Security Researcher jobs in Israel

Description About Nagomi Security teams are not short on tools. They are short on time, alignment, and the ability to actually close exposure. That's why most breaches could have been prevented with a tool that was already in use. Nagomi was built to change that. We are the first Agentic Exposure Ops Platform, designed to prevent the preventable breach by turning fragmented signals into coordinated action. Our agents investigate risk, drive remediation, and verify that issues stay closed, continuously, without adding overhead. Nagomi is helping organizations move from reactive workflows to continuous execution, replacing manual effort with systems that actually move the work forward. The Opportunity As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production. What You'll Do • Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features. • Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats. • Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data. • Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments. • Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter. • Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation. • Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build. Requirements • Experience: 5+ years of hands-on experience in cybersecurity research, exposure management, vulnerability analysis, or threat intelligence. • Product Mindset: Strong ability to tackle projects end-to-end, translating theoretical security research into tangible product features and automated detection logic. • Broad Security Knowledge: Deep understanding of enterprise security tools (EDR, NDR, SIEM, VM, etc.), network topology, and how security components interact to impact network posture. • AI/Agentic Expertise: Proven experience building or heavily shaping AI-powered systems and agentic workflows. You must be able to point to concrete examples where you have integrated LLMs or AI processes to solve complex technical problems. • Attacker's Perspective: Solid foundation in how adversaries think, move laterally, and exploit enterprise environments, paired with expertise in leading vulnerability prioritization standards (MITRE ATT&CK, CISA KEV, EPSS). • Communication: Strong communication skills with demonstrated experience working directly with customers, stakeholders, and cross-functional engineering teams. It’s nice if you have • Experience collaborating with data science, data engineering, or analytics teams to structure security datasets and build scalable intelligence pipelines. • Published research, CVEs, conference talks, or open-source contributions.

Description We are seeking a highly technical, hands-on Principal AI Research Cybersecurity Scientist to drive fast-paced research in frontier AI models, benchmarking, and evaluation. The ideal candidate combines strong research credentials with exceptional engineering capabilities and a proven ability to execute rapid research cycles, moving quickly from identifying research questions to building prototypes, running experiments, and delivering actionable results. The role requires deep expertise in LLMs, foundation models, reasoning, agents, and model evaluation, alongside the ability to translate complex customer challenges into measurable research outcomes. Key Responsibilities • Conduct hands-on research in frontier AI models, reasoning, agents, and multimodal systems. • Design, implement, and iterate on AI benchmarks, evaluation frameworks, and experimental pipelines. • Execute short, high-impact research cycles, rapidly moving from hypotheses to experiments, prototypes, and validated findings. • Identify model limitations, evaluation gaps, and emerging research opportunities. • Work directly with customers and technical stakeholders to translate complex challenges into actionable research. • Collaborate with engineering and product teams to turn research findings into practical solutions. Requirements Qualifications • PhD or MSc in Computer Science, AI, Machine Learning, or a related field, with strong relevant research experience. • Strong publication record at leading AI/ML conferences such as NeurIPS, ICML, ICLR, ACL, or equivalent venues. • Exceptional hands-on technical capabilities, including advanced Python, PyTorch, and experience building and evaluating complex AI systems. • Proven ability to independently design, implement, and execute research experiments within short development cycles. • Deep understanding of LLMs, foundation models, benchmarking, and evaluation methodologies. • Experience with frontier AI labs such as OpenAI, Anthropic, or Google DeepMind is a strong advantage. • Strong analytical and communication skills, with the ability to operate effectively in a fast-paced, customer-driven research environment. Preferred Qualifications • Experience with AI for Cybersecurity, including autonomous security agents, vulnerability research, penetration-testing automation, or security operations. • Experience with Security of AI, including LLM red teaming, adversarial machine learning, prompt injection, and agentic AI security. • Familiarity with cybersecurity tools and environments such as CTFs, sandboxed exploitation environments, static/dynamic code analysis, and security testing frameworks. • Experience developing cybersecurity benchmarks or evaluating frontier models on complex security-related tasks. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Description Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm. You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs. Key Responsibilities • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions. • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them. • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform. • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them. • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify. • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents. Success Looks Like 90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform. Requirements • 4+ years in security research, offensive security, penetration testing or vulnerability research. • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems. • Strong Python. You build your own tooling and test environments. • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework. • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks. • Experiment discipline: reproducible setups, controls, and enough runs to trust a result. • Clear writing and presentation: test results the product team can act on, and research that marketing can publish. • Fluent English, written and spoken. Nice to Have • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security. • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions. • A background in adversarial machine learning. • Experience building or evaluating detection systems that use AI. • Experience working with product and engineering teams to turn research into shipped features. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Job Description Summary Location: Tel-Aviv, Israel #LI-Hybrid 3 days/week in office Internal job title: Assoc. Dir. DDIT ISC Security Research About the role: The Defensive Cyber Security Researcher will be part of a new Think Tank group of security researchers that will challenge Novartis information security defenses, application security and data protection. The Defensive Cyber Security Researcher will be responsible for participating in threat actor based investigations, creating new detection methodology and providing expert support to incident response and monitoring functions. The focus of the Defensive Cyber Security Researcher is to detect, disrupt and eradicate threat actors from enterprise networks, including emerging AI-driven and AI-assisted threats. To execute this mission, the Defensive Cyber Security Researcher will use data analysis, threat intelligence, and cutting-edge security technologies — with a growing emphasis on understanding how AI can be weaponized against the organization and how it can be leveraged defensively. The Defensive Cyber Security Researcher will identify and analyze patterns and changes in tactics, techniques and procedures used by attackers to attack Novartis IT infrastructure and management staff. The analysis will result in indicators of compromise, accurate understanding of the risk to Novartis IT infrastructure and prioritization of remediation efforts. Job Description Key Responsibilities: • Hunt through huge number of signals to identify new emerging threats, dissect them and extract meaningful insights and indicators of compromise. • Demonstrate adversary tactics to recognize and analyze malicious activity (techniques, tools and processes) based on a combination of behavioral activity and signature based analysis. • Participate in "hunting missions" using threat intelligence, analysis of anomalous log data and results of brainstorming sessions to detect and eradicate threat actors on the Novartis network. • Provide expert analytic investigative support of large scale and complex security incidents. • Perform analysis of security incidents for further enhancement of alert catalog; perform in-depth static and dynamic malware reverse engineering; preform ad hoc memory and disk forensics. • Produce detailed technical reports in support of malware / other hunting investigations. • Review alerts generated by detection infrastructure for effectiveness and recommend improvements. • In collaboration with the Security Operations Center: Develop dashboards and reports to identify potential threats, suspicious/anomalous activity, malware, etc. • Research and assess AI-specific security risks to the organization, including adversarial use of AI models, prompt injection attacks, data poisoning, shadow AI adoption, and LLM-assisted threat actor operations; translate findings into actionable defensive guidance and detection rules. • Collaborate with Cyber Threat Intelligence (CTI) teams to operationalize intelligence feeds, enrich hunting missions with external and internal threat data, and contribute research outputs (IOCs, TTPs, adversary profiles) back into intelligence pipelines. Essential Requirements: • 5+ years of experience in Incident Response / CERT team or 5+ years of experience with malware investigations. • Critical understanding of the cyber attacker kills chain elements, with particular emphasis on attack objectives. • High familiarity and experience with Active Directory (AD) and Entra ID / Azure AD security — including AD attack paths (Kerberoasting, pass-the-hash, DCSync, Golden/Silver Ticket), BloodHound-based graph analysis, AD tiering models, and Conditional Access Policies; ability to identify misconfigurations that lead to privilege escalation and lateral movement. • Solid understanding of AI security risks and their organizational impact, including adversarial machine learning, prompt injection, data poisoning, shadow AI risks, and the use of generative AI tools by threat actors; ability to advise the organization on AI-related threat exposure and contribute to AI governance from a security perspective. • Proven ability to work effectively with Security Operations Center (SOC) teams: including joint detection engineering, alert tuning, escalation workflows, and acting as a subject matter expert during high-severity incident response; experience bridging the gap between research depth and SOC operational tempo. • Experience working with Cyber Threat Intelligence (CTI) teams: consuming and operationalizing intelligence products, contributing research outputs as structured intelligence (IOCs, TTPs, adversary profiles), and participating in joint threat briefings and intelligence-driven hunting operations. • Good familiarity with Red Teaming tools and operations, understanding of Wireshark, Cobalt Strike and more • Advanced programming skills with scripting languages such as Python/Perl/Ruby. • Familiarity with the current nation-state (“APT”) threat landscape and the various actors and groups. • Very strong team and interpersonal skills along with the ability to work independently and achieve individual goals, with effective oral and written communication skills. Desirable requirements: • Relevant Technical Security Certifications (GIAC, EC-Council, Offensive Security, etc.) Why Novartis? Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-culture Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network Accessibility and accommodation: Novartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e-mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message. Skills Desired Communication Skills, Cyber-Security Regulation, Cyber Threat Hunting, Cyber Threat Intelligence (Cti), Cyber Threat Management, Cyber Vulnerabilities, Decision Making Skills, Digital Capabilities, Effective use of Technology, Influencing Skills, Information Security Risk Management

Description We’re looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team. Why Mitiga? EDR protects the endpoint. Mitiga protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business. Mitiga is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure — cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools can’t see, Mitiga provides Zero-Impact Breach Prevention, in runtime. The Role We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization. You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team. What You'll Do Drive Groundbreaking Research • Own and drive Mitiga's most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication. • Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats. • Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities. • Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it. Be a Voice in the Community • Represent Mitiga as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions. • Build and maintain Mitiga's reputation as a research-driven company that advances the field - not just a vendor with a blog. • Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing. Shape the Product • Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats. • Design and develop advanced detection algorithms that directly feed into Mitiga's platform, closing the gap between research insight and customer protection. Elevate the Team • Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to. • Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices. • Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities. • Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity. Requirements Who You Are • 8+ years in security research, threat research, or closely related fields (offensive security, detection engineering, incident response, cloud security engineering). Fewer years are fine if your depth and track record are exceptional. • Deep multi-cloud expertise - strong hands-on experience across at least two of the major cloud providers (AWS, Azure, GCP), with working knowledge of the third. You understand the IAM models, logging pipelines, APIs, and attack surfaces that matter in each. • A track record of original research - you've published meaningful technical findings through blog posts, conference talks, open-source tools, or vulnerability discoveries that moved the needle. We want someone who doesn't just consume research - you produce it. • Strong adversarial mindset and critical thinking - you think like an attacker targeting cloud infrastructure, SaaS platforms, identity systems, and Kubernetes. You can model threat scenarios, map out attack paths, and poke holes in defenses. • Ability to operate autonomously on ambiguous, high-stakes problems. You don't wait for detailed specs - you identify what matters and drive it forward. It Would Be Nice If You Also Had • Experience with cloud forensics and incident response (DFIR in cloud/SaaS environments). • Background in red teaming or penetration testing targeting cloud environments. • Familiarity with Kubernetes security, container escape techniques, and cloud-native supply chain risks. • Experience building or contributing to threat intelligence frameworks or detection content libraries. Some More Details and Perks • Location: Tel Aviv, IL • Hybrid work Environment • Competitive compensation package with stock options, educational fund, cibus. • Top of the line equipment For more information visit us at www.mitiga.io Mitiga is an equal opportunity employer, committed to diversity and inclusiveness and aim to attract, retain, and engage a diverse workforce. We consider all qualified applicants without regard to race, color, nationality, gender, gender identity, sexual orientation, religion, disability, age or any other characteristic protected by law.

At D-Fend Solutions, our people are our greatest strength — and technology is our passion. Our team of innovators and subject matter experts, including veterans of elite military intelligence technology units, is transforming the way organizations protect themselves from drone threats. As the global leader in cyber-takeover counter-drone technology, we design and deliver advanced, software-defined solutions that empower our customers to detect, take control, and safely land unauthorized drones — with precision and reliability. Every day, we push the boundaries of innovation to meet real-world security challenges across industries and environments. We’re proud of our cutting-edge technology, our global reach, and the impact we make in securing the skies. We’re seeking passionate professionals who thrive in a fast-paced, creative, and collaborative environment — those who want to be part of the next generation of airspace security innovation. Join D-Fend Solutions and help make the world a safer place. Become a D-Fender! Work with the world’s leading cyber-takeover counter-drone technology provider and shape the future of safe airspace. Scope: Our mission is to D-Fend and mitigate the danger from rogue drones. We are looking to expand our drone take-over research team, which is responsible for the core technology of our product. This is a great opportunity for you to expand your capabilities working on versatile and innovative cyber research projects as part of a young and extremely talented team. Job Requirements: • 4+ years of relevant industry experience as embedded vulnerability researcher or equivalent. • Experience with a dis-assembler for vulnerability research (IDA Pro or GHIDRA). • Deep understanding of OS internals (Linux, RTOS, Android etc.). • Experience with complicated exploitation methods on embedded systems. • Experience with writing code in assembly or c and Python. • Advantage - Graduate of an elite technological unit in IDF

Description About Us Zenity is the leader in AI Agent Security and the first company to bring an agent-centric security platform to market. As enterprises accelerate AI agent adoption, we are establishing the security framework for how AI agents are secured and governed at enterprise scale. We deliver full-lifecycle visibility, governance, detection, prevention, and response for AI agents from build time to runtime, across SaaS, home-grown platforms, and end-user devices. Backed by $180M+ in total funding, including a $125M Series C led by Norwest, with participation from SoftBank Vision Fund 2 and Microsoft's M12, Zenity is trusted by Fortune 500 and Global 2000 enterprises worldwide. Join us in shaping how AI agents are secured at enterprise scale. About the Role We’re seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen Zenity’s detection capabilities. In this role, you’ll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. It’s a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses. Responsibilities • Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies. • Conduct research on cloud, web, and API security to uncover new threats and attack vectors. • Develop, refine, and design world-class detection logic and rules to enhance Zenity's runtime protection. • Perform threat-hunting activities across large data sources to identify emerging attack patterns • Drive full-cycle research: from hypothesis and experimentation to production validation. • Collaborate with engineering and product teams to deliver actionable insights. Requirements • 4+ years in security research, including cloud, web, or API security. • Experience in detection engineering and building or working with detection-driven security products. • Strong coding and data analytics skills in scripting and programming languages such as Python, JavaScript and bash, and proficiency with SQL-like queries. • Solid grasp of security principles, cloud security, and runtime defense. • Curiosity, creativity, and a self-driven approach to research. • Experience tinkering with LLMs and AI security - a strong plus.

Description Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm. You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs. Key Responsibilities • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions. • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them. • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform. • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them. • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify. • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents. Success Looks Like 90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform. Requirements • 4+ years in security research, offensive security, penetration testing or vulnerability research. • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems. • Strong Python. You build your own tooling and test environments. • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework. • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks. • Experiment discipline: reproducible setups, controls, and enough runs to trust a result. • Clear writing and presentation: test results the product team can act on, and research that marketing can publish. • Fluent English, written and spoken. Nice to Have • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security. • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions. • A background in adversarial machine learning. • Experience building or evaluating detection systems that use AI. • Experience working with product and engineering teams to turn research into shipped features. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Description We are looking for an exceptional Security Researcher to join Aqua’s world-class security research organization. Looking for an experienced researcher in the cybersecurity world with depth, and excellence in cloud-native security research. As a Security Researcher, you will work on deep technical research on several areas – working with other researchers, and transforming advanced offensive insights into scalable defensive capabilities. What You Will Do • Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems, including Kubernetes, containers, and serverless environments. • Reverse engineer Linux malware families to extract behavioral patterns, execution flows, and persistence mechanisms. • Study real-world threat actor techniques and translate findings into actionable detection, prevention, and hardening strategies. • Design and prototype advanced detection logic and observability mechanisms, including kernel- and runtime-level approaches (e.g., eBPF). • Influence Aqua’s security strategy by turning research insights into capabilities that protect large-scale production environments. • Collaborate closely with engineering and product teams to ensure research outcomes are impactful and scalable. Requirements • 4+ years of experience in security research with a strong focus on Linux-based systems. • B.Sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background. • Deep, practical understanding of Linux internals (processes, syscalls, memory, networking, filesystems). • Strong experience with malware analysis and reverse engineering in Linux environments. • Proficiency in C and Python for low-level research, tooling, and prototyping. • Proven ability to analyze attacker behavior and design corresponding detection or mitigation strategies. • Strong familiarity with cloud-native technologies, including containers, Kubernetes, and container runtimes. • Excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.

🔹 Title: Security Researcher 📍 Locations (Hybrid): Tel Aviv (Sky Tower) 👥 Reporting To: Threat Research Team Leader 🌟 Opportunity Highlights We are looking for a Security Researcher to join our team; an enthusiastic, autodidact who is passionate about analyzing vulnerabilities and malware techniques. He/she will build offensive breach scenarios, integrating the latest security knowledge into the SafeBreach platform of threats and 1-day exploits. 👋 Who We Are SafeBreach is on a mission to help organizations have certainty in their security. Long trusted as the global leader in adversarial exposure validation (AEV), SafeBreach empowers organizations to take command of risk by operationalizing the full CTEM lifecycle with the SafeBreach CTEM Platform. Powered by the SafeBreach Helm AI infrastructure layer and grounded in the award-winning SafeBreach Exposure Validation Platform, the SafeBreach CTEM Platform is the first enterprise-grade, closed-loop solution designed to move organizations beyond siloed security activities toward a continuous, intelligence-driven exposure management program. Backed by world-renowned threat researchers and an unrivaled customer success team, SafeBreach provides the capabilities enterprises need to holistically understand threat exposure, make data-driven decisions that reduce risk, and measurably improve cyber resilience—safely and at scale. We are a team of passionate security professionals and innovators. If you’re ready to tackle complex security challenges and make a tangible impact on enterprise defense, we’d love to meet you. 🚀 The Impact You Will Have • Research in rich environments: Work across Windows, Linux, Mac, Docker, and advanced cloud environments (AWS, Azure, GCP). • Research and implement a huge variety of cyber tactics (privilege escalation, defense evasion, lateral movement, OS persistence, credential access, etc) • Exploit complex 1-days on apps & native OS. • Innovate & Build: Work with a wide variety of technologies to simulate real-world adversarial behavior. 🧬 What Sets You Apart • 5+ years of security research experience • Deep understanding of windows internals and reverse engineering • Experience in exploitations and vulnerabilities • Knowledge of development in C • Ability to handle new technological concepts • Self-driven, autonomous learning abilities • Knowledge in developing with Python • Knowledge in offensive or red-team approach 💰 What We Offer • Competitive salary and equity grants • Hybrid flexibility • Quarterly recharge weekends • Learning & development stipend • Generous paid leave policies including flexible PTO and parental leave 🤝 HOW WE'LL GET TO KNOW EACH OTHER We view interviewing as a two-way street. We want you to interview us just as much as we interview you! (Avg. timeline: 21 days) Step 1: The Intro (15 min) A casual meeting with the Talent team to break the ice. Step 2: The Vision (45 min meeting) Connect your future manager to discuss the role, the challenges, and how you can make an impact Step 3: The Squad & The Big Picture (45-60 min meetings) Meet some of your future teammates in our Tel Aviv office, as well as our HR Team and VP of R&D to ensure our values and long-term goals align with yours. Step 4: The Offer If the vibe is right, we make it official! 🌍 DEI&B Commitment (Diversity, Equity, Inclusion & Belonging) At SafeBreach, we celebrate the rich diversity of our team, where every employee's unique perspective is a valued thread in our collective success. We are unwavering in our commitment to fostering an inclusive workplace that nurtures a sense of belonging and empowers each individual to unleash their full potential. We are dedicated to creating opportunities for collaboration, innovation, and meaningful career growth, ensuring that every voice is not just heard, but cherished.

Description Reflectiz is a fast-growing cybersecurity company specializing in proactive website security. Our unique remote monitoring technology helps organizations reduce security, privacy, and compliance risks-protecting critical digital assets that traditional solutions can’t fully cover. Since our founding in 2019, we’ve built a global customer base that includes Fortune 500 enterprises and leading brands across North America, EMEA, and APAC. With strong year-over-year growth and a financially solid foundation, Reflectiz offers both stability and exciting opportunities for personal and professional development. Our teams in Israel and the United States foster an inclusive, collaborative culture that combines innovation with professionalism-allowing us to consistently deliver exceptional value to our customers. We’re looking for a sharp, passionate, hands-on Security Researcher with a strong understanding of web technologies, a hacker mindset, and a genuine drive to explore, challenge, and advance security technology. In this role, you’ll research real-world web environments, investigate vulnerabilities and attack techniques, analyze suspicious behaviors, and explore how modern websites and browser-based security mechanisms can be bypassed. You’ll work closely with our Security and R&D teams, turning research findings into security insights and detection capabilities within the Reflectiz platform.. Responsibilities • Research web security vulnerabilities, attack techniques, and emerging threats • Pen testing - Investigate real-world websites and web applications to identify security weaknesses and suspicious behavior • Analyze client-side attacks, malicious scripts, third-party components, and web supply-chain risks • Research vulnerabilities and attack vectors such as XSS, CSRF, injection techniques, and browser-based attacks • Analyze JavaScript execution, DOM behavior, network requests, and browser activity from a security perspective • Investigate security mechanisms such as WAFs, bot protection, authentication mechanisms, fingerprinting, and rate limiting • Explore bypass techniques and identify weaknesses in existing security controls • Develop scripts and research tools to support security investigations and automate analysis • Analyze new vulnerabilities and attack techniques and evaluate their potential impact on web environments • Translate security research findings into detection methods and security capabilities for the Reflectiz platform • Collaborate with Security Researchers and R&D teams on complex security investigations Requirements • 3+ years of hands-on experience in Pen testing, Security Research, Web Security, Application Security, Offensive Security, or a similar security-focused role • Strong understanding of web vulnerabilities, attack techniques, and common web security risks • Strong knowledge of modern web technologies, including JavaScript, HTTP/HTTPS, DOM, browser behavior, APIs, and web application architecture • Strong investigative mindset and the ability to think like an attacker • Ability to independently research complex security problems and turn findings into practical insights • Hands-on experience with AI-assisted and agentic coding workflows, using AI tools effectively Advantage • Experience with browser security or Chromium • Experience in penetration testing, vulnerability research, bug bounty, AppSec, or offensive security • Familiarity with OWASP methodologies and common web security testing tools • Degree in Computer Science or a related technical field

Description Remedio is transforming how organizations reduce cyber risk. While most security tools focus on finding problems, Remedio focuses on fixing them. Our Autonomous Remediation Platform helps enterprises continuously and safely reduce exposure by remediating vulnerabilities and misconfigurations, closing patching gaps, hardening systems, enforcing compliance, governing applications, and controlling AI risk. By combining deep dependency awareness, pre-execution validation, automated remediation, and instant rollback, Remedio enables organizations to eliminate risk across endpoints, servers, applications, and AI systems - without disrupting business operations. Founded in 2019, Remedio spent its first years as a bootstrapped, profitable company, building a strong enterprise customer base before raising a $65M Series A led by Bessemer Venture Partners. Today, more than 300 enterprise organizations trust Remedio to protect over 3M devices worldwide, including Amazon, Colgate-Palmolive, Kraft Heinz, Coca Cola Hellenic Bottling Company, and many more. As we continue expanding our platform and growing our global business, we’re looking for exceptional people who want to take ownership, solve meaningful challenges, and help shape the next chapter of Remedio’s journey. Were looking for a Senior Security Researcher to join our team! Responsibilities • Conduct advanced vulnerability research on operating systems and third-party software installed on endpoints. • Develop proof-of-concept exploits and techniques to validate research findings. • Document and publish research through reports, whitepapers, and public presentations to highlight emerging risks. • Collaborate with product and engineering teams to translate findings into improved security protections. • Stay on top of the evolving vulnerability landscape and proactively choose research areas of focus. Requirements • 3+ years of experience in low level development on Windows operating system. • Fluent in English, C/C++, Python. • Reverse engineering experience. • Strong ability to get the job done - from idea to a vulnerability. • A proven solo contributor at heart, capable of driving independent research. • Jack of all trades - comfortable moving between Java, C++, Python, COM objects, or whatever the target requires. • Deep understanding of operating system internals and network protocols. • Experience in an elite Israeli army technology/cybersecurity unit is highly regarded.

As a Senior Security Researcher for the Axonius Exposures team, you will conduct research into vulnerability detection, remediation, and prioritization to enhance our asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security data, automate workflows, and prototype logic to address enterprise attack surfaces. This is a high-impact role where your research directly shapes how our customers identify and mitigate their most critical security gaps. Responsibilities • Lead end-to-end security research projects focusing on vulnerability detection, risk prioritization, and exposure management logic. • Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate threat research, and prototype research tools. • Research and define remediation strategies, compensating controls, and configuration-based mitigations beyond standard patching. • Partner weekly with Product and Engineering teams to transform technical research into production-ready product capabilities. Minimum Qualifications • 4+ years of professional experience in security research, vulnerability analysis, or penetration testing. • Demonstrated proficiency with Python for scripting/automation and SQL for querying complex security data sets. • Hands-on experience integrating AI/LLMs into technical workflows to accelerate data analysis, parsing, or research output. • Practical understanding of security frameworks and metrics including CVSS, EPSS, and MITRE ATT&CK. Preferred Qualifications • Prior experience in B2B SaaS or enterprise cybersecurity product environments. • Experience in exposure management, attack surface management (ASM), or enterprise risk prioritization. • Experience creating custom prioritization and scoring algorithms combining vulnerability telemetry with asset criticality. • Deep knowledge of non-patching mitigation strategies, including registry tweaks, network policy shifts, and configuration hardening. • Proven track record of framing open-ended security problems into scalable software feature requirements. #LI-HYBRID, #LI-ZR1 About Axonius: Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence. Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world. Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. Description We are looking for a Mobile Security Researcher to join our Research Team. As our Security Researcher, your primary focus will be on the inner workings of iOS and Android operating systems. You'll dive into codebases, analyze security mechanisms, and identify potential vulnerabilities. In addition, you'll work collaboratively with the team to develop protective strategies and contribute to ongoing innovations in mobile app security. This role requires a keen analytical mind, a passion for research, and a drive for continuous improvement in the mobile security domain. Join us in shaping secure solutions for the future of mobile apps. What will you do? • Research and implement security mechanisms for Android and iOS platforms, driving the full cycle from low-level platform analysis to hands-on feature development. • Conduct reverse engineering on a wide variety of devices running iOS/Android to gain deeper insights into their system. • Keep up to date with emerging trends in mobile application security and research methods to ensure that customers are protected. • Work with a talented security team where you'll learn and grow every day. Requirements • At least 2 years of experience in reverse engineering of large systems/OS, preferably with IDA • At least 2 years of experience in C/C++ programming • OS Internals/Low Level/Kernel experience • Eager to take on challenging tasks • Curious and quick to learn on your own • Team player with good interpersonal skills Advantages:  • Experience in vulnerability research • Familiarity with assembly and ARM instruction set • Mobile apps development experience • Low-Level experience in iOS or Android

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. About the Role We are looking for a talented, passionate Offensive Researcher to join our innovative research team. If you’re eager to explore cutting-edge mobile security techniques and help safeguard the mobile app ecosystem, this is the role for you! As a key player in our security team, you'll design and execute sophisticated attack simulations on the Appdome platform. Your work will touch on diverse attack vectors, including file systems, networks, jailbreaks, memory injections, and more. Requirements • 1-3 years of experience in Offensive Security/Cyber. • Extended knowledge in researching, simulating, and analyzing different application attack vectors. • Advantage – Experience using a hacking framework or pen-testing tools such as Frida, Magisk, Multiproxy, and Cheat Engine. • Ability to create analysis plans and execute them, as well as document and troubleshoot errors. • Ability to understand the system from multiple perspectives, including high-level and low-level technical architecture. • Experience in Mobile (iOS/Android) analysis environments and automation tools. • Bachelor’s degree in a relevant field. • Software development and scripting experience.

Description Accelerate Your Career in Cybersecurity Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them. With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group. If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you. About the role: We're looking for an AI Security Researcher with a strong AppSec foundation. At the core, this is a deeply technical application security role at an engineering level. You'll sit with development teams, get involved in their processes, understand how software is actually built, and bring a security perspective from the inside. You'll enhance traditional AppSec with agentic tools and security layers, working directly with enterprise customers on hands-on engagements. On top of that defensive foundation, you'll layer AI-specific offensive capabilities: researching and executing attacks against AI/ML systems. This is a unique opportunity to combine strong AppSec fundamentals with cutting-edge AI red teaming and agentic consulting, with a clear growth path as a researcher. Roles and Responsibilities: • Conduct deep, engineering-level application security work: review architectures, assess code, and embed with development teams as a technical peer throughout the development lifecycle • Lead AI-focused security assessments and red team engagements for enterprise customers, identifying vulnerabilities in AI/ML systems, agentic workflows, and LLM-based applications • Enhance traditional AppSec processes with agentic tools and AI security layers • Research and develop novel attack techniques targeting AI/ML systems, including prompt injection, model manipulation, and agentic framework exploits • Translate offensive findings into actionable security recommendations for customers and internal teams • Stay at the forefront of AI security: continuously research emerging attack surfaces and contribute to the growing body of AI threat knowledge Requirements • Deep, hands-on application security experience at an engineering level: someone who sits with dev teams, understands development processes from the inside, and reviews code and architectures as a peer (Must) • At least 1 year of dedicated, immersive work in AI security: research, experimentation, or offensive engagements targeting AI/ML systems (Must) • Offensive security capabilities with a focus on AI-specific attack vectors (Must) • Strong understanding of AI/ML technologies, including LLMs, agentic systems, and common AI application architectures • Development skills: comfortable reading and writing code, building tools, and understanding codebases • Excellent communication skills and comfort working directly with enterprise customers • Fluent English Nice to have: • Published research or public talks on AI security topics • Experience with traditional penetration testing or red teaming • Background in building or deploying AI/ML systems from the development side We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We we

Description Accelerate Your Career in Cybersecurity Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them. With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group. If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you. About the role: We're looking for an experienced Security Researcher to join Pentera's R&D organization and work alongside a team of attack-oriented researchers. You'll conduct hands-on offensive security research across multiple domains including Windows internals, kernel-level security, cloud platforms, web technologies, and AI. Your work will directly shape the attack methodologies that power Pentera's automated platform, translating deep technical research into new offensive techniques and AI-driven decision-making capabilities. Roles and Responsibilities: • Conduct hands-on offensive security research across AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across OS-level, domain, cloud-native, and external surfaces • Translate research outputs into production-grade attack functionalities within Pentera's automation ecosystem, working closely with product and engineering teams • Contribute to the integration of AI-driven decision-making into the platform's automated operations • Share knowledge, document findings, and contribute to a culture of continuous learning within the team Requirements • 3+ years of offensive security research experience: Windows internals, penetration testing, vulnerability research, or red team operations • Deep knowledge of attack frameworks and tools such as Metasploit, Nmap, Cobalt Strike, Impacket, Burp, Pacu • Proficiency in reverse engineering and debugging (IDA, Radare2, WinDBG) for low-level research • Familiarity with cloud ecosystems, specifically AWS and Azure • Strong communication skills to document and convey complex research clearly • Excellent teamwork, adaptability, and quick learning mindset Nice to have: • Hands-on development experience in Python, C/C++, or similar languages used in offensive tooling • Experience applying AI or machine learning concepts to offensive security or automated decision-making • Red/blue team operations experience We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We welcome candidates from all backgrounds to join us!

Description Accelerate Your Career in Cybersecurity Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them. With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group. If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you. About the Role: We are looking for an experienced Security Research Team Lead to join our R&D organization and lead a team of attack-oriented security researchers. You will set the research direction across multiple domains, from Windows internals and kernel-level security to cloud platforms, web technologies, and AI, ensuring your team stays one step ahead of real threat actors. Your team's research and attack methodologies will feed directly into our automated attack platform, enhancing its capabilities with new offensive techniques and AI-powered decision-making algorithms. Roles and Responsibilities: • Lead, mentor, and grow a team of security researchers, setting priorities and driving execution. • Define the team's research roadmap across areas such as AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across OS-level, domain, cloud-native, and external surfaces. • Accompany hands-on research alongside the team, maintaining deep technical credibility. • Collaborate with product and engineering teams to translate research outputs into production-grade attack functionalities within our automation ecosystem. • Drive the integration of AI-driven decision-making into the platform's automated operations. • Foster a culture of innovation, knowledge sharing, and continuous learning within the team. • Represent the research function in cross-team planning, roadmap discussions, and stakeholder alignment. Requirements • 3+ years of experience in offensive security research: Windows internals, penetration testing, vulnerability research, or red team operations. • 3+ years of experience leading or managing a technical research team. • Deep knowledge of attack frameworks and tools such as Metasploit, Nmap, Cobalt Strike, Impacket, Burp, Pacu, and similar. • Proficiency in reverse engineering and debugging (e.g., IDA, Radare2, WinDBG) for low-level research. • Familiarity with cloud ecosystems and hybrid environments, specifically AWS, Azure. • Strong communication skills, with the ability to translate complex research into actionable roadmaps. • Excellent teamwork, adaptability, and a quick learning mindset. Preferred skills: • Hands-on development experience in Python, C/C++, or similar languages used in offensive tooling. • Experience applying AI or machine learning concepts to offensive security or automated decision-making. • Experience with red/blue team operations. We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We welcome candidates from all backgrounds to join us!

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We’re looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team. This is a role for someone who can perform offensive security testing at scale, combining deep security expertise with the judgment to direct and improve AI-driven tooling. What You'll Actually Be Doing • Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth that you will develop. • Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find. • Run end-to-end engagements: scoping, execution, reporting, and remediation guidance. • Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes. • Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness. • Produce high-quality technical reports with clear exploitation paths and prioritized remediation. • Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale. • Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting. • Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision. • Translate your own tradecraft into reusable, explainable automation that the team can run and build on. You're Our Person If... • 6+ years (Senior) / 8+ years (Lead) hands-on offensive security experience such as pentesting, red teaming, or app/security research, with proven complex engagement delivery. • Deep, must-have vulnerability knowledge in cloud and web application security: OWASP Top 10+ vulnerability classes, identity/authz attack vectors, and cloud/hybrid attack surfaces. • Hands-on experience using internal AI tools and frontier models to perform or accelerate security testing, not just conceptual familiarity! • Software engineering fundamentals: System design, API integration, working with distributed services and technologies. • Ability to write custom scripts/tooling/payloads and contribute to building automation and autonomous harnesses including prompt engineering. • Excellent written and verbal communication skills. Even Better If... • Experience with agentic frameworks, prompt optimization, agent evaluation, or lightweight model fine-tuning. • Published security research, CVEs, or conference talks. • Familiarity with MITRE ATT&CK/ATLAS and offensive AI/ML attack surfaces (prompt injection, agentic privilege abuse). Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience Join the Product Security team in Israel as an Offensive Security Engineer on our Red Team. You partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms, and enterprise environments, and you help make our defenses stronger, including as AI and Agentforce reshape our attack surface. What You'll Actually Be Doing • Run hands-on red team operations that simulate real-world attackers across applications, cloud, and enterprise environments, and chain weaknesses together to reach defined goals. • Design and carry out end-to-end attack campaigns with the Red Team Director, including bypassing security controls and abusing identity, access, and trust relationships. • Work with Detection and Response, Incident Response, and Engineering teams to test alerts and response workflows, and explain attack paths and root causes in clear, practical terms. • Improve red team tools, automation, and techniques with the AI-Automation team, and mentor junior engineers. You're Our Person If... • You have 4+ years of experience in offensive security, red teaming, or advanced penetration testing in production-like environments. • You understand attacker methods, identity and access abuse, and attack chains across applications, infrastructure, cloud, and hybrid environments. • You write custom scripts, tools, or payloads, and you are skilled at manual exploitation. • You communicate clearly about how an attack worked, why defenses failed, and which fixes reduce risk most. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have run continuous or programmatic red team operations, or have a background in adversary emulation or purple team work. • You have experience with malware analysis or exploit development. • You have published vulnerability research, responsible disclosures, blogs, or talks. • You know cloud-native architectures and identity-centric security models. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.