Security Researcher jobs in Israel

Description Vega is one of the fastest-growing startups in cybersecurity, redefining security analytics and operations with an AI-native platform for the SOC. We are building the next-generation operating system for security teams. Vega is already delivering real impact at some of the world's largest organizations - improving detection, unlocking the value of their security data, and reducing cost and complexity. With HQs in New York and TLV, we're looking for people who want to be a part of the next rocket-ship in cyber. We're looking for a Security Researcher to join our team at the intersection of security research, AI, and product. This isn't a traditional research role - you'll be deeply embedded in how the platform is built, working side by side with R&D, Product, and AI teams to make sure security expertise is baked into every layer of what we ship. You'll own detection and analytics research across cloud, identity, endpoint, and beyond, while actively shaping how AI capabilities are applied to solve real security problems at scale. WHAT YOU WILL DO • Research and develop sophisticated detections and behavioral analytics across multiple security landscapes - cloud, identity, endpoint, network, and application - with a focus on coverage that scales across customer environments. • Work closely with R&D, Product, and AI teams as the security authority - reviewing features, shaping designs, and ensuring security logic is sound, practical, and impactful. • Apply an AI-native approach to detection and analytics challenges - leveraging LLMs, ML signals, and AI-assisted workflows to do things that rule-based approaches can't. • Identify gaps in detection coverage and analytical capabilities, and drive those findings directly into the product roadmap. • Analyze real-world attacker techniques and translate them into detection logic, hunting content, and analytical frameworks that ship as part of the platform. • Evaluate detection quality rigorously - measuring fidelity, coverage, and performance against real attacker behavior and production telemetry. • Stay sharp on the evolving threat landscape and rapidly incorporate new techniques, campaigns, and attacker tooling into our detection library. • Contribute to external research output - blog posts, talks, open-source tooling - that reflects our depth and point of view in the security community. Requirements WHAT YOU WILL BRING • 6+ years of hands-on experience in detection engineering, security research or incident response - working with real production data at scale. • Deep knowledge of attacker techniques and behavior across at least 2 from: cloud, identity, endpoint, and network environments, with the ability to translate that directly into high-fidelity detection logic. • An AI-native mindset - you've built or applied AI-powered tooling in a security context (detection pipelines, alert investigation, hunting workflows) and you default to AI-powered approaches before reaching for manual ones. • Experience working within or alongside a product or engineering team - you understand how software gets built, and you know how to make your security expertise actionable for R&D and Product. • Strong coding skills (Python or similar), used for research, data analysis, detection development, and tooling. • A product-oriented approach to research - you think about scale, usability, and customer impact, not just technical correctness. • Self-directed and a strong self-learner - you don't wait to be pointed at problems, and you move fast when you find them. • Strong written and verbal communication skills in English, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.

Description We’re growing and looking to hire a Vulnerability Research Team Lead who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity. About the Company: Claroty is a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. We’re a fast-growing, award-winning team where innovation meets purpose—and we want you to help us define the future of cybersecurity. At Claroty, our technology strategy is focused on solving real-world cyber-physical security problems at scale through robust, distributed, cloud-native architectures. We design and evolve a unified platform that serves as the technological backbone for all Claroty products, delivering deep visibility across CPS environments—without disrupting critical operations. Our architecture emphasizes scalability, resilience, and extensibility to support both cloud and on-prem deployments. About the Role: As a Vulnerability Research Team Lead at Claroty, you will lead a world-class group of vulnerability researchers in analyzing complex cyber-physical systems. You will balance hands-on technical excellence with people management, guiding your team through deep-dive disassembly, code audits, and exploit development. You will be responsible for the team's research roadmap, ensuring we stay ahead of emerging threats while fostering a culture of innovation and professional growth. Responsibilities As a Vulnerability Research Team Lead, your impact will be: • Leadership & Mentorship: Lead, hire, and develop a team of high-performing Vulnerability Researchers, fostering a collaborative and high-standard environment. • Research Strategy: Define and execute the team's research roadmap, prioritizing targets that provide the highest value to Claroty’s customers and products. • Technical Oversight: Provide expert guidance on static/dynamic analysis, reverse engineering, and exploit development projects. • Cross-Functional Collaboration: Work closely with R&D, Product Management, and Threat Intelligence teams to translate research findings into actionable security features. • Thought Leadership: Represent Claroty’s research in the industry through blogs, whitepapers, or conference presentations (BlackHat, DEF CON, etc.). Requirements What you need to succeed in this role: • Leadership Experience: At least 2+ years of experience leading a technical team or serving as a technical lead in a research-heavy environment. • Reverse Engineering Mastery: Extensive hands-on experience with tools such as IDA Pro, Binary Ninja, or Ghidra. • Deep Security Background: Proven track record in vulnerability research (VR), including advanced exploit development and program analysis. • AI-Driven Research Capabilities: Proven hands-on experience integrating advanced AI tools and LLMs (e.g., Claude, ChatGPT) into research workflows, leveraging them to accelerate code analysis, script automation, or vulnerability discovery. • Programming Excellence: Proficiency in C/C++ and Python, with the ability to review complex code and guide technical architecture. • System Internals Expert: Deep understanding of OS internals (Memory, Process management) and low-level architectures (x86/64, ARM, MIPS). • Communication Skills: Ability to translate complex technical vulnerabilities into clear business risks for stakeholders. Bonus Points for: • Experience in OT/ICS cybersecurity or embedded systems. • Proven track record of published CVEs or research papers. • Experience with automated vulnerability discovery (Fuzzing, Symbolic Execution). About Claroty Claroty empowers organizations to protect the mission-critical infrastructure that underpins modern life. The AI-powered Claroty Platform serves as the single source of operational truth, providing the deepest visibility and broadest protection across cyber-physical systems (CPS), leveraging five core solutions: asset inventory, exposure management, network protection, secure access, and threat detection. Claroty helps organizations operationalize CPS protection through a programmatic approach designed to reduce risk, maintain operational integrity, and meet compliance–whether in the cloud with Claroty xDome or on-premise with Claroty Continuous Threat Detection (CTD). Claroty is deployed by hundreds of organizations at thousands of sites globally. The company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America. To learn more, visit claroty.com. Claroty is widely recognized as the industry leader in CPS protection, backed by the world’s largest investment firms and industrial automation vendors. The company has been named a Leader in 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms two years in a row, a Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for CPS Protection Platforms, and a Leader and a Customer Favorite in The Forrester Wave™: Operational Technology Security Solutions, Q3 2026. Claroty has also been named to the Forbes Cloud 100 and Deloitte Technology Fast 500 multiple consecutive years. Claroty is an equal-opportunity employer committed to fostering a diverse and inclusive work environment for all. We encourage applications from candidates of ALL diverse backgrounds, and special accommodations are available upon request in all selection phases. Follow us on social media: LinkedIn LinkedIn Life Page Facebook Instagram

Description We are a fast-growing stealth cyber startup, backed by Team8, on a mission to solve one of the most critical challenges in the modern cyber landscape. We are looking for a brilliant Founding Vulnerability Researcher to join our core R&D team and help shape the technical heart of our product from the ground up. Role description We are looking for a strong offensive security researcher to join our core team, become a true partner in building the product end-to-end, and take a key role in shaping our research methodology, technical direction, and product capabilities. This is a hands-on role in a small team, sitting at the intersection of world-class offensive research and core agentic AI research — with a lot of responsibility, autonomy, and influence over the technical and business direction. What you will do • Discover novel vulnerabilities, attack primitives, and exploitation techniques across various surfaces. • Build reliable, weaponizable proof-of-concepts that hold up in real production environments. • Translate offensive techniques and original research into real product capabilities. • Develop methodologies that mirror how top attackers actually operate end-to-end. • Stress-test the product against hardened targets and push the ceiling of what it can do. • Represent the company in the research community through talks, papers, and disclosures. Requirements • 5+ years of hands-on experience in offensive security research or exploit development. • Demonstrable track record of offensive work — previous roles, bug bounty, CTF reputation, published CVEs, or original research. • Deep expertise in at least one offensive domain — web/app vulnerability research, cloud, identity, kernel/OS internals, network protocols, or AI/LLM security. • Comfortable in Python, Go, or Rust, with the ability to ship research into production-quality code. • Comfortable with ambiguity and zero-to-one work; founding DNA and a strong sense of ownership. • High proficiency in English, written and spoken. • Based in Tel Aviv, in-person — this is a founding team role.

Description Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences. Key Responsibilities • Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities. • Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks. • Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems. • Author high-quality technical blogs, whitepapers, and vulnerability reports. • Represent the company by speaking and participating in leading global security conferences. Requirements • Experience: 6+ years of proven experience in Offensive Security, Vulnerability Research, or Web Application Security. • Proven Track Record: Demonstrated background in discovering and disclosing vulnerabilities (e.g., published CVEs, strong bug bounty profiles, or independent research). • Technical Proficiency: Strong programming and scripting skills in languages such as Python, Go, C/C++, or Rust to build custom exploits and tooling. • Cloud/AI Knowledge: Solid understanding of modern Cloud environments (AWS, GCP, or Azure) and a foundational understanding of AI/ML architectures and their unique attack surfaces (e.g., LLM vulnerabilities, model poisoning). • Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical findings into clear business value for clients. Advantages • Low-Level Expertise: Proven background in low-level exploitation (e.g., binary analysis, reverse engineering, memory corruption vulnerabilities).

Job Description • Research the security of AI systems end to end, from the agents and frameworks they're built on to the runtimes and infrastructure that run them • Take apart complex software and find where it breaks • Turn a vulnerability into a full, working exploit, not just a proof that the bug exists • Understand the defenses modern systems lean on, and how to get past them • Share what you find, through coordinated disclosure and conference talks Qualifications • 4+ years in security research, vulnerability research, or a closely related field • A strong sense of how software works under the hood, whether that's a modern framework or the system underneath it • Comfortable reading complex code, and reverse engineering with IDA Pro or Ghidra when there's no source • Working knowledge of common vulnerability classes, from unsafe deserialization and logic flaws to memory corruption, and the experience to take one all the way to a working exploit • Excited about AI, and eager to get to its security problems first • Real curiosity, and the drive to go deep when the answer isn't obvious Nice to have • Experience researching AI systems, agent frameworks, or the infrastructure behind them • Published research, whether CVEs, blog posts, or conference talks • A degree in computer science, mathematics, or engineering, or the hands-on experience to match