Security Researcher jobs in Israel

Job Description The Exposure Management Research Group at Check Point Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research. About the group: The Exposure Management Research Group is the research arm behind Check Point's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale. About the position: Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments. You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers. This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity. What you'll do: • Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure • Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis • Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on • Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails • Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on • Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays • Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage • Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks Qualifications • 2+ years of hands-on offensive security experience: red teaming, penetration testing, or offensive research • Real exploitation depth beyond confirming vulnerabilities, including exploit chaining, privilege escalation, lateral movement, and showing business impact • Comfort with the non-deterministic side of offense: business logic flaws, misconfigurations, credential and token abuse, and using information disclosure as an entry point • Strong scripting and automation skills (Python preferred) • Clear written communication. You can explain a complex attack chain to an engineer and to a CISO Strong advantage • A consulting background covering many customer environments, not one internal estate. You know what customers value in an engagement deliverable and how to present it • Broad exposure to defensive technologies, security controls, and vendors, and an understanding of what attacks look like from the defender's side • Experience with template-based or automated scanning frameworks (for example, Nuclei) • Detection engineering experience (Snort/Suricata, YARA, SIEM detection logic) • Experience working with large language models (LLMs) or agentic AI workflows, or a strong interest in shaping how AI systems do offensive work Nice to have • Offensive certifications (OSCP, OSEP, OSWE, CRTO, or similar), public CVEs, conference talks, or published research Additional Information Why join us • Impact at scale. A technique you capture once runs across thousands of customer environments • A new category. Agentic exposure validation is being defined right now, and you help define it • A strong research bench. You work next to threat intelligence, vulnerability research, and data science researchers at one of the largest cyber security companies in the world

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here. About Us SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity. What Are We Looking For? We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes. As a Staff AI Security Researcher, you will be tasked with leading efforts identifying and understanding security risks unique to AI systems. Investigate demonstrate attacks - prompt injections, jailbreaks, data leakage, agentic workflow hijacking and architecture/ecosystem flaws (plugins, connectors, MCPs, skills). Translate findings into detections and safeguards, and help build our agentic detection and response capabilities from the ground up. What Will You Do? Primary responsibilities include: • Conduct advanced research to identify vulnerabilities within AI (LLMs, SLMs) models, agentic systems and their infrastructure, including prompt injection, jailbreaking, data exfiltration, and misuse vectors. • Build threat models for emerging AI capabilities and deployment surfaces (agents, tool use, multimodal systems). • Innovate and design novel methodologies and automated tools to systematically and continuously probe AI security mechanisms at scale. • Partner with engineering and product teams to translate research findings into our Agentic Detection and Response offering. • Stay informed on the latest academic, industry and threat landscape trends on adversarial ML, agentic and AI security. • Mentor other researchers and engineers and help grow the team's technical capabilities. • Publish research findings internally and externally through papers, blog posts, or industry conferences. What Skills and Knowledge Will You Bring? Ideal candidates will have: • 6+ years of experience in offensive research, red teaming or pentesting, with focus on AppSec or Identity. • Hands-on experience with adversarial techniques against AI (LLMs, SLMs) and ML systems - prompt injection, jailbreaking, membership inference, model extraction, data poisoning, etc. • Good understanding of identity/access management (IAM) protocols and tools. • Familiarity with agentic attack taxonomies such as OWASP Top 10 for LLMs and MITRE ATLAS. • Proficiency in programming and scripting languages (Python, JavaScript and Java) and Cloud environments (AWS, GCP, Azure, Kubernetes). • Technical writing & content development skills. • Publication record or demonstrable body of work in security research, adversarial ML, or AI safety (papers, disclosed vulnerabilities, open-source tools, etc.) - advantage. • Experience in leading cross-functional technical initiatives - advantage. Why SentinelOne? AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place. We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family: Equity & Rewards • Restricted Stock Units (RSUs) • Employee Stock Purchase Plan (ESPP) Time Off & Wellbeing • Competitive leave benefits • Gender-neutral parental leave • Employee Assistant Program • Workout sessions and a Wellness App Insurance & Financial Security • Medical and insurance benefits • Pension • Employee Assistance Program (EAP) Work Perks & Flexibility • Global home office allowance • Mobile phone reimbursement • Study Fund SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. SentinelOne participates in the E-Verify Program for all U.S. based roles. To learn more about how we use AI in our hiring process, please review our AI in Hiring Candidate Disclosure.

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: The Android research group in Cellebrite Security Research Labs (SRL) is where the most challenging problems get solved. We're the ones who find the weaknesses that let us unlock modern phones and turn them into extraction capabilities investigators can actually use in the field. Our work ships straight into Cellebrite's core products, which makes this one of the most important roles in the company. Our customers are law enforcement agencies working real cases under legal authority: child exploitation, human trafficking, homicide, terrorism. A device we unlock is often THE piece of evidence that moves an investigation forward. What you'll do Perform vulnerability research on a huge variety of mobile technologies and architectures, from the application layer down through the kernel, TrustZone, the bootloader, and the firmware running underneath it. Go first into areas nobody has published and become a world-class expert in them. Reverse engineer code that was never meant to be read: no source, no symbols, no documentation. Turn bugs into exploits that hold up in the real world, across a wide range of chipsets, vendors, and OS versions. Conduct long term widely scoped security research projects as part of a broader team effort Requirements Qualifications Practical experience performing vulnerability research and exploitation Practical reverse engineering experience Practical knowledge of current and upcoming security mitigations Advantage: knowledge of Android architecture and internals Advantage: LLM-based pipelines for vulnerability research / exploit development / fuzzing Advantage: Cryptographic primitives and weaknesses Advantage: ARM Reversing Advantage: Advanced fuzzing Advantage: Offensive hardware research/board design #LI-AS1

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: Cellebrite is seeking talented researchers to join our industry-leading Digital Intelligence Security Research Labs. As a security researcher on our team, you will focus on identifying vulnerabilities within Apple’s ecosystem and developing innovative exploit strategies to gain access to iPhones and other devices, enabling the extraction of crucial evidence for law enforcements. Key responsibilities: • Research on territories with little-explored vulnerability • Work on the production of world-unique capabilities to extract evidence from phones and other embedded devices. • iPhones and other iOS devices present tough challenges from a forensics perspective and involve hardware-backed encryption (SiDP), secure crypto coprocessor (SEP), and secured boot chain (SecureROM). • New iPhones present state-of-the-art exploit mitigations such as PAC, KTRR, and PPL. • Become a member of Labs Group, focusing on Security Research for mobile devices. • Execute your own (shell) code on top-notch technology mobile platforms hardened with challenging mitigations • Collaborate with a team of passionate researchers dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. • Take part in world-class research results, assisting law enforcement by enabling lawful evidence extraction, and putting criminals behind bars every day. Requirements • Proven vulnerability research experience (preferably in iOS) • Experience with advanced exploitation techniques • ARM reverse engineering • Cryptographic primitives and weaknesses • Hardware research/board design - Advantage • You are a security researcher who cares about the ethical values of your work • You love the art of engineering and crafting a platform-wide native payload, in a fragmented ecosystem of gaping variance • You are passionate about technology and keen to use your skills to make the world a safer place. NOTE: The position is located in our offices in Tel Aviv #LI-AS1

Description Company Overview: Cellebrite’s (Nasdaq: CLBT) mission is to enable its global customers to protect and save lives by enhancing digital investigations and intelligence gathering to accelerate justice in communities around the world. Cellebrite’s AI-powered Digital Investigation Platform enables customers to lawfully access, collect, analyze and share digital evidence in legally sanctioned investigations while preserving data privacy. Thousands of public safety organizations, intelligence agencies and businesses rely on Cellebrite’s digital forensic and investigative solutions—available via cloud, on-premises and hybrid deployments—to close cases faster and safeguard communities. To learn more, visit us at www.cellebrite.com, https://investors.cellebrite.com/investors and find us on social media @Cellebrite. Position Overview: As a talented researcher, you will be joining the industry’s leading digital intelligence Security Research Labs group. In this position you will be taking part and leading new projects in little-explored vulnerability research territories, producing world-unique capabilities to extract evidence from phones and other embedded devices. Recent phones (from burner phones to the latest flagships) are increasingly challenging from a forensics perspective, and involve hardware-backed encryption (FDE/FBE), secure boot chains (Verified Boot/dm-verity), evolving hardened SELinux policies, as well as adventures in ARM TrustZone secure worlds. Key Responsibilities: You will join Cellebrite’s digital intelligence Security Research Labs Group and be a part of a team of passionate researchers, dedicated to solving modern digital intelligence challenges, years ahead of others in the industry. Our world-class research results assist law enforcement by enabling lawful evidence extraction, and putting criminals behind bars, every day. You are a security researcher who cares about the ethical use case for his/her work, and if the art of engineering and crafting a platform-wide native payload in a fragmented ecosystem of gaping variance is the kind of challenge you appreciate, you belong with us. We need your help to make the world a safer place. Qualifications: • Practical experience performing vulnerability research and exploitation, preferably in mobile or other modern environments, eg. Windows/Linux/iOS/MacOS • Practical reverse engineering experience, preferably in ARM / TrustZone / Hypervisors • Advantage: Cryptographic primitives and weaknesses • Advantage: Advanced fuzzing • Advantage: Offensive hardware research/board design • Advantage: Experience dealing with modern memory corruption mitigations, such as PAC and MTE. #LI-AS1