Security Researcher jobs in Israel

We're looking for an experienced Security Researcher to join our core team and deep dive into CVEs, conducting cutting-edge vulnerability research that directly powers Echo's revolutionary approach to eliminating container vulnerabilities at the source. Responsibilities: • Conduct deep-dive research into CVEs and vulnerabilities, analyzing root causes and attack vectors to inform our AI-powered prevention platform • Perform reverse engineering analysis using tools like IDA Pro, Ghidra, or similar platforms to understand complex security vulnerabilities and exploitation techniques • Research and analyze complex low-level system mechanisms including kernel vulnerabilities, network security issues, and operating system weaknesses • Think outside the box, challenge existing assumptions, and create innovative approaches to vulnerability research and prevention • Work in a unique environment where your research insights are rapidly implemented into our product, creating direct real-world impact from your vulnerability research • Contribute to Echo's technical knowledge base and help establish new methodologies for proactive vulnerability identification and mitigation Requirements: • 5+ years of experience in security research with focus on vulnerability analysis and exploitation • Extensive hands-on experience with reverse engineering tools (IDA, Ghidra, Jeb, or similar) • Proven experience working with CVEs, and the broader security research domain • Deep knowledge of complex low-level system mechanisms (kernel, networking, services, operating systems, embedded systems) • Excellent written and verbal communication skills with ability to present complex technical findings • Innovative mindset with ability to think outside the box and challenge conventional approaches

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Research is where deep security expertise becomes product. We translate how identity is weaponized and becomes an attack path - across human, machine, and AI agent identities - into the risk models and security content that exposes real identity risk inside customer environments. Research here doesn't end in a slide deck, it ships. As a Security Researcher, you'll own and evolve the core of the Oak platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it. Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it — defining how Oak discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk. You'll also shape Oak's voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves. What you will Do: • Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers. • Translate deep expertise in identity and security into the analytical engine that drives how Oak reasons about risk, governance, and access decisions across organizations. • Create and own Oak knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform. • Pioneer Oak's approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world • Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers. What you will bring: • 5+ years of hands-on security research experience, with a track record that demonstrates depth across identity, access control, or adjacent threat domains. • Low ego, high impact - you share findings freely, measure success by the team's impact and you are value-driven, Willing to roll up your sleeves for the foundational work creating knowledge and insights in order to provide real value to real customers. • Innovative and forward thinking - Continuous desire to learn, explore and create. • The instinct to find what others miss: you approach identity attack surfaces, NHI exposure, and AI agent behavior with genuine curiosity and a willingness to go where the research leads. • A collaborative default - happy to share and work alongside product, engineering, and go-to-market teams in order to translate raw research into intelligence that sharpens Oak's platform and customers' understanding of their identity risk. Nice to have: • A history of original, published work - conference presentations (Black Hat, DEFCON, or equivalent), blog series, or white papers that has moved the needle and made impact.

We're reimagining enterprise Identity and Access Management from the ground up. Founded by serial entrepreneurs Shai Morag and Tal Marom and backed by a $60M seed round from Greylock, Accel, and CRV, we're building the next generation of identity security. Identity is the gateway to everything- who's let in, who's kept out, and it's now the number one attack vector in the enterprise. The tools built to govern it were designed for a slower world of human users and static environments. That world is gone. Identities are exploding across human, machine, and AI agents faster than legacy systems can track, and security teams are left patching together five disconnected tools that still can't answer "who has access to what, right now." We think the answer isn't another point solution- it's a new foundation. Oak is the AI-native Identity Operating System: an AI connector framework that reaches any application, a live identity graph built from raw evidence, and a team of AI agents that governs the full lifecycle of every identity in one platform. We're building Oak's AI-native core from day one-engineered for what enterprise identity is becoming, not patched onto what it used to be. And we're just getting started. About the Role: Oak's Vulnerability Research is the sharpest edge of our technical work - the team that takes systems apart to learn how they truly work, and where they break. We go deep into the mechanisms, protocols, and architectures that modern technology is built on, and we pressure-test the assumptions the rest of the industry takes for granted. Sometimes that work sharpens the platform, sometimes it stands entirely on its own, as an original research novelty. As a Vulnerability Researcher, you'll build first-principles understanding of the technologies and systems you investigate, then go looking for what's wrong with them: the flawed assumptions baked into established paradigms, the gap between how a system is meant to behave and how it actually behaves, and the novel vulnerabilities and exploitation techniques no one has named yet. This is hands-on, deep technical work - reverse-engineering, breaking, and finding what's exploitable before an attacker does. You'll have the room to follow the research where it leads, and the backing of an ecosystem created to set you up for success by providing every tool and access that could help. Some threads will feed directly into how Oak understands what's genuinely exploitable, grounding the platform in real attacker reality rather than theoretical risk. Others will be pure discovery, pursued because the problem is hard and the finding truly matters, and published to move the field forward. Either way, your work establishes Oak's authority in the field. Through original research, disclosures, and technical thought leadership, you'll build a body of work that earns the respect of the security community and sharpens how the industry thinks about what's truly secure. What you will Do: • Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names. • Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended. • Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do. • Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook. • Ground Oak's understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in. • Promote Oak's standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits. What you will bring: • 6+ years of hands-on vulnerability research, reverse engineering, or offensive security, with a proven track record of finding non-trivial flaws and the depth in systems, protocols, and architectures to understand precisely why they exist. • A first-principles approach to how things actually work, not how they're documented to work: you pull the thread until you hit ground truth, and you're not satisfied until you do. • The instinct and ability to see what others overlook - the unquestioned assumptions in established systems, the edges no one has tested, the failure modes that live in the gap between spec and implementation. • End-to-end ownership of research: you drive hypotheses to conclusions through dead ends, changes of directions and reach hard proofs • Strong hands-on expertise, converting theories and research into a working chain and proof of concept. • Result driven depth: you go as far as a problem deserves, because the result is worth it, and you know when it is. • A track record of original significant discoveries - published CVEs, novel vulnerability classes or exploitation techniques, research that named a problem the field didn't have words for yet. Nice to have: • History of presenting original research at Black Hat, DEFCON, OffensiveCon, Hexacon or a comparable security conference. • Significant CVEs (CVSS High or Critical) under your name.

Overview Join the elite Microsoft Defender Research team, where we turn deep security research into autonomous protection that detects, investigates, and disrupts sophisticated attacks in near real-time across endpoints, identities, cloud applications, and cloud infrastructure. Leveraging Microsoft’s global reach and one of the world’s largest security telemetry sets, you will have a direct, tangible impact on protecting organizations and the global economy. This is an opportunity for researchers who are passionate about transforming security operations and shaping how defenders investigate and stop attacks at scale. We are looking for a Principal Security Researcher to lead research for key agents within Project Perception, part of Microsoft’s broader agentic security evolution. You will lead research for this area end to end, from framing high-impact investigation problems and bringing domain expertise into agents design and evaluation, to partnering with data science, engineering, product, and other teams to move these capabilities into production and customer-facing experiences. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Lead security research for agents within Project Perception, from defining high-impact problems and research methodology through agent design, rigorous evaluation, production readiness, and customer-facing experiences. • Set the research strategy and align partner teams across the organization. Translate research priorities into clear requirements and experiments, use evidence to influence roadmap decisions, and communicate strategy, findings, and recommendations to senior stakeholders. • Drive research outcomes into production and customer-facing experiences. Partner with engineering, data science, and product teams to define success criteria, validate quality and safety, establish production readiness, measure customer impact, and iterate based on real-world performance. • Analyze large-scale data and conduct investigations to improve the quality and effectiveness of Project Perception agents, building on and contributing to Microsoft Defender’s protection knowledge layer. • Apply and champion AI in security research, using current models, agentic architectures, coding agents, and tooling to accelerate triage, investigation, and detection and increase researcher productivity. Validate AI outputs and develop reusable workflows. • Mentor and grow researchers, elevating the team’s technical bar. Qualifications • You have at least 10+ years of experience in security research or a closely related cybersecurity research role. • Strong, evidence-backed adoption of AI in technical work. Regularly use and develop AI skills, coding agents, agentic tools, or AI-assisted workflows, while evaluating and validating outputs. • Deep expertise in security research and modern attacker tradecraft, with the ability to conduct complex investigations and translate security knowledge into reliable agent and protection outcomes. • Experience leading technical work from research and design through production delivery, partnering with engineering and product teams, and influencing roadmaps and senior stakeholders across organizational boundaries. • Proficiency in programming, such as Python or C#, and large-scale query languages, such as KQL or SQL, with experience analyzing security data and developing or validating research and protection capabilities. • Demonstrated technical leadership through mentoring researchers, raising the quality bar, and communicating complex findings clearly. Preferred Qualifications • Bachelor’s, master’s, or doctoral degree in Computer Science, Computer Security, Software Engineering, or a related field; equivalent practical experience is also valued. Other Requirements • Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter. #MSFTSecurity This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Come build community, explore your passions and do your best work at Microsoft with thousands of University interns from every corner of the world. This opportunity will allow you to bring your aspirations, talent, potential—and excitement for the journey ahead. As a Security Research Intern, under supervision you will design and conduct security research including malware analysis, threat and vulnerability analysis, adversary tracking, threat intelligence, detection and remediation development and other technology application focuses related to the understanding of the threat landscape with intent to disrupt adversaries or provide protection via defensive products and services. You will help generate solutions including first party mitigation and working closely with customers and partners and support operational security and security incidents as well as security reviews and reporting. We are building a cutting-edge Cloud solution that gives customers visibility and control without impeding agility and helps them stay ahead of cyber threats as they evolve. You will join the group that is responsible for advanced threat detection capabilities, leveraging machine learning and behavioral profiling to detect emerging threats and advanced attacks by engineering a hyper-scale service to defend millions of hosts. At Microsoft, Interns work on real-world projects in collaboration with teams across the world, while having fun along the way. You’ll be empowered to build community, explore your passions and achieve your goals. This is your chance to bring your solutions and ideas to life while working on cutting-edge technology. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities • Begin to analyze threat trends and anomalies to determine operational impact. Determine vectors that introduce threat and potential mitigation strategies. Learn about systemic security issues and how to address them. • Process threat reporting from internal and external sources. Provide discrete threat data based on intelligence requirements or customer requests. • Identify security defects or vulnerabilities and deficiencies in security guidance. • Contribute code to technical implementation and automation of solutions to address security issues, such as signature detection, malware, threat analysis, or reverse engineering. Use results from research and experimentation to support architecture or product direction. • Identify areas of dependency and overlap with other teams or team members. Provide constructive input so the work is integrated and timely. Communicate the status of deliverables and dependencies to meet schedule. • Engage in measures to protect tools, techniques, information, and results of security practices. Respond to incidents for systems or products as needed. Use results of pen testing to improve products and services. **This student position is structured as a one-and-a-half-year role, concluding upon completion of the academic degree. Qualifications • Currently pursuing a Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field, with an expected graduation date of Summer 2028 or later. • 2+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world. The Microsoft Threat Intelligence Center (MSTIC) is recruiting experienced nation-state threat hunters – with highly honed threat intelligence analysis skills. MSTIC provides unique insight on threats to protect Microsoft and our customers and is responsible for delivering timely threat intelligence across our product and services teams. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As a Threat Intelligence Analyst in MSTIC, you will track and analyze sophisticated threat actors (including nation-state and advanced persistent threats) and translate intelligence into actionable outcomes that improve Microsoft security products, services, and defenses. You will combine deep technical expertise with analytic tradecraft to drive end-to-end investigations, detect adversary activity, and support detection, hunting, and disruption efforts across Microsoft’s ecosystem. The role includes close collaboration with internal teams and external partners, contributing to real-time response, customer engagements, and broader understanding of adversary ecosystems and campaigns.Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day. Responsibilities As a threat intelligence analyst, you will be responsible for tracking sophisticated adversaries and use your technical knowledge of adversary capabilities, infrastructure, and techniques. You will define, develop, and implement techniques to discover and track current adversaries and identify the attacks of tomorrow. You will produce actionable intelligence, proactively drive hunting and detection capabilities, and contribute to the disruption of adversary activity to protect Microsoft and its customers. In this role, you will collaborate closely with MSTIC and partner with security, engineering, and product teams across Microsoft to protect Microsoft assets, products, and customer environments. You will strengthen existing partnerships and build new ones with key organizations to enhance collective defense and improve product and service security • Qualifications You have at least 3+ years producing actionable threat intelligence on targeted and advanced persistent threats, with demonstrable impact on network and host defenses . You have proven expertise tracking and investigating APT adversaries, across all stages of the attach chain. You have strong ability to analyze and hunt adversary behavior end-to-end, map attack chains, and communicate clear, evidence-based intelligence to technical and executive audiences. You have the ability to quickly adapt to a rapidly evolving telemetry landscape. Preferred Qualification Experience operationalizing threat intelligence and hunting methodologies at scale, leveraging AI and automation, Python, or scalable analytical workflows Analysis of sophisticated malware and targeted attacks against enterprise or government environments, including identification of large-scale and supply chain attack patterns Cloud intrusion analysis in adversary operations Host forensic investigation and log analysis of advanced targeted adversaries Proven track record in producing actionable Threat Intelligence on APTs based on telemetry analysis. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview The Microsoft Specialized Clouds Vulnerability Research team (STORM) is seeking a Security Research Intern to help strengthen the security visibility of Microsoft’s next-generation cloud platforms. STORM is an offensive security research group focused on identifying vulnerabilities across cutting-edge cloud technologies. As part of our growing Blue Team research efforts, this role will contribute to improving the telemetry, logging, and audit capabilities needed to detect sophisticated attacks. Working alongside security researchers, architects, and engineering teams, you will review products during development, identify gaps in security visibility, and help ensure security monitoring capabilities are built in before products reach customers.This hands-on internship offers significant ownership, mentorship from senior researchers, and exposure to technologies that are not yet publicly available. You will analyze product architectures and threat models, assess and improve security telemetry, validate detection coverage for real-world vulnerabilities, develop automation and hunting capabilities, and collaborate closely with engineering teams to integrate security visibility throughout the product lifecycle. Along the way, you will gain practical experience in cloud security research, detection engineering, threat hunting, telemetry design, distributed systems, Kubernetes security, platform security, and AI-assisted security workflows, while directly contributing to the security of Microsoft’s Sovereign Cloud and Adaptive Cloud platforms. Responsibilities • Investigate real-world nation state attacks to support the development of high-fidelity protection logic across complex cross-domain kill-chains. • Apply security expertise to analyze massive telemetry sets using big-data query languages (KQL), reasoning over data to identify novel malicious patterns and engineer evidence-based detection rules. • Contribute to the implementation and coding of automated capabilities that autonomously investigate nation state threats, using AI assisted tooling and agentic flows. • Assist in the refinement of protection coverage by analyzing real-world attack telemetry to improve the accuracy and performance of existing detection logics. • Contribute to a strategic feedback loop by documenting findings from attack data analysis to improve overall protection logic and system-wide security posture. • Partner with engineering and product teams to translate research insights into production-ready code, helping to validate protection concepts and ship them at a global scale. Qualifications Qualifications Required • Currently pursuing a B.Sc., M.Sc., or Ph.D. in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, with at least one year remaining before graduation. • Solid understanding of computer science fundamentals, including operating systems, networking, software engineering, and distributed systems concepts. • Experience developing software or automation in one or more modern programming languages (e.g., Python, C#, Go, Java, or C/C++). • Strong analytical and problem-solving skills, with the ability to investigate complex technical systems and identify root causes. • Self-motivated learner who can work independently while collaborating effectively with researchers, security engineers, and product teams. Preferred • Interest in cloud security, threat hunting, detection engineering, incident response, or Blue Team security research. • Experience analyzing large datasets, logs, telemetry, or security events to identify anomalies and security-relevant patterns. • Familiarity with cloud platforms, Kubernetes, containers, or modern distributed systems architectures. • Understanding of operating system and networking fundamentals, including Windows or Linux internals, authentication, protocols, and security controls. • Experience building automation, security tooling, or using AI-assisted workflows to improve investigations, analysis, or security operations. • Demonstrated passion for security through personal research projects, Capture-the-Flag (CTF) competitions, vulnerability research, open-source contributions, or related activities. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Overview Join one of the elite research teams powering Microsoft Defender, the dominant market leader in XDR, SIEM, Cloud, and AI Security. We protect the world’s largest enterprises by analyzing trillions of signals to protect against sophisticated cyberattacks across hybrid and multi-cloud environments. We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI. We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsoft’s dominant market position and the world’s most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time. Our team values diversity and strives to hire individuals with varied experiences and perspectives. We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team. Responsibilities • Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains. • Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time. • Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions. • Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale. • Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy. Qualifications • 4+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios. • Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms. • Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments. • Programming proficiency (e.g., Python, C#, or similar), with a proven ability to develop and ship production-ready protection logic.Demonstrated ability to work effectively in cross-functional teams, bridging the gap between deep research and scalable engineering. Preferred Qualifications • B.Sc. or M.Sc. in Computer Science or Software Engineering OR/AND related field • Public track record of security research, such as technical blog posts, whitepapers, or presentations at major industry conferences. • Experience in offensive security or adversary simulation. • Deep understanding of AI-driven threats. • Proven ability to reason over large-scale datasets using big-data query languages, applying security expertise to identify novel patterns and make evidence-based decisions. • Familiarity with cloud environments (e.g., Azure, AWS) and the specific security challenges inherent to hybrid and multi-cloud infrastructures in large enterprise customers. By applying to this position, you are being considered for multiple like positions within our organization for an invitation-only virtual Interview Day. Position specifics, including hiring team, location, and position details will be determined following the interview process. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description We are 48% of breaches now come through vendors. Yet most companies still manage vendor risk through certifications and questionnaires, essentially trusting what vendors say about their security. Lema changes that. We analyze every vendor like a vulnerability researcher would: how could an attacker use this vendor to get in, and what could they reach? We’re turning vendor risk from a paperwork exercise into a true security discipline. Backed by Team8, Salesforce Ventures, and F2, and already trusted by leading enterprises, Lema is entering hypergrowth and tripling our team to build a category-defining platform. We move fast, with radical ownership, transparency, and high impact. More about Lema: • Lema.ai website • Business Insider - Cybersecurity startup Lema has come out of stealth to raise $24 million • Team8 - Why We Invested In Lema About the Role We're looking for a security researcher with 5+ years of experience to discover new ways vendors put their customers at risk. You'll own research end to end, from the first hypothesis to a shipped capability, and help decide where Lema looks next. What You'll Do • Discover new ways attackers can use vendors to get in, and prove or kill each idea with real data. • Decide which security tools and data sources we should integrate next, and why. • Shape the logic and knowledge behind our AI risk agents. • Build your own tools when the one you need doesn't exist. • Partner with engineering to turn validated research into product. • Work alongside the best security researchers in the industry. Requirements What You Bring • 4+ years of hands-on experience in security research, threat intelligence, or offensive security. • Original research to show: vulnerabilities, techniques, tools, or findings. • A strong grasp of core security domains, including identity, cloud, SaaS, endpoint, and network, and how they connect. • Rigor. You prove a finding before you claim it, and you read AI output adversarially. • Independence. You take a fuzzy question and turn it into a result without needing each step defined. • A track record of research that became a product, a detection, or a published finding. Why Join Lema AI • Impact: Build a category-defining platform that safeguards how modern businesses operate. • Ownership: Join a culture that gives you full context, autonomy, and trust to drive outcomes. • Compensation & Benefits: Competitive salary, equity package, and additional perks • Velocity: Work with exceptional peers in a high-energy, low-bureaucracy environment. • Growth: Shape a company that’s scaling rapidly, backed by Tier 1 investors and visionary customers.

Description Paragon is on a mission to transform the world of cyber intelligence. Based in Tel Aviv, our innovative team is made up of top-tier talent who are passionate about making an impact. At Paragon, you’ll find the freedom to think boldly, collaborate with purpose, and grow alongside a team united by a shared mission — striving for excellence, and always looking out for one another. We are looking for highly motivated candidates to join our exceptionally talented and passionate research group that constantly challenges the boundaries of what’s possible. In this role you will have the opportunity to take part in world-class vulnerability research, solve incredibly complex and satisfying technological challenges, learn all the time from the best researchers in the industry, and join us on our journey to engineer a safer future! We look for candidates who are: • Passionate: care deeply about the technology challenges, strive for excellence, determined to make a meaningful impact • Curious: learn rapidly and eagerly; ask “why?” and “what if?” a lot • Innovative: think outside the box, challenge the prevailing assumptions, create new ideas • Collaborative: understand that truly great achievements come from great teamwork, enjoy collaborating with others and eager to share the journey with us • Hands-on: able to hack and dissect new technology, rapidly implement and verify ideas and translate them to working code Requirements Experience in one or more of the following areas: • Vulnerability research • Advanced exploitation techniques • Deep knowledge of complex low-level system mechanisms (kernel, networking, services, operating systems, embedded etc.)

Description Paragon is on a mission to transform the world of cyber intelligence. Based in Tel Aviv, our innovative team is made up of top-tier talent who are passionate about making an impact. At Paragon, you’ll find the freedom to think boldly, collaborate with purpose, and grow alongside a team united by a shared mission - striving for excellence, and always looking out for one another. We are a young innovative company with a cutting-edge product based in Tel Aviv. We are looking for an experienced Security Researcher to join us in building a new research team that will help detect and overcome product security challenges. As part of the role, you will make a deep dive into the mobile security world. You will have the opportunity to research the latest security mitigations, solve incredibly complex and satisfying technological challenges and learn all the time from the best researchers. Responsibilities • Lead and mentor a team of low-level researchers, providing technical guidance, knowledge sharing, and professional development. • Drive complex reverse engineering efforts across a variety of operating systems and technologies. • Define research priorities, identify new investigation areas, and help shape the team's technical roadmap. • Design and execute deep technical investigations to uncover security mechanisms, operating system internals, and adversary techniques. • Collaborate closely with cross-functional teams, translating research findings into actionable insights and long-term strategic value. • Serve as a technical focal point for challenging research problems, helping the team overcome obstacles and reach effective solutions. • Promote research excellence, high technical standards, and a culture of curiosity, innovation, and continuous learning. • Stay up to date with emerging technologies, operating systems, and security trends to maintain the team's technical edge. Requirements • 6+ years of experience as a Low-Level Researcher, Security Researcher, Reverse Engineer, or similar role. • 2+ years of experience leading projects, mentoring engineers, or managing a technical team. • Proven experience in reverse engineering using IDA Pro, Ghidra, or similar tools. • Deep understanding of Unix-like operating system internals. • Deep understanding of operating system mechanisms and their interaction with security technologies and research domains. • Strong analytical and problem-solving skills, with the ability to tackle complex technical challenges. • Demonstrated ability to learn independently and quickly adapt to new technologies and domains. • Excellent communication skills and the ability to lead technical discussions across teams. Advantages • Experience with ARM assembly language. • Experience with debugging and instrumentation tools such as Frida and GDB. • Strong programming skills in languages such as C, C++, Rust, or Python. • Experience leading research initiatives or building research methodologies.

Description Paragon is on a mission to transform the world of cyber intelligence. Based in Tel Aviv, our innovative team is made up of top-tier talent who are passionate about making an impact. At Paragon, you’ll find the freedom to think boldly, collaborate with purpose, and grow alongside a team united by a shared mission - striving for excellence, and always looking out for one another. We are a young innovative company with a cutting-edge product based in Tel Aviv. We are looking for an experienced Security Researcher to join us in building a new research team that will help detect and overcome product security challenges. As part of the role, you will make a deep dive into the mobile security world. You will have the opportunity to research the latest security mitigations, solve incredibly complex and satisfying technological challenges and learn all the time from the best researchers. Requirements • 4+ years of experience as a low level researcher • Proven experience in reverse engineering, using IDA or Ghidra • Deep knowledge of Unix-like OS Internals • Willingness to tackle difficult tasks • Ability to learn quickly and independently • Familiarity with Android/ iOS Internals - An advantage • Experience in ARM assembly language - An advantage • Familiarity with debugging tools like frida/gdb - An advantage • Programming experience - An advantage

About Irregular Irregular is the first frontier security lab with the mission of protecting the world in the time of increasingly capable and sophisticated AI systems. We build next-generation defenses through high-fidelity research platforms that simulate and monitor real-world AI security scenarios. As AI systems become more powerful, we focus on staying ahead of emerging threats and vulnerabilities, ensuring these transformative technologies can be deployed safely and securely. About the Role As a cyber researcher at Irregular, you will be at the forefront of research on AI security. You will engage with questions such as how to protect the weights of an advanced model against cyber threats, and how to evaluate cyber capabilities such as AI’s ability to exploit vulnerabilities, carry out network attacks, and develop malware. This role sits at a unique intersection of cybersecurity expertise and AI capabilities, where your background in vulnerability and security research will help shape the future of AI security. Representative projects: • Expanding the quantity, quality, and variety of our cyber capabilities evaluation challenges (e.g. constructing original CTF-style vulnerability & exploitation challenges, network attack simulation challenges, and more, including original types of challenges). • Leading research into methods to mitigate cybersecurity risks related to the misuse of AI, the theft of model weights, or risks associated with integrating models with dangerous capabilities in AI agents. • Publishing your research and/or delivering research to our customers. • Advising and supporting the development of the products we’re building. Representative research questions about AI frontier models: • Can an AI find and exploit 0-days? • What’s the best way to measure a CTF challenge's difficulty level vs. an AI player's skill level? • Can an AI elevate an average computer science student’s cyber capabilities to that of a nation-state? You may be a good fit if you: • Have a strong background in vulnerability/security research & development such as having found vulnerabilities/CVEs, analyzed malware, researched detection methods for attacks, developed pentesting products or other attack tools, participated in CTF competitions or authored CTF challenges, or participated in other types of security research & development. • Work well in a multidisciplinary team and can adapt to rapidly evolving challenges. • Care about the societal impacts of your work.

About Hypernative: Hypernative is The leading SaaS security company focused on delivering real-time risk mitigation and security solutions to Web3 and blockchain ecosystems. Our platform provides cutting-edge capabilities to secure digital assets and ensure seamless, reliable operations for businesses operating in decentralized environments. If you are passionate about blockchain and cybersecurity, and are looking for a challenging and rewarding opportunity to work with a dynamic and innovative team, we encourage you to apply. Responsibilities: • Take charge of developing and maintaining our hack and exploit detection engine, analyzing alerts for false positives (FPs) and true positives (TPs), and proposing innovative ideas to enhance detection accuracy. • Conduct in-depth research and analysis of new threats and vulnerabilities in the blockchain space. • Develop tools and systems to detect and mitigate security risks in real-time. • Identify and analyze Web3 security vulnerabilities. As the owner of significant segments of our technical development, you will define and shape our Web3 security products, ensuring they meet the highest standards of security and efficiency. • Continuously update and maintain security practices and documentation. Requirements: • Proven multi-year Experience of System building with Python, OOP and SOLID principles • Experience with git, CI/CD methodologies and other team collaboration tools • Excellent analytical and problem-solving skills. • Strong communication skills and the ability to work collaboratively in an ultra-fast-paced environment. Advantages: • Good understanding of the Ethereum Virtual Machine, experience with smart contract development and familiarity with common smart contract vulnerabilities - a very strong advantage. • Strong background in "classic" cybersecurity. • experience with Cloud development with emphasis on AWS infrastructure. • In-depth understanding of Web3 technologies, decentralized systems, and blockchain security concepts. • Familiarity with advanced concepts in Trading/Finance - a strong advantage. • B.Sc in Computer Science or equivalent. Why Hypernative? By joining Hypernative, you'll have the unique opportunity to shape the future of blockchain security, working with a talented, passionate team. You'll play a pivotal role in building next-generation detection systems that will secure some of the most critical infrastructures in the world of Web3. If you’re ready to lead, create, and innovate in a fast-moving company, we’d love to hear from you!

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

Description About Tenzai Tenzai is building autonomous AI hackers that think like the world's best offensive security experts, act like them, and then help fix what they find before the real ones do. If this mission speaks to you, come defend the world's software: autonomously, continuously, and in-depth. About the role This is a rare opportunity to work at the intersection of vulnerability research and AI. You will perform vulnerability and general cybersecurity research, experimenting and pushing the boundaries of what AI can and cannot reliably do in this space.You'll be working with other researchers on individual and group projects around research and prototyping AI agents, building evaluations and finding bugs. Responsibilites • Vulnerability research on public and private targets, building harnesses to automate work, and writing up the results • Building evaluations and challenge benchmarks to find boundaries of what specific AI agents and models can and cannot do • Analyze where Tenzai’s AI agent needs to improve, investigate cases where the AI missed, misclassified, or hallucinated vulnerabilities • Develop new attack strategies and offensive testing techniques for web and network targets, and translate real-world knowledge into prototypes of new AI agents Requirements • Deep expertise in Web security, particularly authentication, business logic, and injection flaws OR deep expertise in network security • 3+ years of experience In vulnerability research or any security research in these fields • Ability to articulate complex vulnerabilities clearly, both in writing and verbally • Experience in writing code to develop tooling • Strong preference for someone with background in static or dynamic analysis, protocol design or other adjacent fields • Comfortable working in a fast-paced startup environment with a high degree of ownership Why Tenzai • Working on problems that matter - Software is now written and deployed faster than it can be secured. Attackers are beginning to use AI to find vulnerabilities at scale. Tenzai exists to close that gap. It's a mission that requires elite hackers, and also sharp storytellers, wicked-smart operators, and experienced market builders. • Building a category in the making - Tenzai is defining a new category in cybersecurity. That means every team — from research and engineering to product, brand, and go-to-market — has a chance to shape how the industry understands and adopts autonomous security. If you thrive building something from zero and helping a new idea take hold in the world, keep reading. • Talent density - We believe small teams of exceptional people outperform large organizations. Tenzai was founded by veteran security experts and repeat entrepreneurs. We hire deliberately and value curiosity, initiative, and craftsmanship, whatever your discipline. • Creating real impact, quickly - Whether you're building systems, shaping product experiences, telling the story, or helping customers succeed, your work will immediately influence how organizations secure their software. We move quickly, keep teams lean, and give humans ownership. • Ambition with humility - We're tackling hard problems with a team that values deep expertise and thoughtful collaboration. Everyone here is learning, experimenting, and pushing the boundaries of what's possible. Plus, we love eating lunch together.

Description Join Noma Security and help shape the future of AI security in a fast-paced, high-impact environment. Noma is building the first comprehensive AI Security and Governance Platform, helping organizations adopt AI and LLMs with confidence and control. As AI becomes core to modern enterprises, we provide seamless visibility and protection across the entire AI lifecycle. Our team works at the intersection of AI, security, and cloud, shaping a new category in a rapidly evolving market. At Noma, you’ll have the opportunity to make a meaningful impact while working with exceptional people on technology that truly matters. We’re looking for a Security Vulnerability Researcher to be a core driver in how our product empowers security teams. You will be expected to deeply understand customer needs and translate them directly into product features that deliver real value. You'll own key parts of our frontend stack, drive key architectural decisions, and turn complex security data into clear, actionable business insights. This is a hands-on role for a seasoned offensive researcher who thrives on technical depth and creativity. You’ll collaborate closely with product, marketing, and engineering teams to deliver research that drives customer trust, informs product direction, and shapes industry thought leadership. 🛠️ What You’ll Do • Perform AI-Focused Vulnerability Research: Investigate security risks in AI models, APIs, and infrastructure to uncover exploitable weaknesses and publish insights that strengthen our market leadership. • Lead Red Teaming Against AI Systems: Simulate adversarial attacks on AI pipelines and APIs, creating impactful PoCs that showcase real-world risk and defensive strategies. • Build Customer-Facing Proof-of-Concepts: Partner with product and engineering teams to design and deliver PoCs that align with customer use cases and highlight Noma’s security capabilities. ✅ What You Bring • 5+ years in Security Research or Offensive Engineering with a proven track record in penetration testing or vulnerability discovery on complex targets. • Deep expertise in Application & AI Security, including experience exploiting APIs, web applications, and AI/ML vulnerabilities such as prompt injection, adversarial manipulation, or model abuse. • Offensive Security & Red Teaming Experience, with practical use of tools, custom exploits, or adversarial testing methods. • Proficiency in developing and presenting PoCs that clearly demonstrate security risks to both technical and non-technical audiences. • Recognized achievements in Bug Bounty or Military-Grade Security Research, or equivalent real-world offensive security experience. • Solid software engineering background, with the ability to read, write, and debug code (Python, JavaScript, Go, etc.). 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Description Security Researcher Noma Security is redefining how organizations Safely adopt AI into their organization . As a key member of our research team, you’ll help us stay ahead of rapidly evolving threats by uncovering vulnerabilities, analyzing adversarial techniques, and producing groundbreaking insights that directly influence our product, marketing, and customer strategy. You’ll work alongside world-class engineers and security experts to conduct deep technical research, simulate real-world attacks, and create impactful proof-of-concepts (PoCs) that showcase how to protect AI-driven systems. This role is ideal for a hands-on security researcher who thrives on curiosity, creativity, and rigor, someone who wants to shape the future of AI security in a fast-moving product startup. What You’ll Do: • Drive AI Security Research: Investigate vulnerabilities in AI models, agentic platforms, and infrastructure- covering risks like prompt injection, adversarial manipulation, and model abuse. • Build Proof-of-Concepts: Develop technical PoCs that demonstrate real-world security threats and defenses, supporting both product validation and thought leadership. • Research new Prompt injection techniques: Implement novel techniques of adversarial attacks on AI systems in our automated red team module to evaluate resilience and inform customer-focused security offerings. • Track Competitors & Trends: Research the broader ecosystem of AI and cybersecurity to identify competitor capabilities, market shifts, and innovation opportunities. • Collaborate Across Teams: Partner with engineering and product to translate research into practical protections, product features, and marketing content. Requirements for Success: • 5+ years in security research or offensive engineering, with a focus on high-value targets • Strong background in application and AI security (prompt injection, adversarial ML, agent security). • Experience in red teaming or offensive security, including AI/ML pipelines, APIs, and infrastructure. • Proven ability to design and communicate PoCs for both technical and non-technical audiences. • Familiarity with bug bounty programs or military-grade research is a strong plus. • Curious, detail-oriented mindset with the ability to balance multiple research initiatives. • Experience with research for marketing, including blogs, thought leadership, conferneces, published researches- advantage. 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Description About us Oligo is a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, we’re on a mission to make real-time security a reality. Oligo’s industry’s leading runtime security platform built to stop attacks in real time without stopping the business. We transform security from passive visibility to active protection across applications, cloud services, workloads, and AI systems. By uncovering the deepest layers of what actually runs in production, Oligo helps organizations prioritize exploitable vulnerabilities, detect malicious behavior as it happens, and stop modern attacks in their tracks. What You’ll Be Doing As a Security Researcher at Oligo, you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities. This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work. Specifically, you will: • Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems. • Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs. • Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection. • Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats. • Work closely with engineering and product teams to turn research into practical security capabilities. Requirements Qualifications • 5+ years of experience in security research, vulnerability research, detection engineering, threat detection engineer, or a related technical security role. • Strong understanding of modern application attack techniques, including the ability to analyze vulnerabilities and exploitation flows. • Deep expertise in Linux internals. • High degree of ownership and ability to independently navigate ambiguous technical problem spaces and turn them into structured research plans and actionable outcomes. • Experience designing and conducting hands-on technical research, including investigations, experiments, and PoC development. • Strong programming skills for code analysis, research tooling, and building proof-of-concepts and vulnerable test applications. • Strong communication and teamwork skills, with a collaborative approach to problem-solving across teams. • Data analysis skills and hands-on experience working with databases. We’ll be lucky if you have • Experience with cloud-native attack surfaces, such as Kubernetes. • Familiarity with eBPF, syscall tracing, or other low-level runtime observability techniques. • Knowledge of programming language internals, exploitation techniques, or low-level system behavior. • Experience with data science or statistical analysis in the context of security research. • Familiarity with AI security concepts and attack techniques targeting LLMs, agents, or AI-integrated applications.