Security Researcher jobs in Israel

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 6 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Mid-Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 4 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Senior Security Researcher to join our Identity Threat Detection and Response team. In this role, you will research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities. You will focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale. Additionally, you will collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats. Key Responsibilities • Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments. • Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior. • Develop and refine statistics-based classification algorithms and techniques to create and improve detection models. • Research specific scenarios to enhance our model's capabilities. • Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product. • Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats. Qualifications Required Qualifications • At least 5 years’ experience with Active Directory security and identity related attacks. • In-depth knowledge of the inner-workings of operating systems. • In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc. • In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc. • Ability to drive and own projects from start to finish. • Independent and a team player, a critical thinker. Preferred Qualifications • 2+ years of experience with Entra ID (formerly Azure AD) or SAAS application. • At least 2 years of experience coding in Python. • Strong knowledge of SQL language. • Experience with red-teaming / pentesting of Entra ID. • Experience with machine learning, data analysis, cloud infrastructure, or security. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you. This is an opportunity to join an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their cloud environments. Key Responsibilities • Contribute to a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud infrastructure. • Drive the execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments. • Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms. • Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts. • Simulate real-world attacks and perform deep behavioral analysis to inform and validate detection content. • Collaborate across engineering, product management, and go-to-market teams to deliver impactful security solutions. • Share insights with the security community through blogs, conference talks, and publications. Qualifications Required Qualifications • 5+ years in security research with a proven track record of driving impactful projects. • Deep expertise in cloud-native security, with strong focus on AWS, Azure, and GCP. • Experience developing or working with detection and response products, such as XDR, EDR, or cloud workload protection platforms. • Excellent communication skills, with the ability to articulate complex research findings and drive alignment across diverse teams. • Proficient in hands-on coding and scripting (e.g., Python). • Direct experience conducting penetration testing and red team assessments against cloud infrastructure (AWS, Azure, or GCP) Preferred Qualifications • Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow). • Familiarity with cloud threat modeling frameworks (e.g., MITRE ATT&CK for IaaS). Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Description Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds What You'll Do • Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights • Map risk vectors, build threat models, and translate them into actionable posture recommendations • Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis • Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention • Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements • 5+ years in security research, cloud security, or DevSecOps • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows. • Ability to own research initiatives end-to-end in a fast-moving environment • Excellent written and spoken English Advantages • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines • Experience with DSPM, data classification, or data security tooling • Background in supply chain security (SBOM, dependency and artifact security) • Open-source contributions, published research, or conference talks

Job Description The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research. About the group: The Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale. About the position: Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments. You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers. This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity. What you'll do: • Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure • Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis • Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on • Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails • Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on • Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays • Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage • Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks Qualifications • 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research • Real exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact • Comfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point • Strong scripting and automation skills (Python preferred) • Clear written communication. You can explain a complex attack chain to an engineer and to a CISO Strong advantage • A consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it • Broad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side • Experience with template-based or automated scanning frameworks (for example, Nuclei) • Detection engineering experience (Snort/Suricata, YARA, SIEM detection logic) • Experience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work Nice to have • Offensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research Additional Information Why join us • Impact at scale. A technique you capture once runs across thousands of customer environments • A new category. Agentic exposure validation is being defined right now, and you help define it • A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world

Job Description We are looking for an exceptional researcher at the intersection of artificial intelligence and cybersecurity. This role is intended for someone who combines deep security expertise with a practical understanding of modern AI systems and the curiosity to explore how they can be attacked, abused, and defended. Key Responsibilities • Research vulnerabilities, attack techniques, and emerging security risks in AI models, agents, applications, and supporting infrastructure. • Develop innovative attacks, proofs of concept, evaluation methods, and defensive solutions. • Analyze how model behavior changes across problem domains, task structures, prompts, tools, resources, harnesses, and model architectures. • Translate research findings into clear security requirements, technical concepts, publications, and practical protections. • Present original research at leading international cybersecurity conferences. • Maintain a strong understanding of developments across the AI and cybersecurity landscapes. • Collaborate with security researchers, AI engineers, product teams, and other stakeholders to turn research into measurable impact. Qualifications • Strong cybersecurity background in reverse engineering, vulnerability research, cryptanalysis, malware research, or a similar advanced discipline. • Passion for AI and up-to-date knowledge of leading models, technologies, organizations, and emerging capabilities. • Solid understanding of modern AI concepts, including transformers, attention, RoPE, gradient descent, fine-tuning, RLHF, RLVR, inference, and agentic systems. • Ability to independently identify valuable research questions, design experiments, build proofs of concept, and validate findings. • Strong programming and rapid-prototyping skills. • Excellent writing, communication, and presentation skills, including the ability to clearly define requirements and introduce new technical concepts. • Ability and motivation to present original research at top-tier international cybersecurity conferences. Advantages • Experience researching AI security, LLM vulnerabilities, prompt injection, model behavior, AI agents, or adversarial machine learning. • Experience developing or evaluating AI-powered security systems. • A record of security publications, vulnerability disclosures, or presentations at leading security conferences. • Experience transforming research findings into production-grade security capabilities. • Familiarity with AI evaluation frameworks, inference infrastructure, model internals, and agent orchestration.

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: Cellebrite is seeking talented researchers to join our industry-leading Digital Intelligence Security Research Labs. As a security researcher on our team, you will focus on identifying vulnerabilities within Apple’s ecosystem and developing innovative exploit strategies to gain access to iPhones and other devices, enabling the extraction of crucial evidence for law enforcements. Key responsibilities: • Research on territories with little-explored vulnerability • Work on the production of world-unique capabilities to extract evidence from phones and other embedded devices. • iPhones and other iOS devices present tough challenges from a forensics perspective and involve hardware-backed encryption (SiDP), secure crypto coprocessor (SEP), and secured boot chain (SecureROM). • New iPhones present state-of-the-art exploit mitigations such as PAC, KTRR, and PPL. • Become a member of Labs Group, focusing on Security Research for mobile devices. • Execute your own (shell) code on top-notch technology mobile platforms hardened with challenging mitigations • Collaborate with a team of passionate researchers dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. • Take part in world-class research results, assisting law enforcement by enabling lawful evidence extraction, and putting criminals behind bars every day. Requirements • Proven vulnerability research experience (preferably in iOS) • Experience with advanced exploitation techniques • ARM reverse engineering • Cryptographic primitives and weaknesses • Hardware research/board design - Advantage • You are a security researcher who cares about the ethical values of your work • You love the art of engineering and crafting a platform-wide native payload, in a fragmented ecosystem of gaping variance • You are passionate about technology and keen to use your skills to make the world a safer place. NOTE: The position is located in our offices in Tel Aviv #LI-AS1

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: The Android research group in Cellebrite Security Research Labs (SRL) is where the most challenging problems get solved. We're the ones who find the weaknesses that let us unlock modern phones and turn them into extraction capabilities investigators can actually use in the field. Our work ships straight into Cellebrite's core products, which makes this one of the most important roles in the company. Our customers are law enforcement agencies working real cases under legal authority: child exploitation, human trafficking, homicide, terrorism. A device we unlock is often THE piece of evidence that moves an investigation forward. What you'll do Perform vulnerability research on a huge variety of mobile technologies and architectures, from the application layer down through the kernel, TrustZone, the bootloader, and the firmware running underneath it. Go first into areas nobody has published and become a world-class expert in them. Reverse engineer code that was never meant to be read: no source, no symbols, no documentation. Turn bugs into exploits that hold up in the real world, across a wide range of chipsets, vendors, and OS versions. Conduct long term widely scoped security research projects as part of a broader team effort Requirements Qualifications Practical experience performing vulnerability research and exploitation Practical reverse engineering experience Practical knowledge of current and upcoming security mitigations Advantage: knowledge of Android architecture and internals Advantage: LLM-based pipelines for vulnerability research / exploit development / fuzzing Advantage: Cryptographic primitives and weaknesses Advantage: ARM Reversing Advantage: Advanced fuzzing Advantage: Offensive hardware research/board design #LI-AS1