Security Researcher jobs in Israel

85 open
G
Principal Security Researcher
GitLab · Remote

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of the role We are seeking a Principal Security Researcher to join our Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers. In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market. This position offers the unique opportunity to shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide. This role reports to the Senior Manager of Application Security. What you'll do • Conduct and lead security research projects across multiple functional areas. • Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact. • Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios. • Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation of the class rather than the instance. • Lead security research into GitLab's AI and agentic surfaces, and define the security requirements that engineering teams build against. • Build and direct the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase. • Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our responsible disclosure guidelines. • Solve technical problems of the highest scope, complexity, and ambiguity. • Help shape the team and sub-department roadmap. • Lead the integration of security research results into the engineering and business functions that need to act on them. • Teach, mentor, and advise other domain experts and individual contributors across several teams. • Share knowledge and novel vulnerability types with the security community. What you'll bring • 10+ years of experience in security research, penetration testing, or offensive security roles • Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. • Ability to read and analyze code across multiple languages and codebases • Strong knowledge of AI frameworks • Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation • At ease in establishing and driving complex remediation initiatives involving cross-functional teams • Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner. • Ability to translate complex technical findings into clear risk assessments and remediation recommendations • Strong analytical and problem-solving skills with creative thinking about attack scenarios • Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms About the team Security Researchers are a part of our Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity. The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. United States Salary Range $203,200—$275,000 USD How GitLab Supports Full-Time Employees • Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

Security Researcher
NS
Senior Security Vulnerability Research
Noma Security · Tel Aviv-Yafo

Description Join Noma Security and help shape the future of AI security in a fast-paced, high-impact environment. Noma is building the first comprehensive AI Security and Governance Platform, helping organizations adopt AI and LLMs with confidence and control. As AI becomes core to modern enterprises, we provide seamless visibility and protection across the entire AI lifecycle. Our team works at the intersection of AI, security, and cloud, shaping a new category in a rapidly evolving market. At Noma, you’ll have the opportunity to make a meaningful impact while working with exceptional people on technology that truly matters. We’re looking for a Security Vulnerability Researcher to be a core driver in how our product empowers security teams. You will be expected to deeply understand customer needs and translate them directly into product features that deliver real value. You'll own key parts of our frontend stack, drive key architectural decisions, and turn complex security data into clear, actionable business insights. This is a hands-on role for a seasoned offensive researcher who thrives on technical depth and creativity. You’ll collaborate closely with product, marketing, and engineering teams to deliver research that drives customer trust, informs product direction, and shapes industry thought leadership. 🛠️ What You’ll Do • Perform AI-Focused Vulnerability Research: Investigate security risks in AI models, APIs, and infrastructure to uncover exploitable weaknesses and publish insights that strengthen our market leadership. • Lead Red Teaming Against AI Systems: Simulate adversarial attacks on AI pipelines and APIs, creating impactful PoCs that showcase real-world risk and defensive strategies. • Build Customer-Facing Proof-of-Concepts: Partner with product and engineering teams to design and deliver PoCs that align with customer use cases and highlight Noma’s security capabilities. ✅ What You Bring • 5+ years in Security Research or Offensive Engineering with a proven track record in penetration testing or vulnerability discovery on complex targets. • Deep expertise in Application & AI Security, including experience exploiting APIs, web applications, and AI/ML vulnerabilities such as prompt injection, adversarial manipulation, or model abuse. • Offensive Security & Red Teaming Experience, with practical use of tools, custom exploits, or adversarial testing methods. • Proficiency in developing and presenting PoCs that clearly demonstrate security risks to both technical and non-technical audiences. • Recognized achievements in Bug Bounty or Military-Grade Security Research, or equivalent real-world offensive security experience. • Solid software engineering background, with the ability to read, write, and debug code (Python, JavaScript, Go, etc.). 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Security Researcher
NS
Senior Security Researcher
Noma Security · Tel Aviv-Yafo

Description Security Researcher Noma Security is redefining how organizations Safely adopt AI into their organization . As a key member of our research team, you’ll help us stay ahead of rapidly evolving threats by uncovering vulnerabilities, analyzing adversarial techniques, and producing groundbreaking insights that directly influence our product, marketing, and customer strategy. You’ll work alongside world-class engineers and security experts to conduct deep technical research, simulate real-world attacks, and create impactful proof-of-concepts (PoCs) that showcase how to protect AI-driven systems. This role is ideal for a hands-on security researcher who thrives on curiosity, creativity, and rigor, someone who wants to shape the future of AI security in a fast-moving product startup. What You’ll Do: • Drive AI Security Research: Investigate vulnerabilities in AI models, agentic platforms, and infrastructure- covering risks like prompt injection, adversarial manipulation, and model abuse. • Build Proof-of-Concepts: Develop technical PoCs that demonstrate real-world security threats and defenses, supporting both product validation and thought leadership. • Research new Prompt injection techniques: Implement novel techniques of adversarial attacks on AI systems in our automated red team module to evaluate resilience and inform customer-focused security offerings. • Track Competitors & Trends: Research the broader ecosystem of AI and cybersecurity to identify competitor capabilities, market shifts, and innovation opportunities. • Collaborate Across Teams: Partner with engineering and product to translate research into practical protections, product features, and marketing content. Requirements for Success: • 5+ years in security research or offensive engineering, with a focus on high-value targets • Strong background in application and AI security (prompt injection, adversarial ML, agent security). • Experience in red teaming or offensive security, including AI/ML pipelines, APIs, and infrastructure. • Proven ability to design and communicate PoCs for both technical and non-technical audiences. • Familiarity with bug bounty programs or military-grade research is a strong plus. • Curious, detail-oriented mindset with the ability to balance multiple research initiatives. • Experience with research for marketing, including blogs, thought leadership, conferneces, published researches- advantage. 💙 Perks & Benefits • Located in a prime area with easy access to public transportation, near the Hashalom train station and the Light Rail. • A bright, spacious, dog-friendly office that makes you smile the moment you walk in 🐶 • Team bonding activities, company retreats, happy hours, and holiday gifts • Pilates classes at the office 💪🧘‍♀️ • Never hungry: Monthly lunch budget, dinners provided, and a fully stocked kitchen 🍽️ • A warm, supportive, and people-first company culture • Pension & Keren Hishtalmut (advanced training fund) • A global work environment with teams across Tel Aviv, the US, the Netherlands, and London • Options that let you share in Noma’s growth and success

Security Researcher
P
Security Researcher
Pentera · Israel

Description Accelerate Your Career in Cybersecurity Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them. With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group. If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you. About the role: We're looking for an experienced Security Researcher to join Pentera's R&D organization and work alongside a team of attack-oriented researchers. You'll conduct hands-on offensive security research across multiple domains including Windows internals, kernel-level security, cloud platforms, web technologies, and AI. Your work will directly shape the attack methodologies that power Pentera's automated platform, translating deep technical research into new offensive techniques and AI-driven decision-making capabilities. Roles and Responsibilities: • Conduct hands-on offensive security research across AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across OS-level, domain, cloud-native, and external surfaces • Translate research outputs into production-grade attack functionalities within Pentera's automation ecosystem, working closely with product and engineering teams • Contribute to the integration of AI-driven decision-making into the platform's automated operations • Share knowledge, document findings, and contribute to a culture of continuous learning within the team Requirements • 3+ years of offensive security research experience: Windows internals, penetration testing, vulnerability research, or red team operations • Deep knowledge of attack frameworks and tools such as Metasploit, Nmap, Cobalt Strike, Impacket, Burp, Pacu • Proficiency in reverse engineering and debugging (IDA, Radare2, WinDBG) for low-level research • Familiarity with cloud ecosystems, specifically AWS and Azure • Strong communication skills to document and convey complex research clearly • Excellent teamwork, adaptability, and quick learning mindset Nice to have: • Hands-on development experience in Python, C/C++, or similar languages used in offensive tooling • Experience applying AI or machine learning concepts to offensive security or automated decision-making • Red/blue team operations experience We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We welcome candidates from all backgrounds to join us!

Security Researcher
P
Security Research Team Lead
Pentera · Israel

Description Accelerate Your Career in Cybersecurity Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them. With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group. If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you. About the Role: We are looking for an experienced Security Research Team Lead to join our R&D organization and lead a team of attack-oriented security researchers. You will set the research direction across multiple domains, from Windows internals and kernel-level security to cloud platforms, web technologies, and AI, ensuring your team stays one step ahead of real threat actors. Your team's research and attack methodologies will feed directly into our automated attack platform, enhancing its capabilities with new offensive techniques and AI-powered decision-making algorithms. Roles and Responsibilities: • Lead, mentor, and grow a team of security researchers, setting priorities and driving execution. • Define the team's research roadmap across areas such as AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across OS-level, domain, cloud-native, and external surfaces. • Accompany hands-on research alongside the team, maintaining deep technical credibility. • Collaborate with product and engineering teams to translate research outputs into production-grade attack functionalities within our automation ecosystem. • Drive the integration of AI-driven decision-making into the platform's automated operations. • Foster a culture of innovation, knowledge sharing, and continuous learning within the team. • Represent the research function in cross-team planning, roadmap discussions, and stakeholder alignment. Requirements • 3+ years of experience in offensive security research: Windows internals, penetration testing, vulnerability research, or red team operations. • 3+ years of experience leading or managing a technical research team. • Deep knowledge of attack frameworks and tools such as Metasploit, Nmap, Cobalt Strike, Impacket, Burp, Pacu, and similar. • Proficiency in reverse engineering and debugging (e.g., IDA, Radare2, WinDBG) for low-level research. • Familiarity with cloud ecosystems and hybrid environments, specifically AWS, Azure. • Strong communication skills, with the ability to translate complex research into actionable roadmaps. • Excellent teamwork, adaptability, and a quick learning mindset. Preferred skills: • Hands-on development experience in Python, C/C++, or similar languages used in offensive tooling. • Experience applying AI or machine learning concepts to offensive security or automated decision-making. • Experience with red/blue team operations. We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We welcome candidates from all backgrounds to join us!

Security Researcher
P
AI Security Researcher
Pentera · Israel

Description Accelerate Your Career in Cybersecurity Pentera is the market leader in AI-native Security Validation, equipping enterprises with the platform to proactively test their defenses against the latest cyber attacks. Pentera proves which exposures are truly exploitable across the entire attack surface and drives remediation workflows that reduce real risk. Anchored in real-attack validation, the Pentera platform powers the full Continuous Threat Exposure Management (CTEM) cycle, from exposure discovery through prioritization, validation, and mobilization. Thousands of security teams around the world trust Pentera to close their security gaps before threat actors can exploit them. With over 350 team members and 1,300 customers in more than 60 countries, Pentera is a growing company supported by top investors such as Insight Partners, K1, and The Blackstone Group. If you want to grow your skills, make an impact, and be part of an innovative team, Pentera is the place for you. About the role: We're looking for an AI Security Researcher with a strong AppSec foundation. At the core, this is a deeply technical application security role at an engineering level. You'll sit with development teams, get involved in their processes, understand how software is actually built, and bring a security perspective from the inside. You'll enhance traditional AppSec with agentic tools and security layers, working directly with enterprise customers on hands-on engagements. On top of that defensive foundation, you'll layer AI-specific offensive capabilities: researching and executing attacks against AI/ML systems. This is a unique opportunity to combine strong AppSec fundamentals with cutting-edge AI red teaming and agentic consulting, with a clear growth path as a researcher. Roles and Responsibilities: • Conduct deep, engineering-level application security work: review architectures, assess code, and embed with development teams as a technical peer throughout the development lifecycle • Lead AI-focused security assessments and red team engagements for enterprise customers, identifying vulnerabilities in AI/ML systems, agentic workflows, and LLM-based applications • Enhance traditional AppSec processes with agentic tools and AI security layers • Research and develop novel attack techniques targeting AI/ML systems, including prompt injection, model manipulation, and agentic framework exploits • Translate offensive findings into actionable security recommendations for customers and internal teams • Stay at the forefront of AI security: continuously research emerging attack surfaces and contribute to the growing body of AI threat knowledge Requirements • Deep, hands-on application security experience at an engineering level: someone who sits with dev teams, understands development processes from the inside, and reviews code and architectures as a peer (Must) • At least 1 year of dedicated, immersive work in AI security: research, experimentation, or offensive engagements targeting AI/ML systems (Must) • Offensive security capabilities with a focus on AI-specific attack vectors (Must) • Strong understanding of AI/ML technologies, including LLMs, agentic systems, and common AI application architectures • Development skills: comfortable reading and writing code, building tools, and understanding codebases • Excellent communication skills and comfort working directly with enterprise customers • Fluent English Nice to have: • Published research or public talks on AI security topics • Experience with traditional penetration testing or red teaming • Background in building or deploying AI/ML systems from the development side We are an equal opportunity employer and we are committed to building a diverse and talented workforce. We do not discriminate on the basis of race, sex, religion, colour, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, medical condition, disability, or any other class or characteristic protected by applicable law. We we

Security Researcher
TS
Security Research
Transmit Security · Tel Aviv-Yafo

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing businesses such as: banking, financial services, insurance, fintech, gaming, ecommerce/retail, telco / media, utilities, etc. About the Role: Transmit Security is a top player in its field and is heading into an exciting year. In this role, you will take an integral part in researching, designing, and improving advanced fraud and abuse detection capabilities for a cutting-edge SaaS product. We are looking for a hands-on security researcher who combines an attacker mindset, fraud-domain curiosity, strong technical depth, and data analysis skills. You will investigate real-world fraud patterns, reproduce attacker techniques, analyze telemetry, enrich our data collection capabilities, discover new security signals, and work closely with product, data, and engineering teams to turn research insights into production-grade detection and prevention mechanisms. This role is especially relevant for researchers with experience in browser technologies, mobile-native applications, or both. You may work on desktop and mobile browsers, browser APIs, browser automation, client-side signals, native mobile applications, Android/iOS behavior, mobile security, emulators, device signals, and mobile automation. You will help expand our visibility into new signals and patterns that improve fraud detection, model performance, and customer protection. If you are a talented researcher who enjoys solving complex problems, working with messy real-world data, and building practical defenses against modern fraud and abuse, we want you to join our team. What you’ll do: • Research emerging fraud and abuse techniques across account takeover, bots, automation, phishing, social engineering, device spoofing, emulators, remote access tools, suspicious network infrastructure, and related attack vectors. • Identify, design, and validate new data collection opportunities, security signals, behavioral patterns, device indicators, browser indicators, and mobile app indicators. • Analyze real-world telemetry, customer-provided labels, behavioral signals, device signals, network indicators, and attack patterns to identify detection opportunities. • Reproduce attacker techniques in lab and production-like environments, generate telemetry, identify detection gaps, and translate findings into detection logic. • Design, validate, and tune detection and prevention mechanisms with attention to coverage, explainability, false positives, customer impact, and production stability. • Build research infrastructure, analysis workflows, and internal tools using Python. • Produce robust data features that can later be used by machine learning models, detection logic, rules, dashboards, and customer-facing insights. • Work with model training pipelines, evaluate model behavior, compare training and validation results, and help determine whether new features improve detection quality. • Collaborate closely with data science, engineering and product, teams to take ideas from research hypothesis through validation, implementation, monitoring, and production feedback. • Stay up to date with fraud trends, attacker tooling, automation frameworks, browser abuse techniques, mobile abuse techniques, malware behavior, phishing techniques, and underground ecosystem developments. • Communicate findings clearly to technical and non-technical stakeholders, including recommended actions, tradeoffs, expected impact, and model/detection quality considerations. What you’ll need: • At least 3 years of experience in security research, fraud research, detection engineering, threat research, mobile security research, browser security research, or a similar hands-on technical role. • Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or a related field or equivalent hands-on experience. • Strong hands-on experience with at least one of the following areas: • Desktop or mobile browsers, browser APIs, browser automation, browser fingerprinting, web signals, or client-side web security. • Native mobile applications for Android or iOS, mobile OS behavior, device signals, emulators, mobile automation, app instrumentation, or mobile security. • Strong understanding of web technologies, mobile technologies, APIs, application behavior, and modern attack techniques. • Strong Python skills and experience building research tools, automation, data analysis workflows, detection prototypes, or feature engineering pipelines. • Experience analyzing messy real-world data, investigating anomalies, validating hypotheses, and drawing practical conclusions from incomplete information. • Familiarity with machine learning training and validation concepts, such as train/test split, validation sets, overfitting, leakage, feature quality, precision/recall, false positives, false negatives, and model evaluation. • Ability to produce data features in a structured, reliable, and model-friendly way. • Ability to think like an attacker while designing reliable, scalable, and explainable defenses. • Strong problem-solving skills, independence, persistence, and a “getting things done” attitude. • Excellent communication and interpersonal skills. • Ability to work closely with engineering, product, and data science teams and translate research insights into practical product capabilities. Advantages: • Experience with both browser-based and mobile-native research. • Experience with fraud domains such as account takeover, new account fraud, identity theft, money mule activity, payment fraud, or first-party fraud. • Knowledge of bots, automation frameworks, credential stuffing, scraping, and anti-detection techniques. • Experience with browser internals, JavaScript runtime behavior, DOM APIs, WebView behavior, browser automation, headless browsers, or browser anti-detection techniques. • Experience with mobile app lifecycle, permissions, sensors, networking, storage, mobile identifiers, rooted/jailbroken devices, hooking, instrumentation, repackaging, or anti-tampering techniques. • Experience with browser fingerprinting, mobile fingerprinting, device intelligence, behavioral biometrics, or client-side telemetry. • Experience with malware analysis, phishing kits, remote access tools, proxy/VPN infrastructure, or underground fraud ecosystems. • Experience with detection quality measurement, false-positive analysis, rule tuning, model evaluation, feature evaluation, or production monitoring. • Experience using notebooks, pandas, SQL, data visualization tools, or other analysis environments for research and validation. • Experience working with data scientists, ML engineers, or ML training pipelines. #LI-TL1 #LI-Hybrid

Security Researcher
S
Mid-Senior Pentest- Offensive Security
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Mid-Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 4 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
S
Senior Offensive AI Security Researcher
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We are looking for a Senior Offensive AI Security Researcher with a strong offensive security and research mindset to lead novel adversarial research across Salesforce’s AI ecosystem - uncovering critical and systemic vulnerabilities before they can be exploited. This role goes beyond finding individual bugs - it focuses on scoping, designing, and executing advanced research into emerging AI threat vectors, combining academic research with practical offensive methodologies to establish new TTPs targeting complex AI paradigms, including indirect prompt injection, tool abuse/excessive agency, RAG system poisoning, data extraction, and model/data supply chain compromises. You will work as a trusted partner to engineering and architecture teams - providing an offensive security perspective that shapes internal threat models, guides AI architecture decisions, supports corporate governance, and directly contributes to Salesforce’s Generative AI Security Standard. What You’ll Actually Be Doing • Lead Novel AI Security Research: Scope, design, and execute advanced adversarial research across Salesforce’s AI ecosystem, applying a risk-based approach to uncover novel threat vectors before exploitation. • Innovate & Operationalize AI Attack Techniques: Combine academic research with practical offensive methodologies to establish new TTPs targeting complex AI paradigms- specifically indirect prompt injection, tool abuse/excessive agency, RAG system poisoning, data extraction, and model/data supply chain compromises. • Guide Strategy & Security Standards: Provide an offensive security perspective to guide AI architecture, shape internal threat models, support corporate governance, and directly contribute to Salesforce’s Generative AI Security Standard. • Disseminate Research: Publish internal and external threat intelligence, vulnerability analyses, and security research to keep Salesforce defenses aligned with state-of-the-art AI threat landscapes. You’re Our Person If... • 5+ years of experience in offensive security roles (vulnerability research, penetration testing, application security, or security engineering). • 2+ years of hands-on experience auditing, breaking, or researching ML/AI systems, with deep expertise in LLM attack surfaces and frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS). • Deep technical understanding of modern AI design patterns, including Retrieval-Augmented Generation (RAG), autonomous agentic workflows, model context protocols, and AI pipelines. • High degree of proficiency in Python for exploit proof-of-concept development, data analysis, and technical evaluation. • Proven track record of leading complex security initiatives and communicating critical, high-stakes technical risks to both research engineers and executive leadership. Even Better If... • Advanced degree (MS or PhD) in Computer Science, Machine Learning, Cybersecurity, or a related field. • A public portfolio of offensive security research, including conference presentations (e.g., Black Hat, DEF CON, NeurIPS), published papers, CVEs, advisories, or open-source research contributions. • Experience auditing modern AI development ecosystems and tools (e.g., PyTorch, Hugging Face, LangChain, vector databases, or open-weight models). Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
S
Lead / Senior Offensive Security Engineer (Offsec AI Team)
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We’re looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team. This is a role for someone who can perform offensive security testing at scale, combining deep security expertise with the judgment to direct and improve AI-driven tooling. What You'll Actually Be Doing • Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth that you will develop. • Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find. • Run end-to-end engagements: scoping, execution, reporting, and remediation guidance. • Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes. • Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness. • Produce high-quality technical reports with clear exploitation paths and prioritized remediation. • Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale. • Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting. • Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision. • Translate your own tradecraft into reusable, explainable automation that the team can run and build on. You're Our Person If... • 6+ years (Senior) / 8+ years (Lead) hands-on offensive security experience such as pentesting, red teaming, or app/security research, with proven complex engagement delivery. • Deep, must-have vulnerability knowledge in cloud and web application security: OWASP Top 10+ vulnerability classes, identity/authz attack vectors, and cloud/hybrid attack surfaces. • Hands-on experience using internal AI tools and frontier models to perform or accelerate security testing, not just conceptual familiarity! • Software engineering fundamentals: System design, API integration, working with distributed services and technologies. • Ability to write custom scripts/tooling/payloads and contribute to building automation and autonomous harnesses including prompt engineering. • Excellent written and verbal communication skills. Even Better If... • Experience with agentic frameworks, prompt optimization, agent evaluation, or lightweight model fine-tuning. • Published security research, CVEs, or conference talks. • Familiarity with MITRE ATT&CK/ATLAS and offensive AI/ML attack surfaces (prompt injection, agentic privilege abuse). Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
S
Senior Pentest- Offensive Security
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. he Experience Join our Offensive Security Pentest team in Israel as a hands-on Senior Offensive Security Engineer. You think like an attacker and find weaknesses across our products, platforms and enterprise environment. You turn those findings into lasting security improvements, including for AI-powered features. What You'll Actually Be Doing • Lead deep, manual penetration tests of web applications, APIs, cloud and container environments, and identity systems. Show the real-world impact of what you find. • Uncover systemic and design-level weaknesses, not just isolated bugs, and chain them across trust boundaries to push secure-by-default improvements. • Deliver clear, detailed reports with exploitation paths and practical, prioritized fixes. Help engineers understand root causes and close gaps. • Work with engineering, security architecture, product security, detection and response, and incident response teams to improve designs, alerts and response. Build tools and automation that make testing faster and more consistent. You're Our Person If... • You have about 6 years of hands-on experience in penetration testing, application security, red teaming or vulnerability research. • You have run complex offensive security engagements in production or production-like environments, using manual exploitation, vulnerability chaining and proof-of-concept development. • You understand application vulnerabilities, authentication and authorization attacks, and cloud and hybrid attack surfaces. You can write scripts or tools to support your testing. • You explain risk, exploitation techniques and remediation clearly to engineers, security teams and leaders. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have published security research, conference talks, advisories or publicly disclosed vulnerabilities. • You have experience with adversary emulation, long-running red team campaigns, or working alongside detection and response teams. • You know AI and large language model security, or identity-focused cloud architectures and large-scale distributed systems. • You have led secure-by-design initiatives and balance security rigor with product speed and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
S
Offensive Security- Red Team
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience Join the Product Security team in Israel as an Offensive Security Engineer on our Red Team. You partner with the Red Team Director to run realistic attack simulations across Salesforce products, platforms, and enterprise environments, and you help make our defenses stronger, including as AI and Agentforce reshape our attack surface. What You'll Actually Be Doing • Run hands-on red team operations that simulate real-world attackers across applications, cloud, and enterprise environments, and chain weaknesses together to reach defined goals. • Design and carry out end-to-end attack campaigns with the Red Team Director, including bypassing security controls and abusing identity, access, and trust relationships. • Work with Detection and Response, Incident Response, and Engineering teams to test alerts and response workflows, and explain attack paths and root causes in clear, practical terms. • Improve red team tools, automation, and techniques with the AI-Automation team, and mentor junior engineers. You're Our Person If... • You have 4+ years of experience in offensive security, red teaming, or advanced penetration testing in production-like environments. • You understand attacker methods, identity and access abuse, and attack chains across applications, infrastructure, cloud, and hybrid environments. • You write custom scripts, tools, or payloads, and you are skilled at manual exploitation. • You communicate clearly about how an attack worked, why defenses failed, and which fixes reduce risk most. • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Even Better If... • You have run continuous or programmatic red team operations, or have a background in adversary emulation or purple team work. • You have experience with malware analysis or exploit development. • You have published vulnerability research, responsible disclosures, blogs, or talks. • You know cloud-native architectures and identity-centric security models. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
S
Offensive Security Researcher
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience We are looking for an Offensive Security Researcher with an attacker mindset to discover, analyze, and remediate security vulnerabilities across our products and platforms. This role focuses on identifying root causes, architectural weaknesses, and recurring security anti-patterns, and implementing secure-by-default solutions that prevent vulnerabilities. You will work alongside engineering teams to analyze design decisions, improve security posture, and support overall application security maturity. What You'll Actually Be Doing • Conduct offensive security assessments (manual testing, code review, architectural analysis, threat modeling) across application ecosystems. • Identify critical, high-impact, and systemic vulnerabilities alongside isolated issues. • Perform security research to identify emerging attack vectors, abuse cases, and bypass techniques relevant to our applications and platforms. • Partner closely with software engineers, tech leads, and architects to:Explain risk, impact, and exploitability.Design and implement effective remediations.Ensure fixes are scalable, maintainable, and aligned with engineering realities. • Execute Secure by Default initiatives by:Applying security guardrails, patterns, and baseline controls.Remediating insecure defaults and unsafe configurations.Preventing vulnerabilities through platform-level and framework-level updates. • Review application and platform designs early in the development lifecycle to prevent vulnerabilities before release. • Apply security standards, best practices, and architectural guidance during application development. • Share security knowledge and offensive techniques with engineering teams. • Collaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation. You're Our Person If... • 3+ years of experience in Application Security or Offensive Security with an attacker mindset. • Demonstrated experience finding and remediating vulnerabilities in complex applications. • Strong understanding of:Web application security (OWASP Top 10 and beyond)Authentication & authorization flawsAPI securityInjection attacks, logic flaws, and access control bypassesSecure design and threat modeling • Hands-on experience with manual security testing (beyond automated tools). • Ability to translate complex security findings into clear, actionable guidance for engineers. • Strong communication and collaboration skills with engineering teams. Even Better If... • Published security research or CVEs (technical blogs, advisories, whitepapers, or conference presentations). • Experience implementing platform-level or framework-level security improvements. • Background in vulnerability discovery, security research, or red teaming. • Experience implementing Secure by Default or security-by-design concepts. • Familiarity with cloud-native architectures, microservices, and distributed systems. • Ability to balance security requirements with product velocity and developer experience. Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
S
Principal Offensive Security Researcher
Salesforce · Tel Aviv-Yafo

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Product Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience The Security Research team is Salesforce’s offensive security engine, hunting for real-world attack paths across our products and infrastructure before adversaries do. We’re looking for a Principal Security Researcher, based in Israel, to bring deep offensive security expertise, autonomy, and a relentless attacker mindset to help drive lasting security improvements at scale. What You'll Actually Be Doing • Lead advanced penetration testing, red team operations, or security research against Salesforce’s cloud infrastructure, applications, and services, uncovering vulnerabilities that matter most • Build custom tools, exploits, and attack techniques that simulate real-world adversaries and raise the bar for our offensive security tradecraft • Partner with product teams to translate offensive findings into remediation and stronger secure design practices • Mentor team members and present findings to technical and executive audiences, growing the team’s overall offensive security capability You're Our Person If... • You have 10+ years of hands-on experience in offensive security, with deep, demonstrable expertise in at least one of: penetration testing, red teaming, application security research, or vulnerability discovery • You’ve identified and exploited complex vulnerabilities in web applications, APIs, cloud environments, or infrastructure • You have strong programming or scripting skills (Python, Go, Bash, PowerShell) for tooling and automation, and a solid grasp of attack frameworks (MITRE ATT&CK) and vulnerability classes (OWASP, CWE) Even Better If... • You have experience in cloud security (AWS, GCP, Azure) or containerized environments (Kubernetes, Docker) • You’ve contributed to CVE discoveries, security tooling, or CI/CD and supply chain security • You’re active in the security community (bug bounties, CTFs, conferences, open-source contributions) • You hold relevant certifications (OSCP, OSCE, OSWE, GXPN, or equivalent) • Degree or equivalent relevant experience required. Experience will be evaluated based on the core competencies for the role (e.g. extracurricular leadership roles, military experience, volunteer roles, work experience, etc.) Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Security Researcher
OS
Linux Security Researcher
Oligo Security · Tel Aviv-Yafo

Description About us Oligo is a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, we’re on a mission to make real-time security a reality. Oligo’s industry’s leading runtime security platform built to stop attacks in real time without stopping the business. We transform security from passive visibility to active protection across applications, cloud services, workloads, and AI systems. By uncovering the deepest layers of what actually runs in production, Oligo helps organizations prioritize exploitable vulnerabilities, detect malicious behavior as it happens, and stop modern attacks in their tracks. What You’ll Be Doing As a Security Researcher at Oligo, you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities. This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work. Specifically, you will: • Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems. • Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs. • Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection. • Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats. • Work closely with engineering and product teams to turn research into practical security capabilities. Requirements Qualifications • 5+ years of experience in security research, vulnerability research, detection engineering, threat detection engineer, or a related technical security role. • Strong understanding of modern application attack techniques, including the ability to analyze vulnerabilities and exploitation flows. • Deep expertise in Linux internals. • High degree of ownership and ability to independently navigate ambiguous technical problem spaces and turn them into structured research plans and actionable outcomes. • Experience designing and conducting hands-on technical research, including investigations, experiments, and PoC development. • Strong programming skills for code analysis, research tooling, and building proof-of-concepts and vulnerable test applications. • Strong communication and teamwork skills, with a collaborative approach to problem-solving across teams. • Data analysis skills and hands-on experience working with databases. We’ll be lucky if you have • Experience with cloud-native attack surfaces, such as Kubernetes. • Familiarity with eBPF, syscall tracing, or other low-level runtime observability techniques. • Knowledge of programming language internals, exploitation techniques, or low-level system behavior. • Experience with data science or statistical analysis in the context of security research. • Familiarity with AI security concepts and attack techniques targeting LLMs, agents, or AI-integrated applications.

Security Researcher
I
Senior Product Security Researcher
Island · Tel Aviv-Yafo

Island is shaping the future of work - creating an enterprise workspace for both knowledge workers and agents - where access, security, and AI-powered productivity are built in. Our enterprise agentic control plane boosts productivity across devices, browsers, applications, networks, and data while protecting sensitive information, simplifying access, and helping enterprises scale AI safely. Behind all of that is a team of people who care deeply about their craft and want to do the biggest and best work of their careers. At Island, character and drive matter more than your resume. Backed by Coatue Management, Insight Partners, Sequoia Capital, Cyberstarts, and other world-class investors, Island is used by millions of people at some of the planet’s largest enterprises. Come build with us. Together, we’re changing how the world works. As a Senior Product Security Researcher at Island, you will attack our product the way a motivated adversary would. You will research how Island’s security controls, browser features, cloud services, and AI capabilities can be bypassed, abused, or turned against our customers, and you will work with R&D to fix the root causes. This role focuses on product logic, trust boundaries, and the application and cloud layers, rather than kernel or memory-level research. Key Responsibilities • Product Control Bypass Research: Find ways to bypass or weaken Island’s enforcement features, such as data loss prevention, clipboard, download and screenshot restrictions, data masking, and access policies, and help design controls that hold up under real attacks. • Browser & Extension Security: Research the security of Island’s browser features, web platform integrations, and extension ecosystem, including the browser security model, extension permissions, and interactions between web content and privileged browser features. • Backend, API & Identity Research: Assess Island’s management console, cloud services, and APIs for authorization flaws, tenant isolation issues, and weaknesses in authentication and identity flows (SSO, OAuth, SAML, OIDC). • AI & Agent Security: Research the attack surface of Island’s AI and agentic features, including prompt injection, agent tool abuse, data exposure through AI workflows, and the security of MCP and agent integrations. • Threat Modeling & Design Review: Work with developers, architects, and product managers to model threats for new features early in design, and turn research findings into concrete security requirements. • Proof of Concept & Impact Analysis: Build proof of concepts that show real customer impact, and clearly explain risk and fix priority to engineering and leadership. • Tooling & Automation: Build tools and AI-assisted workflows that scale research across a large and fast-moving codebase. • Community & Knowledge Sharing: Mentor team members, contribute to internal playbooks, support our bug bounty program, and present research externally when appropriate. Requirements • Several years of hands-on experience in application security research, product security, or offensive security, with a strong track record of finding real vulnerabilities (CVEs, bug bounty, published research, or equivalent). • Deep understanding of web and browser security: same-origin policy, CSP, cookies and sessions, extension security, and common web vulnerability classes (XSS, CSRF, SSRF, IDOR, auth bypass, logic flaws). • Strong knowledge of authentication and authorization protocols (OAuth, OIDC, SAML) and multi-tenant SaaS security. • Ability to read and review code in languages such as TypeScript/JavaScript, Go, Python, or C++. • Strong adversarial thinking and the ability to find logic and design flaws, not only known bug patterns. • Clear communication and the ability to work as a partner to engineering teams. Advantages • Experience with Chromium architecture or enterprise browser and endpoint products. • Experience researching LLM applications or agentic systems. • Cloud security experience (AWS, Kubernetes). • Experience building security tooling or using AI to speed up research. Data Privacy You can find information on how we process and protect your personal data in our Candidate and Employee Privacy Notice. For any privacy-related questions, contact us at [email protected].

Security Researcher
V
Security Researcher
Vega · Israel

Description Vega is one of the fastest-growing startups in cybersecurity, redefining security analytics and operations with an AI-native platform for the SOC. We are building the next-generation operating system for security teams. Vega is already delivering real impact at some of the world's largest organizations - improving detection, unlocking the value of their security data, and reducing cost and complexity. With HQs in New York and TLV, we're looking for people who want to be a part of the next rocket-ship in cyber. We're looking for a Security Researcher to join our team at the intersection of security research, AI, and product. This isn't a traditional research role - you'll be deeply embedded in how the platform is built, working side by side with R&D, Product, and AI teams to make sure security expertise is baked into every layer of what we ship. You'll own detection and analytics research across cloud, identity, endpoint, and beyond, while actively shaping how AI capabilities are applied to solve real security problems at scale. WHAT YOU WILL DO • Research and develop sophisticated detections and behavioral analytics across multiple security landscapes - cloud, identity, endpoint, network, and application - with a focus on coverage that scales across customer environments. • Work closely with R&D, Product, and AI teams as the security authority - reviewing features, shaping designs, and ensuring security logic is sound, practical, and impactful. • Apply an AI-native approach to detection and analytics challenges - leveraging LLMs, ML signals, and AI-assisted workflows to do things that rule-based approaches can't. • Identify gaps in detection coverage and analytical capabilities, and drive those findings directly into the product roadmap. • Analyze real-world attacker techniques and translate them into detection logic, hunting content, and analytical frameworks that ship as part of the platform. • Evaluate detection quality rigorously - measuring fidelity, coverage, and performance against real attacker behavior and production telemetry. • Stay sharp on the evolving threat landscape and rapidly incorporate new techniques, campaigns, and attacker tooling into our detection library. • Contribute to external research output - blog posts, talks, open-source tooling - that reflects our depth and point of view in the security community. Requirements WHAT YOU WILL BRING • 6+ years of hands-on experience in detection engineering, security research or incident response - working with real production data at scale. • Deep knowledge of attacker techniques and behavior across at least 2 from: cloud, identity, endpoint, and network environments, with the ability to translate that directly into high-fidelity detection logic. • An AI-native mindset - you've built or applied AI-powered tooling in a security context (detection pipelines, alert investigation, hunting workflows) and you default to AI-powered approaches before reaching for manual ones. • Experience working within or alongside a product or engineering team - you understand how software gets built, and you know how to make your security expertise actionable for R&D and Product. • Strong coding skills (Python or similar), used for research, data analysis, detection development, and tooling. • A product-oriented approach to research - you think about scale, usability, and customer impact, not just technical correctness. • Self-directed and a strong self-learner - you don't wait to be pointed at problems, and you move fast when you find them. • Strong written and verbal communication skills in English, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.

Security Researcher
C
Vulnerability Research Team Lead
Claroty · Israel

Description We’re growing and looking to hire a Vulnerability Research Team Lead who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity. About the Company: Claroty is a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. We’re a fast-growing, award-winning team where innovation meets purpose—and we want you to help us define the future of cybersecurity. At Claroty, our technology strategy is focused on solving real-world cyber-physical security problems at scale through robust, distributed, cloud-native architectures. We design and evolve a unified platform that serves as the technological backbone for all Claroty products, delivering deep visibility across CPS environments—without disrupting critical operations. Our architecture emphasizes scalability, resilience, and extensibility to support both cloud and on-prem deployments. About the Role: As a Vulnerability Research Team Lead at Claroty, you will lead a world-class group of vulnerability researchers in analyzing complex cyber-physical systems. You will balance hands-on technical excellence with people management, guiding your team through deep-dive disassembly, code audits, and exploit development. You will be responsible for the team's research roadmap, ensuring we stay ahead of emerging threats while fostering a culture of innovation and professional growth. Responsibilities As a Vulnerability Research Team Lead, your impact will be: • Leadership & Mentorship: Lead, hire, and develop a team of high-performing Vulnerability Researchers, fostering a collaborative and high-standard environment. • Research Strategy: Define and execute the team's research roadmap, prioritizing targets that provide the highest value to Claroty’s customers and products. • Technical Oversight: Provide expert guidance on static/dynamic analysis, reverse engineering, and exploit development projects. • Cross-Functional Collaboration: Work closely with R&D, Product Management, and Threat Intelligence teams to translate research findings into actionable security features. • Thought Leadership: Represent Claroty’s research in the industry through blogs, whitepapers, or conference presentations (BlackHat, DEF CON, etc.). Requirements What you need to succeed in this role: • Leadership Experience: At least 2+ years of experience leading a technical team or serving as a technical lead in a research-heavy environment. • Reverse Engineering Mastery: Extensive hands-on experience with tools such as IDA Pro, Binary Ninja, or Ghidra. • Deep Security Background: Proven track record in vulnerability research (VR), including advanced exploit development and program analysis. • AI-Driven Research Capabilities: Proven hands-on experience integrating advanced AI tools and LLMs (e.g., Claude, ChatGPT) into research workflows, leveraging them to accelerate code analysis, script automation, or vulnerability discovery. • Programming Excellence: Proficiency in C/C++ and Python, with the ability to review complex code and guide technical architecture. • System Internals Expert: Deep understanding of OS internals (Memory, Process management) and low-level architectures (x86/64, ARM, MIPS). • Communication Skills: Ability to translate complex technical vulnerabilities into clear business risks for stakeholders. Bonus Points for: • Experience in OT/ICS cybersecurity or embedded systems. • Proven track record of published CVEs or research papers. • Experience with automated vulnerability discovery (Fuzzing, Symbolic Execution). About Claroty Claroty empowers organizations to protect the mission-critical infrastructure that underpins modern life. The AI-powered Claroty Platform serves as the single source of operational truth, providing the deepest visibility and broadest protection across cyber-physical systems (CPS), leveraging five core solutions: asset inventory, exposure management, network protection, secure access, and threat detection. Claroty helps organizations operationalize CPS protection through a programmatic approach designed to reduce risk, maintain operational integrity, and meet compliance–whether in the cloud with Claroty xDome or on-premise with Claroty Continuous Threat Detection (CTD). Claroty is deployed by hundreds of organizations at thousands of sites globally. The company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America. To learn more, visit claroty.com. Claroty is widely recognized as the industry leader in CPS protection, backed by the world’s largest investment firms and industrial automation vendors. The company has been named a Leader in 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms two years in a row, a Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for CPS Protection Platforms, and a Leader and a Customer Favorite in The Forrester Wave™: Operational Technology Security Solutions, Q3 2026. Claroty has also been named to the Forbes Cloud 100 and Deloitte Technology Fast 500 multiple consecutive years. Claroty is an equal-opportunity employer committed to fostering a diverse and inclusive work environment for all. We encourage applications from candidates of ALL diverse backgrounds, and special accommodations are available upon request in all selection phases. Follow us on social media: LinkedIn LinkedIn Life Page Facebook Instagram

Security Researcher
W
Security Researcher
Wiz · Tel Aviv-Yafo

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun! Minimum Qualifications • 5+ years of hands-on experience in security or security research, with experience in risk analysis or threat modeling of complex systems. • Strong hands-on skills with scripting languages (e.g., Python, Go) for automation and research, as well as query languages (e.g., KQL, SQL) for efficient data analysis of security telemetry, and with AI tools to accelerate your impact. • Proven ability to work independently, prioritize effectively, and collaborate for clear, delivered impact. • Excellent written and verbal communication skills, with a track record of successfully collaborating with cross-functional teams (e.g. Product, Engineering, Marketing) to achieve shared goals. Preferred Qualifications • Familiarity or hands-on experience with modern cloud environments (AWS, GCP, Azure, Kubernetes) or adjacent cloud platforms. • Experience in public-facing work, such as presenting at recognized industry conferences, authoring technical blog posts, or publishing research. • Experience conducting data-driven research and working with large-scale security telemetry to derive statistically significant or high-impact findings. About The Job We're looking for a talented Security Researcher to join our team and play a critical role in Wiz's foundational, risk-driven approach to security. This role requires deep technical research into complex cloud- and AI-native platforms to identify the most significant, unaddressed risks. Responsibilities • Conduct deep technical research to discover and report novel risks and attack vectors relevant real-world architectures and systems. • Discover and articulate the highest unaddressed risk areas, working with Product and Engineering teams to translate research into product capabilities. • Work closely with Product and Engineering teams to ensure comprehensive risk coverage and support the investigation of new and complex product scope. • Leverage multi-disciplinary approaches to automate and scale the research process. Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.

Security Researcher
W
Applied Security Researcher
Wiz · Tel Aviv-Yafo

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun! Minimum qualifications • 5+ years of hands-on experience in security or security research. • A strong threat-modeling mindset - deep understanding of both how attackers approach complex environments and how enterprises defend them • Deep understanding of how complex software systems are built, so you can find where they're vulnerable (Low-level, Distributed, or Core System Engineering mindset) • A foundation in program analysis - parsing, compilation and static code analysis — and comfort reasoning about code as data. • Proven ability to define and implement AI agents, and to make their output reproducible. • Proven ability to work independently, prioritize, and carry complex, multi-quarter projects from concept to working production grade software. Preferred qualifications • Security research experience in modern cloud environments (AWS, GCP, Azure, Kubernetes, etc) and infrastructure-as-code. • Familiarity with model benchmarking, evaluation, fine-tuning, and with grading agent output against ground truth. • Query languages for security telemetry, graph databases, or large-scale data-mining and clustering experience. • Excellent written and verbal communication, with a track record of shipping alongside cross-functional teams (Product, Engineering, Research). About the job We're looking for a talented Applied Security Researcher to join our team and play a major role in Wiz's frontier research team, enabling contextual code understanding across complex cloud deployments. Responsibilities • Drive continuous research from initial concept through PoC to product integration. • Build threat models for AI-native and cloud-native systems: how attackers approach them, how enterprises defend them, and where the gaps are. • Build AI agents that analyze code and/or cloud infrastructure to produce specific insights. • Analyze and understand real-world systems from a security perspective - architecture, data flows, and source code. • Partner across Product, Engineering, and Research to ship what you discover. Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.

Security Researcher