust) to effectively read and interpret agent code, low-level system interactions, and memory operations. • End-to-End Research Ownership: A scientific, data-driven approach to solving complex security challenges, with a proven track record of owning research initiatives from initial ideation through to the deployment of production-grade capabilities. • Communication & Mentorship: Excellent communication skills, with the ability to clearly articulate complex threat research to diverse audiences, mentor junior team members, and champion security initiatives across the organization. Preferred Qualifications • AI Agents & Frameworks: Hands-on experience developing and working with AI Agents and agentic workflows. Technical understanding of the architectural distinctions between an agent, a skill, and Model Context Protocol (MCP). Proven experience utilizing common agentic frameworks. • Data Scale & Telemetry Analysis: Proficiency in query languages (e.g., SQL) and big data platforms (e.g., GCP) to parse, manipulate, and query large-scale agent telemetry, extracting actionable security insights and uncovering threat patterns from massive datasets. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Senior Security Researcher to join our Identity Threat Detection and Response team. In this role, you will research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities. You will focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale. Additionally, you will collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats. Key Responsibilities • Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments. • Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior. • Develop and refine statistics-based classification algorithms and techniques to create and improve detection models. • Research specific scenarios to enhance our model's capabilities. • Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product. • Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats. Qualifications Required Qualifications • At least 5 years’ experience with Active Directory security and identity related attacks. • In-depth knowledge of the inner-workings of operating systems. • In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc. • In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc. • Ability to drive and own projects from start to finish. • Independent and a team player, a critical thinker. Preferred Qualifications • 2+ years of experience with Entra ID (formerly Azure AD) or SAAS application. • At least 2 years of experience coding in Python. • Strong knowledge of SQL language. • Experience with red-teaming / pentesting of Entra ID. • Experience with machine learning, data analysis, cloud infrastructure, or security. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Description Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds What You'll Do • Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights • Map risk vectors, build threat models, and translate them into actionable posture recommendations • Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis • Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention • Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements • 5+ years in security research, cloud security, or DevSecOps • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows. • Ability to own research initiatives end-to-end in a fast-moving environment • Excellent written and spoken English Advantages • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines • Experience with DSPM, data classification, or data security tooling • Background in supply chain security (SBOM, dependency and artifact security) • Open-source contributions, published research, or conference talks

Description Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences. Key Responsibilities • Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities. • Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks. • Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems. • Author high-quality technical blogs, whitepapers, and vulnerability reports. • Represent the company by speaking and participating in leading global security conferences. Requirements • Experience: 6+ years of proven experience in Offensive Security, Vulnerability Research, or Web Application Security. • Proven Track Record: Demonstrated background in discovering and disclosing vulnerabilities (e.g., published CVEs, strong bug bounty profiles, or independent research). • Technical Proficiency: Strong programming and scripting skills in languages such as Python, Go, C/C++, or Rust to build custom exploits and tooling. • Cloud/AI Knowledge: Solid understanding of modern Cloud environments (AWS, GCP, or Azure) and a foundational understanding of AI/ML architectures and their unique attack surfaces (e.g., LLM vulnerabilities, model poisoning). • Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical findings into clear business value for clients. Advantages • Low-Level Expertise: Proven background in low-level exploitation (e.g., binary analysis, reverse engineering, memory corruption vulnerabilities).

Job Description • Research the security of AI systems end to end, from the agents and frameworks they're built on to the runtimes and infrastructure that run them • Take apart complex software and find where it breaks • Turn a vulnerability into a full, working exploit, not just a proof that the bug exists • Understand the defenses modern systems lean on, and how to get past them • Share what you find, through coordinated disclosure and conference talks Qualifications • 4+ years in security research, vulnerability research, or a closely related field • A strong sense of how software works under the hood, whether that's a modern framework or the system underneath it • Comfortable reading complex code, and reverse engineering with IDA Pro or Ghidra when there's no source • Working knowledge of common vulnerability classes, from unsafe deserialization and logic flaws to memory corruption, and the experience to take one all the way to a working exploit • Excited about AI, and eager to get to its security problems first • Real curiosity, and the drive to go deep when the answer isn't obvious Nice to have • Experience researching AI systems, agent frameworks, or the infrastructure behind them • Published research, whether CVEs, blog posts, or conference talks • A degree in computer science, mathematics, or engineering, or the hands-on experience to match

Job Description We are looking for an exceptional researcher at the intersection of artificial intelligence and cybersecurity. This role is intended for someone who combines deep security expertise with a practical understanding of modern AI systems and the curiosity to explore how they can be attacked, abused, and defended. Key Responsibilities • Research vulnerabilities, attack techniques, and emerging security risks in AI models, agents, applications, and supporting infrastructure. • Develop innovative attacks, proofs of concept, evaluation methods, and defensive solutions. • Analyze how model behavior changes across problem domains, task structures, prompts, tools, resources, harnesses, and model architectures. • Translate research findings into clear security requirements, technical concepts, publications, and practical protections. • Present original research at leading international cybersecurity conferences. • Maintain a strong understanding of developments across the AI and cybersecurity landscapes. • Collaborate with security researchers, AI engineers, product teams, and other stakeholders to turn research into measurable impact. Qualifications • Strong cybersecurity background in reverse engineering, vulnerability research, cryptanalysis, malware research, or a similar advanced discipline. • Passion for AI and up-to-date knowledge of leading models, technologies, organizations, and emerging capabilities. • Solid understanding of modern AI concepts, including transformers, attention, RoPE, gradient descent, fine-tuning, RLHF, RLVR, inference, and agentic systems. • Ability to independently identify valuable research questions, design experiments, build proofs of concept, and validate findings. • Strong programming and rapid-prototyping skills. • Excellent writing, communication, and presentation skills, including the ability to clearly define requirements and introduce new technical concepts. • Ability and motivation to present original research at top-tier international cybersecurity conferences. Advantages • Experience researching AI security, LLM vulnerabilities, prompt injection, model behavior, AI agents, or adversarial machine learning. • Experience developing or evaluating AI-powered security systems. • A record of security publications, vulnerability disclosures, or presentations at leading security conferences. • Experience transforming research findings into production-grade security capabilities. • Familiarity with AI evaluation frameworks, inference infrastructure, model internals, and agent orchestration.

Job Description The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research. About the group: The Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale. About the position: Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments. You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers. This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity. What you'll do: • Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure • Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis • Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on • Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails • Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on • Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays • Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage • Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks Qualifications • 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research • Real exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact • Comfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point • Strong scripting and automation skills (Python preferred) • Clear written communication. You can explain a complex attack chain to an engineer and to a CISO Strong advantage • A consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it • Broad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side • Experience with template-based or automated scanning frameworks (for example, Nuclei) • Detection engineering experience (Snort/Suricata, YARA, SIEM detection logic) • Experience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work Nice to have • Offensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research Additional Information Why join us • Impact at scale. A technique you capture once runs across thousands of customer environments • A new category. Agentic exposure validation is being defined right now, and you help define it • A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here. About Us SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity. What Are We Looking For? We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes. As a Staff Security Researcher- Detection AI Research, you will be tasked with joining the Detection AI Research team, where security research meets machine learning. We use SentinelOne's EDR telemetry from millions of endpoints to hunt for sophisticated, highly evasive attacks and to close the coverage gaps they expose, using ML models and LLM-based agents that we design, build, and run in production. As a Senior Security Researcher in our AI Detection research team, you will bring the attacker's-eye view: which techniques matter, how they look in endpoint data, and what separates a real intrusion from benign noise at scale. You will work alongside the data scientists who build our models, and your detections will reach real customers through SentinelOne's Wayfinder analysts, threat hunters and detection engines. What Will You Do? Primary responsibilities include: • Research attack techniques and TTPs and how they manifest in our EDR telemetry, and turn that research into detection hypotheses that hold across millions of endpoints. • Design, build, own, and maintain AI-powered detections end to end: turn a detection hypothesis into a production pipeline that analyzes fleet-wide EDR data, applies the team's ML models and LLMs to separate real intrusions from benign activity, and surfaces advanced attacks that analysts and threat hunters can triage and act on. • Drive the development of LLM-based agents that automate detection authoring: define what a correct, robust detection looks like, and expand our agent's detection coverage autonomously. • Analyze detection gaps and false positives together with MDR analysts, threat hunters and detection engineering teams, and feed the findings back into the detections. • Write high-quality production Python and own your code in production. • Stay current with APTs, attacker methodologies, and emerging TTPs. What Skills and Knowledge Will You Bring? Ideal candidates will have: • 5+ years of experience in security research, threat hunting, or detection engineering, with a track record of detections deployed in production. • Deep understanding of the cybersecurity landscape, attack vectors, TTPs, and detection methods, especially on Windows. • In-depth knowledge of Windows internals and of how attacker behavior appears in EDR telemetry: process, file, registry, and network events. • Comfortable researching and hunting over very large telemetry datasets using SQL, KQL, Splunk, EDR query languages, or similar. • Python software development experience, including working with data and writing production-quality code. • Ability to drive and own research projects end to end; independent, critical thinker, team player. • Interest in applying machine learning and LLMs to detection, and fluency with modern AI tools in your daily work • Hands-on experience applying machine learning or LLMs to security problems. • Experience writing detection content: behavioral rules, Sigma, YARA, EDR query languages. • Malware analysis, reverse engineering, or red-team experience. • Experience with EDR/XDR products and their telemetry. Why us? AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place. We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family: Equity & Rewards • Restricted Stock Units (RSUs) • Employee Stock Purchase Plan (ESPP) Time Off & Wellbeing • Competitive leave benefits • Gender-neutral parental leave • Employee Assistant Program • Workout sessions and a Wellness App Insurance & Financial Security • Medical and insurance benefits • Pension • Employee Assistance Program (EAP) Work Perks & Flexibility • Global home office allowance • Mobile phone reimbursement • Study Fund SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. SentinelOne participates in the E-Verify Program for all U.S. based roles. To learn more about how we use AI in our hiring process, please review our AI in Hiring Candidate Disclosure.

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here. About Us SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity. What Are We Looking For? We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes. As a Staff AI Security Researcher, you will be tasked with leading efforts identifying and understanding security risks unique to AI systems. Investigate demonstrate attacks - prompt injections, jailbreaks, data leakage, agentic workflow hijacking and architecture/ecosystem flaws (plugins, connectors, MCPs, skills). Translate findings into detections and safeguards, and help build our agentic detection and response capabilities from the ground up. What Will You Do? Primary responsibilities include: • Conduct advanced research to identify vulnerabilities within AI (LLMs, SLMs) models, agentic systems and their infrastructure, including prompt injection, jailbreaking, data exfiltration, and misuse vectors. • Build threat models for emerging AI capabilities and deployment surfaces (agents, tool use, multimodal systems). • Innovate and design novel methodologies and automated tools to systematically and continuously probe AI security mechanisms at scale. • Partner with engineering and product teams to translate research findings into our Agentic Detection and Response offering. • Stay informed on the latest academic, industry and threat landscape trends on adversarial ML, agentic and AI security. • Mentor other researchers and engineers and help grow the team's technical capabilities. • Publish research findings internally and externally through papers, blog posts, or industry conferences. What Skills and Knowledge Will You Bring? Ideal candidates will have: • 6+ years of experience in offensive research, red teaming or pentesting, with focus on AppSec or Identity. • Hands-on experience with adversarial techniques against AI (LLMs, SLMs) and ML systems - prompt injection, jailbreaking, membership inference, model extraction, data poisoning, etc. • Good understanding of identity/access management (IAM) protocols and tools. • Familiarity with agentic attack taxonomies such as OWASP Top 10 for LLMs and MITRE ATLAS. • Proficiency in programming and scripting languages (Python, JavaScript and Java) and Cloud environments (AWS, GCP, Azure, Kubernetes). • Technical writing & content development skills. • Publication record or demonstrable body of work in security research, adversarial ML, or AI safety (papers, disclosed vulnerabilities, open-source tools, etc.) - advantage. • Experience in leading cross-functional technical initiatives - advantage. Why SentinelOne? AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place. We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family: Equity & Rewards • Restricted Stock Units (RSUs) • Employee Stock Purchase Plan (ESPP) Time Off & Wellbeing • Competitive leave benefits • Gender-neutral parental leave • Employee Assistant Program • Workout sessions and a Wellness App Insurance & Financial Security • Medical and insurance benefits • Pension • Employee Assistance Program (EAP) Work Perks & Flexibility • Global home office allowance • Mobile phone reimbursement • Study Fund SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. SentinelOne participates in the E-Verify Program for all U.S. based roles. To learn more about how we use AI in our hiring process, please review our AI in Hiring Candidate Disclosure.

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: The Android research group in Cellebrite Security Research Labs (SRL) is where the most challenging problems get solved. We're the ones who find the weaknesses that let us unlock modern phones and turn them into extraction capabilities investigators can actually use in the field. Our work ships straight into Cellebrite's core products, which makes this one of the most important roles in the company. Our customers are law enforcement agencies working real cases under legal authority: child exploitation, human trafficking, homicide, terrorism. A device we unlock is often THE piece of evidence that moves an investigation forward. What you'll do Perform vulnerability research on a huge variety of mobile technologies and architectures, from the application layer down through the kernel, TrustZone, the bootloader, and the firmware running underneath it. Go first into areas nobody has published and become a world-class expert in them. Reverse engineer code that was never meant to be read: no source, no symbols, no documentation. Turn bugs into exploits that hold up in the real world, across a wide range of chipsets, vendors, and OS versions. Conduct long term widely scoped security research projects as part of a broader team effort Requirements Qualifications Practical experience performing vulnerability research and exploitation Practical reverse engineering experience Practical knowledge of current and upcoming security mitigations Advantage: knowledge of Android architecture and internals Advantage: LLM-based pipelines for vulnerability research / exploit development / fuzzing Advantage: Cryptographic primitives and weaknesses Advantage: ARM Reversing Advantage: Advanced fuzzing Advantage: Offensive hardware research/board design #LI-AS1

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: Cellebrite is seeking talented researchers to join our industry-leading Digital Intelligence Security Research Labs. As a security researcher on our team, you will focus on identifying vulnerabilities within Apple’s ecosystem and developing innovative exploit strategies to gain access to iPhones and other devices, enabling the extraction of crucial evidence for law enforcements. Key responsibilities: • Research on territories with little-explored vulnerability • Work on the production of world-unique capabilities to extract evidence from phones and other embedded devices. • iPhones and other iOS devices present tough challenges from a forensics perspective and involve hardware-backed encryption (SiDP), secure crypto coprocessor (SEP), and secured boot chain (SecureROM). • New iPhones present state-of-the-art exploit mitigations such as PAC, KTRR, and PPL. • Become a member of Labs Group, focusing on Security Research for mobile devices. • Execute your own (shell) code on top-notch technology mobile platforms hardened with challenging mitigations • Collaborate with a team of passionate researchers dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. • Take part in world-class research results, assisting law enforcement by enabling lawful evidence extraction, and putting criminals behind bars every day. Requirements • Proven vulnerability research experience (preferably in iOS) • Experience with advanced exploitation techniques • ARM reverse engineering • Cryptographic primitives and weaknesses • Hardware research/board design - Advantage • You are a security researcher who cares about the ethical values of your work • You love the art of engineering and crafting a platform-wide native payload, in a fragmented ecosystem of gaping variance • You are passionate about technology and keen to use your skills to make the world a safer place. NOTE: The position is located in our offices in Tel Aviv #LI-AS1

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: As a talented researcher, you will be joining the industry’s leading digital intelligence Security Research Labs group. In this position you will be taking part and leading new projects in little-explored vulnerability research territories, producing world-unique capabilities to extract evidence from phones and other embedded devices. Recent phones (from burner phones to the latest flagships) are increasingly challenging from a forensics perspective, and involve hardware-backed encryption (FDE/FBE), secure boot chains (Verified Boot/dm-verity), evolving hardened SELinux policies, as well as adventures in ARM TrustZone secure worlds. Key Responsibilities: You will join Cellebrite’s digital intelligence Security Research Labs Group and be a part of a team of passionate researchers, dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. Our world-class research results assist law enforcement by enabling lawful evidence extraction, and putting criminals behind bars, every day. You are a security researcher who cares about the ethical use case for his/her work, and if the art of engineering and crafting a platform-wide native payload in a fragmented ecosystem of gaping variance is the kind of challenge you appreciate, you belong with us. We need your help to make the world a safer place. Qualifications: • Practical experience performing vulnerability research and exploitation, preferably in mobile or other modern environments, eg. Windows/Linux/iOS/MacOS • Practical reverse engineering experience, preferably in ARM / TrustZone / Hypervisors • Advantage: Cryptographic primitives and weaknesses • Advantage: Advanced fuzzing • Advantage: Offensive hardware research/board design • Advantage: Experience dealing with modern memory corruption mitigations, such as PAC and MTE. #LI-AS1