דרושים » תוכנה » Principal Linux Security Researcher (Cortex)

We are looking for a highly technical individual to join the Threat and Detection team in our Tel-Aviv R&D center.

The team is dedicated to PANW Cortex Security & Security Assurance Features on multiple Operating systems including but not limited to Windows and Linux, simulating and developing POCs for known threats and offensive tools to determine New features security Coverage & Detection quality across the Kill Chain /MITRE ATT&CK Framework and real threats.

In this role, you will identify unique ways to solve problems by creating custom ATTACK Infrastructure, tooling, and advancing in-house Security capabilities. We are looking for someone who can bring new ideas and perspectives to Simulate , Code and react to new threats, Malware, and Exploits. The position will expand our XDR, Malware, and Exploit sensors and capabilities, that utilize heuristics and ML technologies.

More information about Cortex XDR can be found here .

Your Impact

Learn new security features, technologies, and platforms in a relatively short amount of time
Gain hands-on experience with scalable, extensible, and real-time detection/prevention systems
Learn to analyze and identify real-world vulnerabilities, Malware, and exploits
Learn to leverage data-driven approaches to identify threats and mitigations automatically
Reproduce and analyze security issues, that either came from the field or have been found during the Security validation cycle
Enrich our Security automation Coverage and infrastructure to protect against known and unknown threats
Partner with Research and Low-Level engineering groups to identify security issues and gaps
Scale-out existing security tooling and infrastructure for both on-prem and Cloud workloads
Research and develop new tools and capabilities that emulate real-world adversary behavior.
Define and lead adversary emulation engagements to show cyber defensive teams how to respond to real-world adversaries

We are looking for a Senior Linux Internals Software Engineer for our Tel Aviv R&D center.

You will be part of a team that designs and develops the Linux internals components of our revolutionary endpoint security product for the Linux platform.

More information about Cortex XDR product can be found here .

Your Impact

Design and implement innovative capabilities for a market leading product, deployed on a range of platforms from bare-metal to the cloud
Develop critical components in the Linux internals parts of the product, incl. user and kernel-mode OS-related infrastructures in both C and C++
Utilize cutting-edge Linux technologies for real-time event collection, anti-malware, anti-exploitation, network filtering and more
Lead features in coordination with other development and QA teams
Be part a team that values SW development best practices and high standards

We are looking for talented security researchers, people who look at the world differently, who explore, "hunt" and live to beat the system and challenge it. People who are in pursuit of outsmarting the malware and overcoming it.
Youll be part of an exceptional research team that will ensure we provide the best detection, protection, and visibility capabilities to our customers at any given time. The team leads the vulnerabilities, exploits and anti-tampering research for all of our security products under all platforms. The team does it by performing in-depth analysis and research of vulnerabilities and exploits, while also being responsible for closing the loop through the development and deployment of detection assets to millions of endpoints across the globe. Youll be working closely with other detection teams to ensure our customers get the best security products they can. Your time will be focus on research and detection & protection assets.
Research
Assessing and evaluating our detection and protection coverage against in the wild vulnerabilities, exploits, and anti-tampering techniques.
Closing the loop by conducting research to discover and implement innovative solutions for these security challenges.
Initiate and propose new features and capabilities, leveraging personal experience and expertise in security research.
Perform strategic long-term research projects that involve deep research of OS internals, new detection techniques, and novel threats.
Continually learn about emerging vulnerabilities, exploits, threats, techniques, and new technologies on a regular basis.
As a security research expert, youll collaborate with many teams to help and support their work using your expertise, knowledge, or research.
Detection And Protection assets
Youll be responsible for developing the new detection content for all of our engines that will improve our detection, protection, and visibility, reaching all of our millions of endpoints across the globe.
Youll be responsible for the quality and accuracy of the deliverables that youll create and be accountable for them.
Youll create, maintain, and improve existing infrastructure and tools that are being used by the team.
You will also be encouraged to write white papers, blogs, and articles (but only if you wish to).

We are looking for a Senior Win Internals Software Engineer for our Tel Aviv R&D center.

You will be part of a team that designs and develops the Linux internals components of our revolutionary endpoint security product for the Linux platform.
Your Impact

Design and implement innovative capabilities for a market leading product, deployed on a range of platforms from bare-metal to the cloud
Develop critical components in the Linux internals parts of the product, incl. user and kernel-mode OS-related infrastructures in both C and C++
Utilize cutting-edge Linux technologies for real-time event collection, anti-malware, anti-exploitation, network filtering and more
Lead features in coordination with other development and QA teams
Be part a team that values SW development best practices and high standards

We are looking for a Senior C++ Engineer for our Tel Aviv R&D center.

The Cross Platform team takes part in the development of Cortex XDR Agent, a disruptive anti-exploit & anti-malware product. The XDR agent is the foundation of most of the Cortex products, providing the boots-on-the-ground for endpoint protection solutions. The team focuses on the endpoint and works on delivering a cross platform agent for Windows, MacOS & Linux, and builds revolutionary new capabilities to improve security and performance over millions of endpoints.

Were looking for a Senior Engineer that could take a leading position in the team, lead features end-to-end by creating and owning particular flows, easily ramp-up on projects old and new and deliver substantial improvements on the whole product.

More information about Endpoint Protection products can be found here .

Your Impact

Create or take over features from design, through development all the way to deployment and support in customer environments
Lead Integration with colleagues on new APIs and flows inside the team and with teams from other teams and groups
Research complex issues from the field and provide creative solutions
Serve as a leading individual in a very strong team professionally and personally - Were looking for someone who not only delivers his own work but improves that of those around them
Find space for growth to push the entire team or group forward - New projects, changing processes or improving existing tools

Deep Instinct, the first Cyber security company to apply Deep Learning to Cyber security is looking for a Threat Researcher. Deep Instinct is an innovative company that has a unique and game-changing software solution to protect Fortune 500 End-Point users against Zero Day & APT cyber-attacks. This is an incredible opportunity to get in a Pre-IPO Cyber security company that is poised to do huge things! We're on a mission to disrupt the Cyber security market and the time is NOW! The successful candidate will be responsible to identify, analyze and collect cyber malware samples and campaigns. Perform research on threat actors, new attack vectors and techniques, develop POCs and analysis tools, and prepare research publications. The role involves hands-on responsibilities, working closely with security researchers and Deep-Learning engineers. It requires multitasking in a fast-paced environment with high-quality, accurate, and timely deliverables.

Office Location:
TLV Office

Region:
Israel

Responsibilities::

* Research and analyze emerging cyber threats: Identifying new malware strains, large-scale campaigns, and advanced persistent threats (APTs). Analyze their behavior, capabilities, and techniques for evading detection and achieving their goal.
* Collaborate with other members of the research department: Work closely with security researchers, ML engineers, and other team members to develop and implement defense strategies for the current and future threat landscape.
* Document the findings of threat research and publication reports that can be shared with internal and external stakeholders.
* Stay up-to-date with the latest developments in the Cyber security field: including the latest trends, techniques, and threats in the Cyber security field.
* Uncover and develop new cyber-attack vectors, techniques and POCs.


Why Work With Us::
At Deep Instinct we are committed to creating an excellent Employee Experience. We offer competitive salaries, a generous benefits package among great culture. We have some of the most forward-thinking and talented people in the world working for us. If you're creative and autonomous with a real passion for technology, we want to hear from you. About Deep Instinct: Deep Instinct, is the first Cyber security company to apply Deep Learning as a platform. We are the only Cyber security company harnessing the the power of deep learning to prevent 99% of known and unknown attacks from malware and zero-day threats.

Deep Instinct, the first cyber security company to apply Deep Learning to cyber security is looking for a Senior DevOps Cloud Engineer. Deep instinct is an innovative start-up that has a unique and game-changing software solution to protect Fortune 500 End-Point users against Zero Day & APT cyber-attacks. This is an incredible opportunity to get in early at a Pre-IPO Cyber Security company that is poised to do huge things! We're on a mission to disrupt the cyber security market and the time is NOW! You will take part in Developing, maintaining, and optimizing our products and their production environments. Play a key role in designing our transformation from a single tenant service to a high scale multi-tenant HA cloud native solution. Influence and optimize our software delivery lifecycle, Infrastructure as code, container orchestration, artifact managers, monitoring, and more while working closely with development and research teams.

Office Location:
TLV Office

Region:
Israel

Responsibilities::
What kind of things we do? Streamline the software development lifecycle by identifying pain points and productivity barriers and determining ways to resolve them. Collaborate closely with development teams to understand their current build and release processes and make recommendations for improvement. Partner with cross-functional stakeholders, including development, research, operations, quality assurance and security, to streamline processes. Provide guidance to development teams to improve performance and operability of the solutions they develop. Build and maintain the CI/CD pipelines to improve developer productivity, agility, and code quality. Develop and continuously improve automation solutions to enable teams to build, deploy and test code efficiently and consistently. Ensure that systems meet business and customer needs for reliability and availability. Monitor and manage application performance and service quality, including initial troubleshooting, identification of root cases and issue resolution. Work closely with cross-functional stakeholders to analyze and troubleshoot complex production issues.


Why Work With Us::
Deep Instinct , is the first cyber security company to apply Deep Learning as a platform. We are the only cyber security company harnessing the power of deep learning to prevent 99% of known and unknown attacks from malware and zero-day threats. Deep Instinct Prevention for Endpoints . Prevention of malicious files at the endpoint is critical. Deep Instinct prevents known, unknown, zero-day, and ransomware from executing on the endpoint Deep Instinct Prevention for Applications. is an agentless, on-demand, anti-malware solution for the enterprise that is device and system agnostic. With our unique, industry-leading deep learning ap

As a senior researcher on the team, you will play a pivotal role in conducting security research, and translating it to direct security value for the company and product.

This role provides a unique opportunity to join a team with strategic importance to protecting our customers from emerging threats and novel attack methodologies in both cloud and Linux based environments. You will stay ahead of the curve with regards to the threat landscape and your research will directly impact the direction of the team and our product.

You will also get to work with vast datasets, have a direct impact on the efficacy and evolution of our detections, and play a decisive role in the strategic direction of our product development. Your contributions will enable continuous improvement of cloud detection capabilities ensuring that our customers can be secured with the most advanced security measures in place.

What You'll Do:

Initiate and conduct Cloud Research Initiatives: follow the threat landscape to identify trends in the realm of cloud infrastructure security, threat actors, novel attack approaches, and vulnerabilities in cloud-based and/or cloud-native environments and workloads.

Conduct cutting edge research in the areas of Linux security (low level and high level operating system research) and become an authoritative source of knowledge in the team

Research threats and vulnerabilities in cloud provider infrastructure and containerized applications and workloads

Develop advanced cloud security models: Create sophisticated models and frameworks for identifying and mitigating new types of cloud threats. Focus on predictive analytics and proactive threat hunting methodologies.

Collaborate with cross functional teams: Work closely with various teams, including engineering, product management, detection engineering, and threat intelligence to drive cloud detections in the falcon platform

Provide cloud security thought leadership: Share insights and best practices with the broader security community through publications, conference presentations, and technical blogs.

We are looking for a Security Researcher to join our EDR behavioral detection team.

You will create statistics-based classification algorithms detecting everything from new malware through process behavior and attackers operating in enterprise-scale networks using data from multiple endpoints of various operating systems; from analyzing attack patterns, finding statistical anomalies, and validating that you detect real attacks and APTs on real customer data.

Your Impact

Research new methods to detect targeted attackers by utilizing enormous amounts and varied types of data
Simulate attacks in the lab and conduct a deep analysis of the behavior
Use and develop statistical algorithms and techniques to create and improve our analytics detection capabilities
Be part of a diverse research group, improving our research processes and leading us to be a better team creating a better product
Stay up to date with APTs, attacker methodologies, and TTPs

As a Windows Low-Level Engineer in Prisma Access, you will be responsible for Architecting, designing and building the new generation of Prisma Access agent, re-imagining how remote work looks like. Built from scratch with the most up-to-date technology, and supported by an awesome group of people you will impact the everyday work of tens of millions of people!

This is a unique opportunity to join early and ride the rocket as we launch our first major release!

Your Impact

Lead the architecture, design and implementation of a new product which will affect 10s of millions of people from the very early stage!
Design, implement and test critical components in the product, incl. kernel drivers and user-mode OS-related infrastructures in C++ and C
Work in close coordination with other teams in Israel and abroad, other OSs and other products to learn and leverage knowledge
Participate in researching advanced technologies and their implications on connectivity and security and adapt them for use in the companys products
Write design documents, SW development guidelines, and best practices
Coach more junior team members, and help them grow