Security Researcher jobs in Israel

Description Paragon is on a mission to transform the world of cyber intelligence. Based in Tel Aviv, our innovative team is made up of top-tier talent who are passionate about making an impact. At Paragon, you’ll find the freedom to think boldly, collaborate with purpose, and grow alongside a team united by a shared mission — striving for excellence, and always looking out for one another. We are looking for highly motivated candidates to join our exceptionally talented and passionate research group that constantly challenges the boundaries of what’s possible. In this role you will have the opportunity to take part in world-class vulnerability research, solve incredibly complex and satisfying technological challenges, learn all the time from the best researchers in the industry, and join us on our journey to engineer a safer future! We look for candidates who are: • Passionate: care deeply about the technology challenges, strive for excellence, determined to make a meaningful impact • Curious: learn rapidly and eagerly; ask “why?” and “what if?” a lot • Innovative: think outside the box, challenge the prevailing assumptions, create new ideas • Collaborative: understand that truly great achievements come from great teamwork, enjoy collaborating with others and eager to share the journey with us • Hands-on: able to hack and dissect new technology, rapidly implement and verify ideas and translate them to working code Requirements Experience in one or more of the following areas: • Vulnerability research • Advanced exploitation techniques • Deep knowledge of complex low-level system mechanisms (kernel, networking, services, operating systems, embedded etc.)

Description Paragon is on a mission to transform the world of cyber intelligence. Based in Tel Aviv, our innovative team is made up of top-tier talent who are passionate about making an impact. At Paragon, you’ll find the freedom to think boldly, collaborate with purpose, and grow alongside a team united by a shared mission - striving for excellence, and always looking out for one another. We are a young innovative company with a cutting-edge product based in Tel Aviv. We are looking for an experienced Security Researcher to join us in building a new research team that will help detect and overcome product security challenges. As part of the role, you will make a deep dive into the mobile security world. You will have the opportunity to research the latest security mitigations, solve incredibly complex and satisfying technological challenges and learn all the time from the best researchers. Responsibilities • Lead and mentor a team of low-level researchers, providing technical guidance, knowledge sharing, and professional development. • Drive complex reverse engineering efforts across a variety of operating systems and technologies. • Define research priorities, identify new investigation areas, and help shape the team's technical roadmap. • Design and execute deep technical investigations to uncover security mechanisms, operating system internals, and adversary techniques. • Collaborate closely with cross-functional teams, translating research findings into actionable insights and long-term strategic value. • Serve as a technical focal point for challenging research problems, helping the team overcome obstacles and reach effective solutions. • Promote research excellence, high technical standards, and a culture of curiosity, innovation, and continuous learning. • Stay up to date with emerging technologies, operating systems, and security trends to maintain the team's technical edge. Requirements • 6+ years of experience as a Low-Level Researcher, Security Researcher, Reverse Engineer, or similar role. • 2+ years of experience leading projects, mentoring engineers, or managing a technical team. • Proven experience in reverse engineering using IDA Pro, Ghidra, or similar tools. • Deep understanding of Unix-like operating system internals. • Deep understanding of operating system mechanisms and their interaction with security technologies and research domains. • Strong analytical and problem-solving skills, with the ability to tackle complex technical challenges. • Demonstrated ability to learn independently and quickly adapt to new technologies and domains. • Excellent communication skills and the ability to lead technical discussions across teams. Advantages • Experience with ARM assembly language. • Experience with debugging and instrumentation tools such as Frida and GDB. • Strong programming skills in languages such as C, C++, Rust, or Python. • Experience leading research initiatives or building research methodologies.

About Irregular Irregular is the first frontier security lab with the mission of protecting the world in the time of increasingly capable and sophisticated AI systems. We build next-generation defenses through high-fidelity research platforms that simulate and monitor real-world AI security scenarios. As AI systems become more powerful, we focus on staying ahead of emerging threats and vulnerabilities, ensuring these transformative technologies can be deployed safely and securely. About the Role As a cyber researcher at Irregular, you will be at the forefront of research on AI security. You will engage with questions such as how to protect the weights of an advanced model against cyber threats, and how to evaluate cyber capabilities such as AI’s ability to exploit vulnerabilities, carry out network attacks, and develop malware. This role sits at a unique intersection of cybersecurity expertise and AI capabilities, where your background in vulnerability and security research will help shape the future of AI security. Representative projects: • Expanding the quantity, quality, and variety of our cyber capabilities evaluation challenges (e.g. constructing original CTF-style vulnerability & exploitation challenges, network attack simulation challenges, and more, including original types of challenges). • Leading research into methods to mitigate cybersecurity risks related to the misuse of AI, the theft of model weights, or risks associated with integrating models with dangerous capabilities in AI agents. • Publishing your research and/or delivering research to our customers. • Advising and supporting the development of the products we’re building. Representative research questions about AI frontier models: • Can an AI find and exploit 0-days? • What’s the best way to measure a CTF challenge's difficulty level vs. an AI player's skill level? • Can an AI elevate an average computer science student’s cyber capabilities to that of a nation-state? You may be a good fit if you: • Have a strong background in vulnerability/security research & development such as having found vulnerabilities/CVEs, analyzed malware, researched detection methods for attacks, developed pentesting products or other attack tools, participated in CTF competitions or authored CTF challenges, or participated in other types of security research & development. • Work well in a multidisciplinary team and can adapt to rapidly evolving challenges. • Care about the societal impacts of your work.

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: CrowdStrike Intelligence is seeking a motivated security researcher with excellent technical skills to join the Advanced Research Team (ART). Security Researchers within ART will be expected to apply a broad set of skills to support the CrowdStrike Intelligence mission. ART is responsible for researching and publishing on topics related to information security, providing technical expertise to other teams within CrowdStrike Intelligence, developing tools to support analysts in their day-to-day duties, and collecting technical artifacts about adversary activity. Aside from working on longer-term research and collection projects, ART security researchers will be required to provide unique solutions on short notice to serve ad-hoc needs by other teams within CrowdStrike Intelligence. What You’ll Do: • Develop automated solutions for collecting, processing and analyzing data at scale, e.g. • Vendor patch processing and analysis • Identification of exploits in large file collections • Identification of browser exploits • Identification of malicious infrastructure • Perform vulnerability research on a wide variety of targets, e.g. • Analyze vendor patches to identify vulnerabilities and develop proof-of-concept exploits • Review evidence of malicious activities (e.g. log files, payloads) to confirm exploitation of 0-day and n-day vulnerabilities, identify root causes and reproduce exploits • Identify new vulnerabilities in applications or products • Collaborate across other teams at CrowdStrike Intelligence and beyond to • Reproduce emerging vulnerabilities and provide actionable technical information • Inform on information security topics • Satisfy unique technical collection requirements • Publish research results on the CrowdStrike blog or at conferences What You’ll Need: • Proficiency in English, both written and spoken • Strong information security background with 4+ years experience • Vulnerability research and exploit development experience • Ability to effectively leverage GenAI/LLMs to aid in software development and perform vulnerability research • Reverse engineering experience • Solid understanding of Microsoft Windows and Linux operating system internals • Solid software development experience (Python preferred) • Excellent problem solving skills, creativity and strong analytical skills to investigate, assess, validate, and think outside the box • Ability to work independently, with a customer-oriented mindset • Ability to work remotely, in a collaborative team environment • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. Bonus Points: • Successful participation in CTF competitions • Experience with mobile platforms and operating systems (e.g. Android, iOS) • Experience with macOS • Experience with the Go or Rust programming languages • Threat Intelligence background Education: • M.A./M.Sc. or equivalent professional experience in Information Security/Computer Science/Computer Engineering, or a related field #LI-Remote #LI-EV1 Benefits of Working at CrowdStrike: • Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities • Great Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.

At D-Fend Solutions, our people are our greatest strength — and technology is our passion. Our team of innovators and subject matter experts, including veterans of elite military intelligence technology units, is transforming the way organizations protect themselves from drone threats. As the global leader in cyber-takeover counter-drone technology, we design and deliver advanced, software-defined solutions that empower our customers to detect, take control, and safely land unauthorized drones — with precision and reliability. Every day, we push the boundaries of innovation to meet real-world security challenges across industries and environments. We’re proud of our cutting-edge technology, our global reach, and the impact we make in securing the skies. We’re seeking passionate professionals who thrive in a fast-paced, creative, and collaborative environment — those who want to be part of the next generation of airspace security innovation. Join D-Fend Solutions and help make the world a safer place. Become a D-Fender! Work with the world’s leading cyber-takeover counter-drone technology provider and shape the future of safe airspace. Scope: Our mission is to D-Fend and mitigate the danger from rogue drones. We are looking to expand our drone take-over research team, which is responsible for the core technology of our product. This is a great opportunity for you to expand your capabilities working on versatile and innovative cyber research projects as part of a young and extremely talented team. Job Requirements: • 4+ years of relevant industry experience as embedded vulnerability researcher or equivalent. • Experience with a dis-assembler for vulnerability research (IDA Pro or GHIDRA). • Deep understanding of OS internals (Linux, RTOS, Android etc.). • Experience with complicated exploitation methods on embedded systems. • Experience with writing code in assembly or c and Python. • Advantage - Graduate of an elite technological unit in IDF

About Hypernative: Hypernative is The leading SaaS security company focused on delivering real-time risk mitigation and security solutions to Web3 and blockchain ecosystems. Our platform provides cutting-edge capabilities to secure digital assets and ensure seamless, reliable operations for businesses operating in decentralized environments. If you are passionate about blockchain and cybersecurity, and are looking for a challenging and rewarding opportunity to work with a dynamic and innovative team, we encourage you to apply. Responsibilities: • Take charge of developing and maintaining our hack and exploit detection engine, analyzing alerts for false positives (FPs) and true positives (TPs), and proposing innovative ideas to enhance detection accuracy. • Conduct in-depth research and analysis of new threats and vulnerabilities in the blockchain space. • Develop tools and systems to detect and mitigate security risks in real-time. • Identify and analyze Web3 security vulnerabilities. As the owner of significant segments of our technical development, you will define and shape our Web3 security products, ensuring they meet the highest standards of security and efficiency. • Continuously update and maintain security practices and documentation. Requirements: • Proven multi-year Experience of System building with Python, OOP and SOLID principles • Experience with git, CI/CD methodologies and other team collaboration tools • Excellent analytical and problem-solving skills. • Strong communication skills and the ability to work collaboratively in an ultra-fast-paced environment. Advantages: • Good understanding of the Ethereum Virtual Machine, experience with smart contract development and familiarity with common smart contract vulnerabilities - a very strong advantage. • Strong background in "classic" cybersecurity. • experience with Cloud development with emphasis on AWS infrastructure. • In-depth understanding of Web3 technologies, decentralized systems, and blockchain security concepts. • Familiarity with advanced concepts in Trading/Finance - a strong advantage. • B.Sc in Computer Science or equivalent. Why Hypernative? By joining Hypernative, you'll have the unique opportunity to shape the future of blockchain security, working with a talented, passionate team. You'll play a pivotal role in building next-generation detection systems that will secure some of the most critical infrastructures in the world of Web3. If you’re ready to lead, create, and innovate in a fast-moving company, we’d love to hear from you!

Zafran is looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for Zafran’s product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research. A key part of your work will include analyzing internal code and identifying security risks to improve Zafran’s overall security posture and support our PR efforts. About Zafran: Our Mission: To stop the exploitation of vulnerabilities, everywhere. What makes us different: Zafran de-risks 90% of critical vulnerabilities overnight across your hybrid environment and utilizes Agentic Capabilities and your existing security tools to rapidly mitigate and remediate the 10% most likely to be exploited. ​​Who’s behind us: Zafran is backed by Menlo Ventures, Sequoia Capital, Cyberstarts, and a deep belief that cybersecurity should move as fast as attackers do. We’re one of the fastest-growing companies in the industry, scaling to meet demand from the world’s most advanced, security-obsessed organizations. We’re serious about our mission- so expect work that matters, teammates who challenge and inspire you, and plenty of fun along the way! What you will do: • Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs). • Public Research & PR: Publish technical blogs and present your research at major security conferences. • Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafran’s product and platform. • Stay up to date with newly discovered CVEs, attack techniques, and threat trends • Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafran’s security. Requirements • 5+ years of hands-on experience in security research, including a track record of finding vulnerabilities in complex systems.. • Strong understanding of vulnerabilities, exploit techniques, and attack vectors. • Experience in reverse engineering binaries, security products, and complex low-level systems. • Hands-on experience with Linux systems, networking, and cloud environments • Ability to analyze complex systems and think like an attacker • Strong written communication skills in English, including technical documentation. • Self-driven, curious, and passionate about security research Experience with the following is a plus • Experience contributing to blogs, public research, conference talks, or media-facing security content • Familiarity with AI systems, AI security, and model behavior. • Experience in software development.

Description About Us Zenity is the leader in AI Agent Security and the first company to bring an agent-centric security platform to market. As enterprises accelerate AI agent adoption, we are establishing the security framework for how AI agents are secured and governed at enterprise scale. We deliver full-lifecycle visibility, governance, detection, prevention, and response for AI agents from build time to runtime, across SaaS, home-grown platforms, and end-user devices. Backed by $180M+ in total funding, including a $125M Series C led by Norwest, with participation from SoftBank Vision Fund 2 and Microsoft's M12, Zenity is trusted by Fortune 500 and Global 2000 enterprises worldwide. Join us in shaping how AI agents are secured at enterprise scale. About the Role We’re seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen Zenity’s detection capabilities. In this role, you’ll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. It’s a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses. Responsibilities • Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies. • Conduct research on cloud, web, and API security to uncover new threats and attack vectors. • Develop, refine, and design world-class detection logic and rules to enhance Zenity's runtime protection. • Perform threat-hunting activities across large data sources to identify emerging attack patterns • Drive full-cycle research: from hypothesis and experimentation to production validation. • Collaborate with engineering and product teams to deliver actionable insights. Requirements • 4+ years in security research, including cloud, web, or API security. • Experience in detection engineering and building or working with detection-driven security products. • Strong coding and data analytics skills in scripting and programming languages such as Python, JavaScript and bash, and proficiency with SQL-like queries. • Solid grasp of security principles, cloud security, and runtime defense. • Curiosity, creativity, and a self-driven approach to research. • Experience tinkering with LLMs and AI security - a strong plus.

Description Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm. You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs. Key Responsibilities • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions. • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them. • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform. • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them. • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify. • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents. Success Looks Like 90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform. Requirements • 4+ years in security research, offensive security, penetration testing or vulnerability research. • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems. • Strong Python. You build your own tooling and test environments. • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework. • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks. • Experiment discipline: reproducible setups, controls, and enough runs to trust a result. • Clear writing and presentation: test results the product team can act on, and research that marketing can publish. • Fluent English, written and spoken. Nice to Have • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security. • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions. • A background in adversarial machine learning. • Experience building or evaluating detection systems that use AI. • Experience working with product and engineering teams to turn research into shipped features. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

About Aryon Aryon Security is a Tel Aviv based cloud security company that prevents security risks before they reach production by enforcing proactive policies at deployment across complex cloud environments. We build deeply technical products that sit at the core of modern cloud infrastructure, working closely with security teams to solve real, high impact problems. About the Role We are looking for a talented Cloud Security Researcher to join our team in Israel. In this role, you will focus on hands-on research of cloud security risks, analyze misconfigurations, and translate findings into impactful product capabilities. You will work closely with Research, Engineering, and Product teams to ensure that your research directly contributes to securing cloud environments at scale. This is a highly technical role suited for someone who enjoys deep diving into cloud systems, understanding how things work, and helping build solutions that prevent it. Responsibilities Conduct cloud security research focusing on misconfigurations, IAM risks, and cloud attacks. Investigate real-world attack vectors and security gaps in cloud environments. Design and prototype preventative security mechanisms and controls. Translate research insights into product features, policies, and detection capabilities. Work with Solution Engineering and occasionally customers to understand real-world use cases and validate findings. Analyze complex cloud architectures and identify scalable security improvements. Take ownership of research tasks from exploration to delivery. Contribute to internal knowledge sharing and cloud security best practices. Requirements 3-5+ years of experience in cloud security, security research, or cybersecurity roles. Strong background in security domains such as Application Security, Network Security, Web Security, or IAM/Permissions. Hands-on experience researching and identifying cloud security risks. Familiarity with at least one major cloud platform Experience or strong interest in cloud governance and preventative security approaches. Strong analytical and problem-solving skills with attention to detail. Ability to work cross-functionally with engineering and product teams. Good communication skills and ability to explain technical findings clearly. Startup mindset, ownership, and ability to work in a fast-paced environment. Nice to Have Experience working with customers or in technical/customer-facing roles. Background in Solution Engineering.

Description We are looking for an exceptional Security Researcher to join Aqua’s world-class security research organization. Looking for an experienced researcher in the cybersecurity world with depth, and excellence in cloud-native security research. As a Security Researcher, you will work on deep technical research on several areas – working with other researchers, and transforming advanced offensive insights into scalable defensive capabilities. What You Will Do • Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems, including Kubernetes, containers, and serverless environments. • Reverse engineer Linux malware families to extract behavioral patterns, execution flows, and persistence mechanisms. • Study real-world threat actor techniques and translate findings into actionable detection, prevention, and hardening strategies. • Design and prototype advanced detection logic and observability mechanisms, including kernel- and runtime-level approaches (e.g., eBPF). • Influence Aqua’s security strategy by turning research insights into capabilities that protect large-scale production environments. • Collaborate closely with engineering and product teams to ensure research outcomes are impactful and scalable. Requirements • 4+ years of experience in security research with a strong focus on Linux-based systems. • B.Sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background. • Deep, practical understanding of Linux internals (processes, syscalls, memory, networking, filesystems). • Strong experience with malware analysis and reverse engineering in Linux environments. • Proficiency in C and Python for low-level research, tooling, and prototyping. • Proven ability to analyze attacker behavior and design corresponding detection or mitigation strategies. • Strong familiarity with cloud-native technologies, including containers, Kubernetes, and container runtimes. • Excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.

🔹 Title: Security Researcher 📍 Locations (Hybrid): Tel Aviv (Sky Tower) 👥 Reporting To: Threat Research Team Leader 🌟 Opportunity Highlights We are looking for a Security Researcher to join our team; an enthusiastic, autodidact who is passionate about analyzing vulnerabilities and malware techniques. He/she will build offensive breach scenarios, integrating the latest security knowledge into the SafeBreach platform of threats and 1-day exploits. 👋 Who We Are SafeBreach is on a mission to help organizations have certainty in their security. Long trusted as the global leader in adversarial exposure validation (AEV), SafeBreach empowers organizations to take command of risk by operationalizing the full CTEM lifecycle with the SafeBreach CTEM Platform. Powered by the SafeBreach Helm AI infrastructure layer and grounded in the award-winning SafeBreach Exposure Validation Platform, the SafeBreach CTEM Platform is the first enterprise-grade, closed-loop solution designed to move organizations beyond siloed security activities toward a continuous, intelligence-driven exposure management program. Backed by world-renowned threat researchers and an unrivaled customer success team, SafeBreach provides the capabilities enterprises need to holistically understand threat exposure, make data-driven decisions that reduce risk, and measurably improve cyber resilience—safely and at scale. We are a team of passionate security professionals and innovators. If you’re ready to tackle complex security challenges and make a tangible impact on enterprise defense, we’d love to meet you. 🚀 The Impact You Will Have • Research in rich environments: Work across Windows, Linux, Mac, Docker, and advanced cloud environments (AWS, Azure, GCP). • Research and implement a huge variety of cyber tactics (privilege escalation, defense evasion, lateral movement, OS persistence, credential access, etc) • Exploit complex 1-days on apps & native OS. • Innovate & Build: Work with a wide variety of technologies to simulate real-world adversarial behavior. 🧬 What Sets You Apart • 5+ years of security research experience • Deep understanding of windows internals and reverse engineering • Experience in exploitations and vulnerabilities • Knowledge of development in C • Ability to handle new technological concepts • Self-driven, autonomous learning abilities • Knowledge in developing with Python • Knowledge in offensive or red-team approach 💰 What We Offer • Competitive salary and equity grants • Hybrid flexibility • Quarterly recharge weekends • Learning & development stipend • Generous paid leave policies including flexible PTO and parental leave 🤝 HOW WE'LL GET TO KNOW EACH OTHER We view interviewing as a two-way street. We want you to interview us just as much as we interview you! (Avg. timeline: 21 days) Step 1: The Intro (15 min) A casual meeting with the Talent team to break the ice. Step 2: The Vision (45 min meeting) Connect your future manager to discuss the role, the challenges, and how you can make an impact Step 3: The Squad & The Big Picture (45-60 min meetings) Meet some of your future teammates in our Tel Aviv office, as well as our HR Team and VP of R&D to ensure our values and long-term goals align with yours. Step 4: The Offer If the vibe is right, we make it official! 🌍 DEI&B Commitment (Diversity, Equity, Inclusion & Belonging) At SafeBreach, we celebrate the rich diversity of our team, where every employee's unique perspective is a valued thread in our collective success. We are unwavering in our commitment to fostering an inclusive workplace that nurtures a sense of belonging and empowers each individual to unleash their full potential. We are dedicated to creating opportunities for collaboration, innovation, and meaningful career growth, ensuring that every voice is not just heard, but cherished.

About the Role Token Security is looking for a Senior Security Researcher to join our research team. In this role, you will be at the bleeding edge of AI security, leading deep-dive research into AI products, LLM frameworks, and modern Agentic AI ecosystems. You will combine hands-on defensive and offensive research techniques with Tokenʼs cutting-edge platform to analyze modern AI products, dissect non-human identity architectures, and uncover privilege escalation paths in dynamic AI agent workflows. In this role, you will bridge deep security research, product engineering, and technical storytelling turning novel insights into real-world enforcement mechanisms, core platform capabilities, high-impact blogs, and talks at top global security conferences. What We Do The Frontier of Identity and Agentic AI Security Token Security is pioneering the AI Agent & Non-Human Identity NHI) security space. Research-Driven Innovation Our research directly powers our product capabilities uncovering complex identity attack vectors, analyzing enterprise AI products, and building security enforcement models for autonomous AI Agents. Thought Leadership & PR We showcase our findings to the broader security community through technical publications, vulnerability disclosures, and global conference presentations. Innovation via Automation We use AI Agents ourselves to accelerate research workflows, streamline environment analysis, and build smarter security checks. Direct Market & Product Impact Our research bridges deep technical investigation and real-world defense, powering core platform enforcement 1 Senior Security Researcher capabilities, threat intelligence, and high-impact advisory for global enterprise customers. Your Responsibilities • Agentic AI & Product Security Research: Perform deep technical analysis on modern AI products, SaaS LLM offerings, and agentic tools to expose security gaps, privilege escalation risks, and data leakage vectors. • Enforcement & Architectural Design: Research and prototype security enforcement models to protect, monitor, and govern autonomous AI Agents, enforcing token boundaries and runtime access controls. Public Research, PR & Thought Leadership: Author technical blog posts, research papers, and vulnerability disclosures. Represent Token Security by submitting and presenting original research at top global security conferences (e.g., Black Hat, DEF CON, RSA). • AI Driven Research Methodology: Leverage AI Agents and modern AI tooling to scale research workflows, automate environment discovery, and accelerate vulnerability analysis across complex environments. • Hands-on Research in POCs: Conduct deep security research into active customer environments during key POCs, identifying complex NHI and AI misconfigurations to build actionable, high-impact security reports. • Cross-Functional Impact: Collaborate closely with Product, Engineering, and Sales to convert research findings into automated detections, platform features, and executive presentations. What You Bring • 5+ years of experience in security research, cloud security research, defensive or offensive security, or vulnerability research. • AI & Agentic Security Expertise: Practical experience or deep technical research into AI architectures, LLM execution pipelines, API security, and agentic execution environments. • Understanding of Organizational Security & IAM Thorough understanding of organizational security, cloud environments, and enterprise IAM models, as 2 Senior Security Researcher well as enterprise AI platforms and SaaS AI ecosystems (e.g., OpenAI, Claude Enterprise, Copilot). • Technical Writing & Public Speaking • Proven ability (or strong desire) to articulate complex research findings into engaging technical blogs, whitepapers, and public presentations for global security audiences. • Scripting & Development • Advanced proficiency in modern programming/scripting languages to write custom research tools, interact with APIs at scale, and build dynamic agent workflows. Analytical Problem Solver • Ability to analyze how enterprise AI products work end-to-end and invent novel, frictionless ways to enforce security policies without breaking user experience or usability. • Fluent English (written and verbal). Nice to have: • Track record of speaking at security conferences (e.g., Black Hat, DEF CON, RSA, OWASP, BSides). • Published security advisories, CVEs, or high-impact technical blog posts. Location & Employment Details Employment Type Full-Time Work Model: Hybrid – Tel Aviv, Israel In-office with Work From Home on Tuesdays

Description Reflectiz is a fast-growing cybersecurity company specializing in proactive website security. Our unique remote monitoring technology helps organizations reduce security, privacy, and compliance risks-protecting critical digital assets that traditional solutions can’t fully cover. Since our founding in 2019, we’ve built a global customer base that includes Fortune 500 enterprises and leading brands across North America, EMEA, and APAC. With strong year-over-year growth and a financially solid foundation, Reflectiz offers both stability and exciting opportunities for personal and professional development. Our teams in Israel and the United States foster an inclusive, collaborative culture that combines innovation with professionalism-allowing us to consistently deliver exceptional value to our customers. We’re looking for a sharp, passionate, hands-on Security Researcher with a strong understanding of web technologies, a hacker mindset, and a genuine drive to explore, challenge, and advance security technology. In this role, you’ll research real-world web environments, investigate vulnerabilities and attack techniques, analyze suspicious behaviors, and explore how modern websites and browser-based security mechanisms can be bypassed. You’ll work closely with our Security and R&D teams, turning research findings into security insights and detection capabilities within the Reflectiz platform.. Responsibilities • Research web security vulnerabilities, attack techniques, and emerging threats • Pen testing - Investigate real-world websites and web applications to identify security weaknesses and suspicious behavior • Analyze client-side attacks, malicious scripts, third-party components, and web supply-chain risks • Research vulnerabilities and attack vectors such as XSS, CSRF, injection techniques, and browser-based attacks • Analyze JavaScript execution, DOM behavior, network requests, and browser activity from a security perspective • Investigate security mechanisms such as WAFs, bot protection, authentication mechanisms, fingerprinting, and rate limiting • Explore bypass techniques and identify weaknesses in existing security controls • Develop scripts and research tools to support security investigations and automate analysis • Analyze new vulnerabilities and attack techniques and evaluate their potential impact on web environments • Translate security research findings into detection methods and security capabilities for the Reflectiz platform • Collaborate with Security Researchers and R&D teams on complex security investigations Requirements • 3+ years of hands-on experience in Pen testing, Security Research, Web Security, Application Security, Offensive Security, or a similar security-focused role • Strong understanding of web vulnerabilities, attack techniques, and common web security risks • Strong knowledge of modern web technologies, including JavaScript, HTTP/HTTPS, DOM, browser behavior, APIs, and web application architecture • Strong investigative mindset and the ability to think like an attacker • Ability to independently research complex security problems and turn findings into practical insights • Hands-on experience with AI-assisted and agentic coding workflows, using AI tools effectively Advantage • Experience with browser security or Chromium • Experience in penetration testing, vulnerability research, bug bounty, AppSec, or offensive security • Familiarity with OWASP methodologies and common web security testing tools • Degree in Computer Science or a related technical field

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Opportunity: Tenable Research is seeking a Senior Security Researcher - Cloud Security to join our highly technical product research team working at the core of our cloud security platform. This is a rare opportunity to join an elite research team and do work that directly shapes our product. In this role, you will define how vulnerabilities in cloud assets are understood, enriched, and remediated. As AI floods production with vulnerabilities, you design the model and system that keeps teams ahead of it. You will define the foundation for how cloud vulnerabilities are treated across the platform, from reachability and exploitability to effective resolution. Your work will directly shape product direction and set the standard for what handling vulns at scale actually means. We are looking for an exceptional researcher who can bridge cloud security, application security, and vulnerability management. You are curious, comfortable with ambiguity, and driven to deeply understand how vulnerabilities manifest and how they are fixed across cloud environments and code. Your Role: • Own Vulnerability Management Across Tenable's Cloud Security Platform: Define cloud vulnerability management by grounding findings in how exposure is actually created and what resolving it means for organizations. Collaborate with engineering and product teams to introduce the signals and data that validate exploitability and drive remediation. Establish the standard for what separates an actionable finding from a theoretical one. • Research Exploitability and Risk Context: Research how the security context around a finding affects its real-world risk and what resolving it looks like. Define how these factors shape prioritization and remediation across the platform. • Lead Remediation Research: Define how vulnerabilities across cloud and code map to the fixes that resolve them, and drive AI innovation in how remediation is understood and delivered at scale. Work with engineering and product to build the capabilities that close the loop from detection to resolution. • Publish and Present: Share research through technical blogs, reports, and leading industry conferences. What You'll Need: • 5+ years of hands-on experience in security research • Familiarity with real-world vulnerability management: triage, prioritization, remediation, and the gap between CVSS and actual impact • Strong technical background in cloud platforms (AWS, Azure, GCP), including how vulnerabilities manifest across workloads, services, and code • Familiarity with application security tooling • Highly curious, self-driven, and comfortable working in ambiguous, fast-evolving problem spaces • Strong communication skills, both written and verbal, with the ability to clearly articulate complex technical findings And Ideally: • Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains • Experience leveraging AI and agentic workflows for security research and analysis • Background in application security, secure code review, or supply chain security • Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines • Track record of published research, conference talks, or technical blog posts • Experience working with product teams and delivering value to customers through the product We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact [email protected] for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Description About Tenzai Tenzai is building autonomous AI hackers that think like the world's best offensive security experts, act like them, and then help fix what they find before the real ones do. If this mission speaks to you, come defend the world's software: autonomously, continuously, and in-depth. About the role This is a rare opportunity to work at the intersection of vulnerability research and AI. You will perform vulnerability and general cybersecurity research, experimenting and pushing the boundaries of what AI can and cannot reliably do in this space.You'll be working with other researchers on individual and group projects around research and prototyping AI agents, building evaluations and finding bugs. Responsibilites • Vulnerability research on public and private targets, building harnesses to automate work, and writing up the results • Building evaluations and challenge benchmarks to find boundaries of what specific AI agents and models can and cannot do • Analyze where Tenzai’s AI agent needs to improve, investigate cases where the AI missed, misclassified, or hallucinated vulnerabilities • Develop new attack strategies and offensive testing techniques for web and network targets, and translate real-world knowledge into prototypes of new AI agents Requirements • Deep expertise in Web security, particularly authentication, business logic, and injection flaws OR deep expertise in network security • 3+ years of experience In vulnerability research or any security research in these fields • Ability to articulate complex vulnerabilities clearly, both in writing and verbally • Experience in writing code to develop tooling • Strong preference for someone with background in static or dynamic analysis, protocol design or other adjacent fields • Comfortable working in a fast-paced startup environment with a high degree of ownership Why Tenzai • Working on problems that matter - Software is now written and deployed faster than it can be secured. Attackers are beginning to use AI to find vulnerabilities at scale. Tenzai exists to close that gap. It's a mission that requires elite hackers, and also sharp storytellers, wicked-smart operators, and experienced market builders. • Building a category in the making - Tenzai is defining a new category in cybersecurity. That means every team — from research and engineering to product, brand, and go-to-market — has a chance to shape how the industry understands and adopts autonomous security. If you thrive building something from zero and helping a new idea take hold in the world, keep reading. • Talent density - We believe small teams of exceptional people outperform large organizations. Tenzai was founded by veteran security experts and repeat entrepreneurs. We hire deliberately and value curiosity, initiative, and craftsmanship, whatever your discipline. • Creating real impact, quickly - Whether you're building systems, shaping product experiences, telling the story, or helping customers succeed, your work will immediately influence how organizations secure their software. We move quickly, keep teams lean, and give humans ownership. • Ambition with humility - We're tackling hard problems with a team that values deep expertise and thoughtful collaboration. Everyone here is learning, experimenting, and pushing the boundaries of what's possible. Plus, we love eating lunch together.

Description Remedio is transforming how organizations reduce cyber risk. While most security tools focus on finding problems, Remedio focuses on fixing them. Our Autonomous Remediation Platform helps enterprises continuously and safely reduce exposure by remediating vulnerabilities and misconfigurations, closing patching gaps, hardening systems, enforcing compliance, governing applications, and controlling AI risk. By combining deep dependency awareness, pre-execution validation, automated remediation, and instant rollback, Remedio enables organizations to eliminate risk across endpoints, servers, applications, and AI systems - without disrupting business operations. Founded in 2019, Remedio spent its first years as a bootstrapped, profitable company, building a strong enterprise customer base before raising a $65M Series A led by Bessemer Venture Partners. Today, more than 300 enterprise organizations trust Remedio to protect over 3M devices worldwide, including Amazon, Colgate-Palmolive, Kraft Heinz, Coca Cola Hellenic Bottling Company, and many more. As we continue expanding our platform and growing our global business, we’re looking for exceptional people who want to take ownership, solve meaningful challenges, and help shape the next chapter of Remedio’s journey. Were looking for a Senior Security Researcher to join our team! Responsibilities • Conduct advanced vulnerability research on operating systems and third-party software installed on endpoints. • Develop proof-of-concept exploits and techniques to validate research findings. • Document and publish research through reports, whitepapers, and public presentations to highlight emerging risks. • Collaborate with product and engineering teams to translate findings into improved security protections. • Stay on top of the evolving vulnerability landscape and proactively choose research areas of focus. Requirements • 3+ years of experience in low level development on Windows operating system. • Fluent in English, C/C++, Python. • Reverse engineering experience. • Strong ability to get the job done - from idea to a vulnerability. • A proven solo contributor at heart, capable of driving independent research. • Jack of all trades - comfortable moving between Java, C++, Python, COM objects, or whatever the target requires. • Deep understanding of operating system internals and network protocols. • Experience in an elite Israeli army technology/cybersecurity unit is highly regarded.

As a Senior Security Researcher for the Axonius Exposures team, you will conduct research into vulnerability detection, remediation, and prioritization to enhance our asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security data, automate workflows, and prototype logic to address enterprise attack surfaces. This is a high-impact role where your research directly shapes how our customers identify and mitigate their most critical security gaps. Responsibilities • Lead end-to-end security research projects focusing on vulnerability detection, risk prioritization, and exposure management logic. • Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate threat research, and prototype research tools. • Research and define remediation strategies, compensating controls, and configuration-based mitigations beyond standard patching. • Partner weekly with Product and Engineering teams to transform technical research into production-ready product capabilities. Minimum Qualifications • 4+ years of professional experience in security research, vulnerability analysis, or penetration testing. • Demonstrated proficiency with Python for scripting/automation and SQL for querying complex security data sets. • Hands-on experience integrating AI/LLMs into technical workflows to accelerate data analysis, parsing, or research output. • Practical understanding of security frameworks and metrics including CVSS, EPSS, and MITRE ATT&CK. Preferred Qualifications • Prior experience in B2B SaaS or enterprise cybersecurity product environments. • Experience in exposure management, attack surface management (ASM), or enterprise risk prioritization. • Experience creating custom prioritization and scoring algorithms combining vulnerability telemetry with asset criticality. • Deep knowledge of non-patching mitigation strategies, including registry tweaks, network policy shifts, and configuration hardening. • Proven track record of framing open-ended security problems into scalable software feature requirements. #LI-HYBRID, #LI-ZR1 About Axonius: Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence. Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world. Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. About the Role We are looking for a talented, passionate Offensive Researcher to join our innovative research team. If you’re eager to explore cutting-edge mobile security techniques and help safeguard the mobile app ecosystem, this is the role for you! As a key player in our security team, you'll design and execute sophisticated attack simulations on the Appdome platform. Your work will touch on diverse attack vectors, including file systems, networks, jailbreaks, memory injections, and more. Requirements • 1-3 years of experience in Offensive Security/Cyber. • Extended knowledge in researching, simulating, and analyzing different application attack vectors. • Advantage – Experience using a hacking framework or pen-testing tools such as Frida, Magisk, Multiproxy, and Cheat Engine. • Ability to create analysis plans and execute them, as well as document and troubleshoot errors. • Ability to understand the system from multiple perspectives, including high-level and low-level technical architecture. • Experience in Mobile (iOS/Android) analysis environments and automation tools. • Bachelor’s degree in a relevant field. • Software development and scripting experience.

Description Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles. Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally. Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics. Description We are looking for a Mobile Security Researcher to join our Research Team. As our Security Researcher, your primary focus will be on the inner workings of iOS and Android operating systems. You'll dive into codebases, analyze security mechanisms, and identify potential vulnerabilities. In addition, you'll work collaboratively with the team to develop protective strategies and contribute to ongoing innovations in mobile app security. This role requires a keen analytical mind, a passion for research, and a drive for continuous improvement in the mobile security domain. Join us in shaping secure solutions for the future of mobile apps. What will you do? • Research and implement security mechanisms for Android and iOS platforms, driving the full cycle from low-level platform analysis to hands-on feature development. • Conduct reverse engineering on a wide variety of devices running iOS/Android to gain deeper insights into their system. • Keep up to date with emerging trends in mobile application security and research methods to ensure that customers are protected. • Work with a talented security team where you'll learn and grow every day. Requirements • At least 2 years of experience in reverse engineering of large systems/OS, preferably with IDA • At least 2 years of experience in C/C++ programming • OS Internals/Low Level/Kernel experience • Eager to take on challenging tasks • Curious and quick to learn on your own • Team player with good interpersonal skills Advantages:  • Experience in vulnerability research • Familiarity with assembly and ARM instruction set • Mobile apps development experience • Low-Level experience in iOS or Android