Security Researcher jobs in Israel

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: CrowdStrike Intelligence is seeking a motivated security researcher with excellent technical skills to join the Advanced Research Team (ART). Security Researchers within ART will be expected to apply a broad set of skills to support the CrowdStrike Intelligence mission. ART is responsible for researching and publishing on topics related to information security, providing technical expertise to other teams within CrowdStrike Intelligence, developing tools to support analysts in their day-to-day duties, and collecting technical artifacts about adversary activity. Aside from working on longer-term research and collection projects, ART security researchers will be required to provide unique solutions on short notice to serve ad-hoc needs by other teams within CrowdStrike Intelligence. What You’ll Do: • Develop automated solutions for collecting, processing and analyzing data at scale, e.g. • Vendor patch processing and analysis • Identification of exploits in large file collections • Identification of browser exploits • Identification of malicious infrastructure • Perform vulnerability research on a wide variety of targets, e.g. • Analyze vendor patches to identify vulnerabilities and develop proof-of-concept exploits • Review evidence of malicious activities (e.g. log files, payloads) to confirm exploitation of 0-day and n-day vulnerabilities, identify root causes and reproduce exploits • Identify new vulnerabilities in applications or products • Collaborate across other teams at CrowdStrike Intelligence and beyond to • Reproduce emerging vulnerabilities and provide actionable technical information • Inform on information security topics • Satisfy unique technical collection requirements • Publish research results on the CrowdStrike blog or at conferences What You’ll Need: • Proficiency in English, both written and spoken • Strong information security background with 4+ years experience • Vulnerability research and exploit development experience • Ability to effectively leverage GenAI/LLMs to aid in software development and perform vulnerability research • Reverse engineering experience • Solid understanding of Microsoft Windows and Linux operating system internals • Solid software development experience (Python preferred) • Excellent problem solving skills, creativity and strong analytical skills to investigate, assess, validate, and think outside the box • Ability to work independently, with a customer-oriented mindset • Ability to work remotely, in a collaborative team environment • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. Bonus Points: • Successful participation in CTF competitions • Experience with mobile platforms and operating systems (e.g. Android, iOS) • Experience with macOS • Experience with the Go or Rust programming languages • Threat Intelligence background Education: • M.A./M.Sc. or equivalent professional experience in Information Security/Computer Science/Computer Engineering, or a related field #LI-Remote #LI-EV1 Benefits of Working at CrowdStrike: • Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Principal Security Researcher to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market. This position offers the unique opportunity to shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide. This role reports to the Senior Manager of Application Security. What you'll do • Conduct and lead security research projects across multiple functional areas. • Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact. • Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios. • Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation of the class rather than the instance. • Lead security research into GitLab's AI and agentic surfaces, and define the security requirements that engineering teams build against. • Build and direct the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase. • Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our responsible disclosure guidelines. • Solve technical problems of the highest scope, complexity, and ambiguity. • Help shape the team and sub-department roadmap. • Lead the integration of security research results into the engineering and business functions that need to act on them. • Teach, mentor, and advise other domain experts and individual contributors across several teams. • Share knowledge and novel vulnerability types with the security community. What you'll bring • 10+ years of experience in security research, penetration testing, or offensive security roles • Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. • Ability to read and analyze code across multiple languages and codebases • Strong knowledge of AI frameworks • Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation • At ease in establishing and driving complex remediation initiatives involving cross-functional teams • Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner. • Ability to translate complex technical findings into clear risk assessments and remediation recommendations • Strong analytical and problem-solving skills with creative thinking about attack scenarios • Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms About the team Security Researchers are a part of our Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $203,200—$275,000 USD How GitLab Supports Full-Time Employees • Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Offensive security The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack. The Role We're hiring an Offensive Security Engineer to join us at Nebius. You'll design and execute adversarial simulation across our cloud platform - attacking the same infrastructure our customers depend on - and translate findings into measurable security improvements. This is a hands-on engineering role within Product Security Team. You will be part of an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack. What you’ll do • Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases. • Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively. • Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack • Conduct targeted assessments of new products and infrastructure changes before they ship. • Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance. • Establish red team processes, tooling, and a methodology that scales as the platform grows. What we’re looking for • 6+ years in offensive security - penetration testing, red teaming, or adversary simulation • Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes. • Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration. • Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar). • Experience running purple team exercises and working constructively with blue teams. • Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use. Nice to have • Experience attacking ML infrastructure, model serving pipelines, or GPU clusters. • Reverse engineering and exploits development experience • Application security experience • Familiarity with eBPF bypass techniques or kernel-level exploitation. • Background in vulnerability research or CVE discovery. • Experience with cloud provider internals (hypervisor/networking layers). • Presenting your security research at conferences like BlackHat/DefCon, etc. Why this role at Nebius • Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale. • Work alongside world-class engineers on infrastructure that powers frontier AI. • Competitive compensation with equity upside in a Nasdaq-listed, high-growth company. • Flexible, remote-first culture Hiring process • Recruiter's chat (30mins) • Live-coding interview (60mins) to asses basic coding skills • Security interview (60mins) to asses domain expertise • Security System Design interview (90mins) to assess practical experience • (Optional) Technical deep dive (90mins) to present a complex and impact project. • Final interview to close the hiring process (45mins) Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Offensive security The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack. The Role We're hiring an Offensive Security Lead to build and run Nebius' red team capability. You'll design and execute adversarial simulation across our cloud platform - attacking the same infrastructure our customers depend on - and translate findings into measurable security improvements. This is a hands-on leadership role within Product Security Team. You will build an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack. What you’ll do • Build and lead a red team function within Product Security Team, hiring and developing offensive security engineers. • Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases. • Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively. • Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack • Conduct targeted assessments of new products and infrastructure changes before they ship. • Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance. • Establish red team processes, tooling, and a methodology that scales as the platform grows. What we’re looking for • 6+ years in offensive security - penetration testing, red teaming, or adversary simulation - with at least 1-2 years leading or mentoring a team. • Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes. • Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration. • Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar). • Experience running purple team exercises and working constructively with blue teams. • Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use. Nice to have • Experience attacking ML infrastructure, model serving pipelines, or GPU clusters. • Reverse engineering and exploits development experience • Application security experience • Familiarity with eBPF bypass techniques or kernel-level exploitation. • Background in vulnerability research or CVE discovery. • Experience with cloud provider internals (hypervisor/networking layers). • Presenting your security research at conferences like BlackHat/DefCon, etc. Hiring Process • Recruiter's chat (30mins) • Live-coding interview (60mins) to asses basic coding skills • Security interview (60mins) to asses domain expertise • Security System Design interview (90mins) to assess practical experience • (Optional) Technical deep dive (90mins) to present a complex and impact project. • Final interview to close the hiring process (45mins) Why this role at Nebius • Build a red team from scratch at a company operating frontier AI infrastructure. • Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale. • Work alongside world-class engineers on infrastructure that powers frontier AI. • Competitive compensation with equity upside in a Nasdaq-listed, high-growth company. • Flexible, remote-first culture #LI-CP1 Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: As a talented researcher, you will be joining the industry’s leading digital intelligence Security Research Labs group. In this position you will be taking part and leading new projects in little-explored vulnerability research territories, producing world-unique capabilities to extract evidence from phones and other embedded devices. Recent phones (from burner phones to the latest flagships) are increasingly challenging from a forensics perspective, and involve hardware-backed encryption (FDE/FBE), secure boot chains (Verified Boot/dm-verity), evolving hardened SELinux policies, as well as adventures in ARM TrustZone secure worlds. Key Responsibilities: You will join Cellebrite’s digital intelligence Security Research Labs Group and be a part of a team of passionate researchers, dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. Our world-class research results assist law enforcement by enabling lawful evidence extraction, and putting criminals behind bars, every day. You are a security researcher who cares about the ethical use case for his/her work, and if the art of engineering and crafting a platform-wide native payload in a fragmented ecosystem of gaping variance is the kind of challenge you appreciate, you belong with us. We need your help to make the world a safer place. Qualifications: • Practical experience performing vulnerability research and exploitation, preferably in mobile or other modern environments, eg. Windows/Linux/iOS/MacOS • Practical reverse engineering experience, preferably in ARM / TrustZone / Hypervisors • Advantage: Cryptographic primitives and weaknesses • Advantage: Advanced fuzzing • Advantage: Offensive hardware research/board design • Advantage: Experience dealing with modern memory corruption mitigations, such as PAC and MTE. #LI-AS1