Security Researcher jobs in Israel

We are now looking for a Senior security researcher. NVIDIA Networking product security team is looking for an outstanding technical security researcher with hands-on experience to help us improve the security posture of NVIDIA networking software. In this role you will help reduce risk, threats, and vulnerabilities in NVIDIA networking products. What you’ll be doing: • Be involved in offensive security researcher on a wide range of products. • Assist with defining and making sure software development processes meet security and coding standards. • Perform security threat modeling for NVIDIA Networking products. • Design and make security architecture recommendations to satisfy security guidelines and requirements. • Mentor teams and developers, promoting guidelines on the best security practices. • Be a technical focal point across multiple development teams and provide hands-on security engineering expertise. What we need to see: • Academic degree in computer science, electrical engineering, or related field or equivalent experience. • Demonstrated experience of 3+ years in security research. • Familiarity with applied cryptography, threat modeling, common attack vectors and mitigation techniques. • Ability to work independently, and collaboratively in a constantly evolving environment. • Excellent communication and interpersonal skills. Ways to stand out from the crowd: • M.Sc. or PhD in computer science, electrical engineering, or related technical field. • Familiarity with the cloud environment security ecosystem. • Experience with high-scale deployment challenges. • Demonstrated security research experience and publications. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

At NVIDIA we tackle challenges no one else can solve. Our work in Networking and AI is transforming the world's largest industries and profoundly impacting society. NVIDIA Networking product security team is looking for an outstanding technical AI red teamer with hands-on safety and security experience to help us improve the safety posture of AI models, systems and infrastructure. In this role you will reduce risk, threats, and vulnerabilities in NVIDIA networking AI products. What you'll be doing: • Drive hands-on safety and security research on a range of AI and networking products. • Develop tools and processes to expose novel weaknesses in AI models and systems to preempt threats. • Participate in defining and ensuring AI development processes meet safety and security standards. • Partner with cross-functional teams to understand needs and implement solutions. • Be a technical focal point across multiple teams and provide hands-on AI safety, security and engineering expertise. What we need to see: • Bachelor’s or Master’s Degree in Computer Science, Computer Engineering, Data Science, or a related field (or equivalent experience). • Demonstrated experience of 5+ years in AI safety/security and offensive cybersecurity. • Knowledge of AI (both model and infrastructure) vulnerabilities and effective mitigation strategies. • In-depth understanding of LLM, MLLM, Generative AI, Agents and RAG workflows. • Proven Python programming expertise • Self-starter with a passion for growth, enthusiasm for continuous learning, and sharing findings across the team • Extremely motivated, highly passionate, and curious about new technologies. Ways to stand out from the crowd: • Hands-on experience designing and building software products, including infrastructure and system design. • Knowledge of MLOps technologies such as Docker and Kubernetes. • Familiarity with ML libraries (PyTorch, TensorRT, or TensorRT-LLM). With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

Cato Networks is the converged network and security cloud for the AI era. As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents. Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide. Cato Networks is looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by Cato Networks, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified. This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums. Responsibilities: • Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends • Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence • Explore large-scale datasets using SQL and other data analysis methods to generate research insights • Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production • Research how attackers use AI and how AI can improve threat detection, investigation, and response • Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights • Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions • Collaborate with product, data, engineering, and research teams to improve detections and product intelligence • Independently lead research initiatives from idea and data exploration to publication and presentation. • Travel internationally for company events and cybersecurity conferences at least six times per year. Requirements: • At least 5 years of hands-on experience in cybersecurity, threat intelligence, security research, or security analysis • Strong understanding of the cybersecurity threat landscape, including threat actors, malware, phishing, C&C, exploitation, cloud threats, and attacker behavior • Proven experience in threat intelligence research, including IOCs, TTPs, MITRE ATT&CK, campaign tracking, and threat actor profiling • Strong data exploration skills, with practical experience using SQL to analyze large-scale security datasets • Experience using AI tools, AI coding assistants, and agentic workflows for research, automation, and data analysis • Ability to build scripts, internal tools, or agentic systems to support threat research and intelligence workflows • Strong technical writing skills, with experience publishing blogs, reports, whitepapers, or public research • Strong presentation skills, with the ability to represent the company at conferences and external events • Self-learner with high curiosity, strong ownership, and the ability to manage complex research independently • Ability to collaborate effectively with cross-functional teams, including product, engineering, and data teams • Fluent English with excellent written and verbal communication skills • Willingness to travel abroad for conferences, customer events, and company events at least six times per year Advantageous: • Experience researching AI threats, LLM abuse, AI-assisted attacks, or AI-powered detection • Experience building agentic systems, automation frameworks, or AI-based research workflows • Background in engineering, backend systems, data infrastructure, or security platform development • Experience with data warehouses, BI tools, notebooks, or large-scale telemetry analysis • Experience with XDR, MDR, SIEM, EDR, NDR, SASE, or cloud security products

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Offensive security The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack. The Role We're hiring an Offensive Security Engineer to join us at Nebius. You'll design and execute adversarial simulation across our cloud platform - attacking the same infrastructure our customers depend on - and translate findings into measurable security improvements. This is a hands-on engineering role within Product Security Team. You will be part of an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack. What you’ll do • Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases. • Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively. • Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack • Conduct targeted assessments of new products and infrastructure changes before they ship. • Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance. • Establish red team processes, tooling, and a methodology that scales as the platform grows. What we’re looking for • 6+ years in offensive security - penetration testing, red teaming, or adversary simulation • Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes. • Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration. • Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar). • Experience running purple team exercises and working constructively with blue teams. • Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use. Nice to have • Experience attacking ML infrastructure, model serving pipelines, or GPU clusters. • Reverse engineering and exploits development experience • Application security experience • Familiarity with eBPF bypass techniques or kernel-level exploitation. • Background in vulnerability research or CVE discovery. • Experience with cloud provider internals (hypervisor/networking layers). • Presenting your security research at conferences like BlackHat/DefCon, etc. Why this role at Nebius • Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale. • Work alongside world-class engineers on infrastructure that powers frontier AI. • Competitive compensation with equity upside in a Nasdaq-listed, high-growth company. • Flexible, remote-first culture Hiring process • Recruiter's chat (30mins) • Live-coding interview (60mins) to asses basic coding skills • Security interview (60mins) to asses domain expertise • Security System Design interview (90mins) to assess practical experience • (Optional) Technical deep dive (90mins) to present a complex and impact project. • Final interview to close the hiring process (45mins) Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Offensive security The internal offensive security team is responsible for the penetration testing program, red team engagements, and offensive research aimed at uncovering sophisticated attack scenarios targeting high-value assets across the Nebius Cloud stack. The Role We're hiring an Offensive Security Lead to build and run Nebius' red team capability. You'll design and execute adversarial simulation across our cloud platform - attacking the same infrastructure our customers depend on - and translate findings into measurable security improvements. This is a hands-on leadership role within Product Security Team. You will build an internal red team, establish a penetration testing program, and conduct research to uncover sophisticated attack scenarios targeting high-value assets across the Nebius tech stack. What you’ll do • Build and lead a red team function within Product Security Team, hiring and developing offensive security engineers. • Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development. Automate routine validations to keep pace with increasing feature flow, reserving manual analysis for genuinely complex cases. • Plan and execute full-scoped red team engagements against Nebius cloud platform - including compute, storage, inference, networking, orchestration layers, and internal tooling. Identify threats, which are able to impact an organization's operations. Work closely with Detection & Response and other security engineering teams to run purple team exercises, validate detection coverage, and close gaps collaboratively. • Research novel attacks against GPU infrastructure (e.g., closed-source firmware and vendor driver binaries, device passthrough exploits, SR-IOV/IOMMU misconfigurations, RDMA/InfiniBand fabric attacks, etc.), the inference stack (e.g., vLLM, TRT-LLM), and AI platform managed services (e.g., managed Slurm). Assess tenant-isolation boundaries and how they can be broken at the low-level stack • Conduct targeted assessments of new products and infrastructure changes before they ship. • Deliver clear, actionable reports for both technical audiences and leadership - with prioritized findings and remediation guidance. • Establish red team processes, tooling, and a methodology that scales as the platform grows. What we’re looking for • 6+ years in offensive security - penetration testing, red teaming, or adversary simulation - with at least 1-2 years leading or mentoring a team. • Deep experience attacking cloud-native environments: Kubernetes privilege escalation, cloud IAM abuse, virtualization and container escapes. • Strong fundamentals across the attack lifecycle: initial access, persistence, lateral movement, data exfiltration. • Proficiency developing custom tooling and post-exploitation capabilities (Python, Go, or similar). • Experience running purple team exercises and working constructively with blue teams. • Ability to write clear, senior-level reports with business-contextualized risk (not just raw findings) that engineers can easily use. Nice to have • Experience attacking ML infrastructure, model serving pipelines, or GPU clusters. • Reverse engineering and exploits development experience • Application security experience • Familiarity with eBPF bypass techniques or kernel-level exploitation. • Background in vulnerability research or CVE discovery. • Experience with cloud provider internals (hypervisor/networking layers). • Presenting your security research at conferences like BlackHat/DefCon, etc. Hiring Process • Recruiter's chat (30mins) • Live-coding interview (60mins) to asses basic coding skills • Security interview (60mins) to asses domain expertise • Security System Design interview (90mins) to assess practical experience • (Optional) Technical deep dive (90mins) to present a complex and impact project. • Final interview to close the hiring process (45mins) Why this role at Nebius • Build a red team from scratch at a company operating frontier AI infrastructure. • Attack surface that's genuinely novel - GPU clusters, AI platforms, multi-tenant cloud at scale. • Work alongside world-class engineers on infrastructure that powers frontier AI. • Competitive compensation with equity upside in a Nasdaq-listed, high-growth company. • Flexible, remote-first culture #LI-CP1 Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey? As an Offensive Security Engineer, you will spearhead JFrog’s offensive security operations and lead advanced threat research initiatives, playing a pivotal role in safeguarding our organization and customers from evolving cyber threats. You will develop and execute Red Team exercises, simulate real-world attacks, and identify security weaknesses in JFrog’s systems and applications. We seek a highly skilled, proactive tech leader who thrives in challenging environments and is passionate about advancing security research and offensive strategies. As an Offensive Security Engineer, you will… • Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against JFrog’s infrastructure and cloud environments. • Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities. • Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving JFrog’s security posture. • Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses. • Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises. • Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning. • Participate in incident responses when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation. • Continuously assess and improve security processes, playbooks, and threat detection mechanisms. To be an Offensive Security Engineer at JFrog, you need… • 7+ years of experience in offensive security operations, Red Teaming, threat hunting, or threat research • Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies • Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development • Strong experience with cloud platforms (AWS, GCP, Azure) and containerized environments (Kubernetes, Docker) • Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios • Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation • Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis • Ability to effectively communicate and collaborate with cross-functional teams, translating complex security concepts into actionable insights • A passion for continuous learning, research, and innovation in the fields of offensive security, threat hunting, and cyber threats

Description We are a fast-growing stealth cyber startup, backed by Team8, on a mission to solve one of the most critical challenges in the modern cyber landscape. We are looking for a brilliant Founding Vulnerability Researcher to join our core R&D team and help shape the technical heart of our product from the ground up. Role description We are looking for a strong offensive security researcher to join our core team, become a true partner in building the product end-to-end, and take a key role in shaping our research methodology, technical direction, and product capabilities. This is a hands-on role in a small team, sitting at the intersection of world-class offensive research and core agentic AI research — with a lot of responsibility, autonomy, and influence over the technical and business direction. What you will do • Discover novel vulnerabilities, attack primitives, and exploitation techniques across various surfaces. • Build reliable, weaponizable proof-of-concepts that hold up in real production environments. • Translate offensive techniques and original research into real product capabilities. • Develop methodologies that mirror how top attackers actually operate end-to-end. • Stress-test the product against hardened targets and push the ceiling of what it can do. • Represent the company in the research community through talks, papers, and disclosures. Requirements • 5+ years of hands-on experience in offensive security research or exploit development. • Demonstrable track record of offensive work — previous roles, bug bounty, CTF reputation, published CVEs, or original research. • Deep expertise in at least one offensive domain — web/app vulnerability research, cloud, identity, kernel/OS internals, network protocols, or AI/LLM security. • Comfortable in Python, Go, or Rust, with the ability to ship research into production-quality code. • Comfortable with ambiguity and zero-to-one work; founding DNA and a strong sense of ownership. • High proficiency in English, written and spoken. • Based in Tel Aviv, in-person — this is a founding team role.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you. This is an opportunity to join an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their cloud environments. Key Responsibilities • Contribute to a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud infrastructure. • Drive the execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments. • Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms. • Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts. • Simulate real-world attacks and perform deep behavioral analysis to inform and validate detection content. • Collaborate across engineering, product management, and go-to-market teams to deliver impactful security solutions. • Share insights with the security community through blogs, conference talks, and publications. Qualifications Required Qualifications • 5+ years in security research with a proven track record of driving impactful projects. • Deep expertise in cloud-native security, with strong focus on AWS, Azure, and GCP. • Experience developing or working with detection and response products, such as XDR, EDR, or cloud workload protection platforms. • Excellent communication skills, with the ability to articulate complex research findings and drive alignment across diverse teams. • Proficient in hands-on coding and scripting (e.g., Python). • Direct experience conducting penetration testing and red team assessments against cloud infrastructure (AWS, Azure, or GCP) Preferred Qualifications • Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow). • Familiarity with cloud threat modeling frameworks (e.g., MITRE ATT&CK for IaaS). Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Security Researcher to join our Windows EDR behavioral detection team. You will create statistics-based classification algorithms to detect new malware, process behavior anomalies, and attackers in enterprise networks using data from multiple Windows endpoints. This involves analyzing attack patterns, finding statistical anomalies, and validating detections against real attacks and APTs on customer data. Key Responsibilities • Research new methods to detect various attack techniques by utilizing enormous amounts and varied types of data. • Use and develop statistical algorithms and techniques to create and improve our analytics detection capabilities. • Take an active role in our collection modules by improving existing ones and investigating new ones to improve detection quality. • Simulate attacks in the lab and conduct a deep analysis of the behavior. • Be part of a diverse research group, improving our research processes to create a better product. • Stay up to date with APTs, attacker methodologies, and TTPs. Qualifications Required Qualifications • In-depth knowledge of the inner-workings of operating systems (Especially Windows). • Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise networks. • Vast experience and interest in malware research or development. • Python software development experience. • Comfortable conducting research and gathering insights by querying large databases. • Ability to drive and own projects. • Independent and team player, critical thinker. Preferred Qualifications • Experience in machine learning or data analysis. • Reverse engineering knowledge and experience. • Advanced knowledge of Microsoft AD infrastructure. • Exploitation knowledge and experience. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary As a Principal Security Researcher , you will act as an architect for the Autonomous SOC, focusing directly on Cortex AgentiX. You will design and build intelligent, automated investigation and remediation agents that empower thousands of customers to secure their environments at scale. We are looking for a practitioner who combines deep hands-on expertise investigating threats and protecting organizations with a pragmatic approach to solving complex security challenges. Key Responsibilities • Develop in-product specialized agents to accelerate detection, respond to real-time threats, prioritize, and mitigate risks. • Establish guardrails, continuous evaluation metrics, and deterministic controls for agentic AI, ensuring complex multi-step plans execute reliably. • Drive the complete product development lifecycle, encompassing definition, design, implementation, and testing phases. • Partner cross-functionally with product management, engineering, and research teams. Qualifications Required Qualifications • 10+ years of hands-on experience securing enterprise organizations. • Proven track record in DFIR and threat hunting, including containing and remediating complex security incidents using dozens of tools. • Practical experience utilizing industry standard frameworks, such as MITRE ATT&CK, for threat modeling. • Coding proficiency, preferably Python. • Advanced expertise leveraging AI capabilities for cybersecurity. • Exceptional analytical and problem-solving skills with a demonstrated ability to resolve complex challenges. • Excellent written and verbal communication skills to effectively collaborate with cross-functional teams. Preferred Qualifications • Experience with Agentic AI SOC and Security Orchestration, Automation, and Response (SOAR) platforms, preferably Cortex XSOAR/XSIAM. • Relevant security certifications, such as CISSP. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Security Researcher to join our research group as part of a growing team developing Autopilot, an innovative product for autonomous investigation and response. As a core member of the team, you'll go beyond research: you’ll research, design, and develop investigation modules that allow Autopilot to autonomously detect, investigate, and respond to advanced threats at a massive scale. You’ll analyze everything from new malware behaviors to attacker techniques and process activity in enterprise-scale networks, using data collected from across millions of endpoints. Your work will span identifying attack patterns and uncovering statistical anomalies, as well as validating that the system responds effectively to real-world attacks and APT campaigns using production data. Key Responsibilities • Research and implement new autonomous methods for investigating and responding to targeted attackers, using large-scale, diverse security datasets • Develop and design the graph-based algorithms that power autonomous investigation and decision-making capabilities • Design automated incident response by developing reusable logic that transforms raw security data and alerts into clear, actionable insights. • Leverage graph algorithms, AI techniques, and statistical methods to mimic and scale human security analyst workflows • Conduct deep, hands-on investigations into modern malware, APTs, and complex attack flows to inform detection and response logic • Stay up to date with attacker methodologies, tools, and techniques (TTPs), ensuring our product remains effective against evolving threats • Contribute to a collaborative, fast-paced research team, helping shape our research strategy, improve processes, and continuously enhance the product Qualifications Required Qualifications • 5+ years of experience in security or threat research, in which you conducted deep research with actionable insights and real-world impact. • Proven experience as part of an R&D/development team, along with strong proficiency in Python programming • Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise networks • Comfortable working with large-scale datasets to extract meaningful insights through advanced analysis • Strong sense of ownership and ability to independently drive projects from concept to execution • Critical thinker who thrives both independently and in collaborative team environments • Excellent verbal and written communication skills • A cybersecurity professional driven to solve the next generation of security challenges. Preferred Qualifications • In-depth knowledge of the inner workings of operating systems (especially Windows) • Experience working with graph DB and algorithms • Experience in statistics, advanced data studies, or machine learning. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are seeking a Senior/Principal Linux Security Researcher for our Tel Aviv R&D center to advance our Cortex-XDR Agent for the Linux platform, which provides runtime protection to servers and cloud workloads. In this role, you will be a key member of a team responsible for researching, developing, and improving our Anti-Exploit and Anti-Malware capabilities. Your work will involve deep exploration of OS internals, exploits, malware, delving into cloud security, and finding ways to mitigate new attack vectors. Key Responsibilities • Research, develop, and improve state-of-the-art endpoint security solutions focused on comprehensive prevention. This includes broad defense against attack classes like malware and exploits, spanning from low-level mitigations to application-level security • Research Linux OS internals, kernel, application codebases, vulnerabilities, malware and exploits • Respond to security events coming from customers, in the context of malware and exploitation prevention Qualifications Required Qualifications • In-depth knowledge of some operating system internals is a must - Knowledge of Linux is an advantage • Development experience in C/C++/Rust is a must, 3 years at least • Experience in security research - 3 years at least • Experience in reverse engineering - both static and dynamic, is a must (x86/64 architectures), 3 years at least • Development knowledge in some scripting languages is a must - Experience with Python is an advantage • Ability to work independently and as a part of a team • Strong attention to detail • Ability to take initiative Preferred Qualifications • Exploitation experience is an advantage (either application-level security or memory corruption) • Familiarity with Kubernetes, containers, and cloud workload security. • Experience leading endpoint security projects across organizational boundaries and teams • Academic experience • Published security research, conference presentations, or CVEs. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are seeking a visionary and highly technical Principal / Sr. Principal Security Researcher to join our security research team. In this role, you will be at the forefront of innovating automated defense systems to rapidly protect platform customers against advanced cyber threats at an unprecedented scale. This position offers a unique opportunity to blend deep traditional cybersecurity expertise - including OS internals, reverse engineering, and advanced detection engineering with cutting-edge AI technologies like LLMs, SLMs, and agentic workflows. You will spearhead the creation of innovative prevention solutions, leveraging massive streams of agent telemetry to design AI-driven logic that neutralizes threats before they execute. As a key technical leader, you will partner closely with top-tier data scientists and product engineers to translate cutting-edge security research into production-grade capabilities, ensuring we stay ahead of the evolving threat landscape. Key Responsibilities • Develop Automated Defense Systems: Create, engineer, and deploy automated solutions for the prevention and detection of advanced cyber threats, analyzing complex data to rapidly protect platform customers at scale. • Innovate with AI: Partner closely with data scientists to leverage LLMs, SLMs & deeplearning techniques to fuel these advanced prevention solutions and automated defense capabilities. • Enhance Palo Alto Networks Agentix: Research, develop, and continuously improve the Agentix solution. Drive the development of next-generation security content by designing and implementing specialized AI agents to automate security operations and workflows. • Drive Security Innovations: Spearhead new research initiatives from the ground up. Act as the primary driver across key stakeholders, leading top-tier data scientists and engineers to ensure the successful delivery of enterprise-grade security capabilities. Qualifications Required Qualifications • 5+ years of hands-on experience in the cybersecurity research field. • Threat Research & OS Internals: Proven track record of applying deep cyber and analytical expertise to build robust security logic using endpoint telemetry. Supported by a profound understanding of Windows and Linux OS/kernel internals to engineer advanced defenses. • Reverse engineering experience: Demonstrated expertise in reverse engineering (e.g., IDA Pro, Ghidra) across multiple platforms to dissect malware and identify sophisticated attack vectors. • Programming & Native Code Comprehension: Strong proficiency in Python for data analysis and rapid prototyping, combined with the ability to comprehend native code (C, C++, or Rust) to effectively read and interpret agent code, low-level system interactions, and memory operations. • End-to-End Research Ownership: A scientific, data-driven approach to solving complex security challenges, with a proven track record of owning research initiatives from initial ideation through to the deployment of production-grade capabilities. • Communication & Mentorship: Excellent communication skills, with the ability to clearly articulate complex threat research to diverse audiences, mentor junior team members, and champion security initiatives across the organization. Preferred Qualifications • AI Agents & Frameworks: Hands-on experience developing and working with AI Agents and agentic workflows. Technical understanding of the architectural distinctions between an agent, a skill, and Model Context Protocol (MCP). Proven experience utilizing common agentic frameworks. • Data Scale & Telemetry Analysis: Proficiency in query languages (e.g., SQL) and big data platforms (e.g., GCP) to parse, manipulate, and query large-scale agent telemetry, extracting actionable security insights and uncovering threat patterns from massive datasets. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary We are looking for a Senior Security Researcher to join our Identity Threat Detection and Response team. In this role, you will research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities. You will focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale. Additionally, you will collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats. Key Responsibilities • Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments. • Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior. • Develop and refine statistics-based classification algorithms and techniques to create and improve detection models. • Research specific scenarios to enhance our model's capabilities. • Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product. • Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats. Qualifications Required Qualifications • At least 5 years’ experience with Active Directory security and identity related attacks. • In-depth knowledge of the inner-workings of operating systems. • In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc. • In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc. • Ability to drive and own projects from start to finish. • Independent and a team player, a critical thinker. Preferred Qualifications • 2+ years of experience with Entra ID (formerly Azure AD) or SAAS application. • At least 2 years of experience coding in Python. • Strong knowledge of SQL language. • Experience with red-teaming / pentesting of Entra ID. • Experience with machine learning, data analysis, cloud infrastructure, or security. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Job Details: Job Description: We are looking for a senior security researcher to lead advanced vulnerability research in confidential computing technologies. This role combines deep technical expertise with organizational leadership — spanning exploit development, architecture reviews, and executive-level influence on product security strategy. What You'll Do • Lead complex vulnerability research across firmware, software, virtualization, and hardware security domains • Conduct architecture security reviews, threat modeling, secure code reviews, and red team assessments • Develop innovative analysis techniques, fuzzing frameworks, and security research tools • Communicate complex technical findings to executives, engineering leaders, and external stakeholders • Mentor and develop security researchers at various experience levels What We're Looking For • Passion for security research and a demonstrated attacker's mindset • Strong technical leadership with the ability to influence without direct authority • Proven experience leading ambiguous, high-impact technical investigations • Ability to balance hands-on technical work with strategic leadership responsibilities Qualifications: • 4+ years of experience in security research, offensive security, or a related field. • Proven track record of identifying significant security vulnerabilities and driving remediation • Demonstrated experience leading complex security research or offensive security projects • Degree, or equivalent experience, in Computer Science, Computer Engineering, or a related field • Extensive hands-on experience in C/C++ software development and security analysis • Deep understanding of modern security principles, attack techniques, and defensive technologies • Experience influencing technical decisions across multiple teams or organizations • Strong analytical, technical leadership, and communication skills • Fluency in English Preferred Qualifications: • Experience in penetration testing, fuzzing, reverse engineering, exploit development, and static code analysis • Expertise in embedded software and firmware security • Deep understanding of OS internals, virtualization technologies, and compiler behavior • Experience with hardware security, side-channel analysis, or trusted execution environments • Knowledge of Intel Architecture and virtualization technologies (VMX/TDX) • Strong understanding of cryptographic principles and secure system design • Track record of published research, CVEs, conference presentations, or other industry-recognized security contributions Job Type: Experienced Hire Shift: Shift 1 (Israel) Primary Location: Israel, Haifa Additional Locations: Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Position of Trust N/A Work Model for this Role This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. * Job posting details (such as work model, location or time type) are subject to change. *

Description Upwind is a next-generation cloud security platform that uses runtime context to identify and prioritize the risks that actually matter. Our eBPF-powered sensors and agentless posture discovery give us a unique view of cloud environments- from the first commit to the running workload We're looking for a Cloud Security Researcher to join the platform research team. This is a chance to shape the platform end to end- expand what it sees, define how it thinks about risk, and build the AI systems that act on what it finds What You'll Do • Integrate new systems and domains- from cloud to shift-left tooling and AI providers- model their data, analyze and enrich it with context from across the platform to generate meaningful insights • Map risk vectors, build threat models, and translate them into actionable posture recommendations • Define how the platform should reason about risk, advancing posture management beyond static rules toward dynamic approaches like graph traversal and reachability analysis • Shape how AI is applied on top of the platform's findings - from agentic systems for insight, context analysis, and remediation to smarter prioritization and prevention • Lead research initiatives end-to-end, working with product and engineering to turn them into shipped capabilities Requirements • 5+ years in security research, cloud security, or DevSecOps • Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure), including its identity and data services • Strong understanding of modern DevOps environments: CI/CD pipelines, Infrastructure-as-Code, containers, and Kubernetes • Hands-on coding skills (e.g., Python) and comfort with query languages (e.g., SQL) and reasoning about data flows. • Ability to own research initiatives end-to-end in a fast-moving environment • Excellent written and spoken English Advantages • Experience building AI/LLM-based or agentic systems, or securing AI/ML pipelines • Experience with DSPM, data classification, or data security tooling • Background in supply chain security (SBOM, dependency and artifact security) • Open-source contributions, published research, or conference talks

Description Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences. Key Responsibilities • Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities. • Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks. • Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems. • Author high-quality technical blogs, whitepapers, and vulnerability reports. • Represent the company by speaking and participating in leading global security conferences. Requirements • Experience: 6+ years of proven experience in Offensive Security, Vulnerability Research, or Web Application Security. • Proven Track Record: Demonstrated background in discovering and disclosing vulnerabilities (e.g., published CVEs, strong bug bounty profiles, or independent research). • Technical Proficiency: Strong programming and scripting skills in languages such as Python, Go, C/C++, or Rust to build custom exploits and tooling. • Cloud/AI Knowledge: Solid understanding of modern Cloud environments (AWS, GCP, or Azure) and a foundational understanding of AI/ML architectures and their unique attack surfaces (e.g., LLM vulnerabilities, model poisoning). • Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical findings into clear business value for clients. Advantages • Low-Level Expertise: Proven background in low-level exploitation (e.g., binary analysis, reverse engineering, memory corruption vulnerabilities).

Job Description • Research the security of AI systems end to end, from the agents and frameworks they're built on to the runtimes and infrastructure that run them • Take apart complex software and find where it breaks • Turn a vulnerability into a full, working exploit, not just a proof that the bug exists • Understand the defenses modern systems lean on, and how to get past them • Share what you find, through coordinated disclosure and conference talks Qualifications • 4+ years in security research, vulnerability research, or a closely related field • A strong sense of how software works under the hood, whether that's a modern framework or the system underneath it • Comfortable reading complex code, and reverse engineering with IDA Pro or Ghidra when there's no source • Working knowledge of common vulnerability classes, from unsafe deserialization and logic flaws to memory corruption, and the experience to take one all the way to a working exploit • Excited about AI, and eager to get to its security problems first • Real curiosity, and the drive to go deep when the answer isn't obvious Nice to have • Experience researching AI systems, agent frameworks, or the infrastructure behind them • Published research, whether CVEs, blog posts, or conference talks • A degree in computer science, mathematics, or engineering, or the hands-on experience to match

Job Description We are looking for an exceptional researcher at the intersection of artificial intelligence and cybersecurity. This role is intended for someone who combines deep security expertise with a practical understanding of modern AI systems and the curiosity to explore how they can be attacked, abused, and defended. Key Responsibilities • Research vulnerabilities, attack techniques, and emerging security risks in AI models, agents, applications, and supporting infrastructure. • Develop innovative attacks, proofs of concept, evaluation methods, and defensive solutions. • Analyze how model behavior changes across problem domains, task structures, prompts, tools, resources, harnesses, and model architectures. • Translate research findings into clear security requirements, technical concepts, publications, and practical protections. • Present original research at leading international cybersecurity conferences. • Maintain a strong understanding of developments across the AI and cybersecurity landscapes. • Collaborate with security researchers, AI engineers, product teams, and other stakeholders to turn research into measurable impact. Qualifications • Strong cybersecurity background in reverse engineering, vulnerability research, cryptanalysis, malware research, or a similar advanced discipline. • Passion for AI and up-to-date knowledge of leading models, technologies, organizations, and emerging capabilities. • Solid understanding of modern AI concepts, including transformers, attention, RoPE, gradient descent, fine-tuning, RLHF, RLVR, inference, and agentic systems. • Ability to independently identify valuable research questions, design experiments, build proofs of concept, and validate findings. • Strong programming and rapid-prototyping skills. • Excellent writing, communication, and presentation skills, including the ability to clearly define requirements and introduce new technical concepts. • Ability and motivation to present original research at top-tier international cybersecurity conferences. Advantages • Experience researching AI security, LLM vulnerabilities, prompt injection, model behavior, AI agents, or adversarial machine learning. • Experience developing or evaluating AI-powered security systems. • A record of security publications, vulnerability disclosures, or presentations at leading security conferences. • Experience transforming research findings into production-grade security capabilities. • Familiarity with AI evaluation frameworks, inference infrastructure, model internals, and agent orchestration.

Job Description The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research. About the group: The Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale. About the position: Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments. You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers. This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity. What you'll do: • Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure • Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis • Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on • Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails • Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on • Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays • Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage • Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks Qualifications • 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research • Real exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact • Comfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point • Strong scripting and automation skills (Python preferred) • Clear written communication. You can explain a complex attack chain to an engineer and to a CISO Strong advantage • A consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it • Broad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side • Experience with template-based or automated scanning frameworks (for example, Nuclei) • Detection engineering experience (Snort/Suricata, YARA, SIEM detection logic) • Experience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work Nice to have • Offensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research Additional Information Why join us • Impact at scale. A technique you capture once runs across thousands of customer environments • A new category. Agentic exposure validation is being defined right now, and you help define it • A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world