דרושים » תוכנה » Senior Red Team Expert

Were looking for a Pentest Product Associate to join our Product team and help expand our power.
In this pivotal role, you will be the primary operator of our cutting-edge AI-driven Dynamic Application Security Testing (DAST) agent while simultaneously innovating detection mechanisms for cloud-native technologies.
You will bridge the gap between automated AI testing and cloud infrastructure, defining the "rules of engagement" for our agents to ensure they effectively simulate sophisticated attacks and accurately classify the modern attack surface.
WHAT YOULL DO
Engineer Detection & Attack Logic: Develop advanced detection algorithms to classify cloud technologies while fine-tuning the attack policies that define how our agents identify and exploit vulnerabilities.
Validate Complex Findings: Analyze cloud services, APIs, and log payloads to review complex attack paths, reducing false positives and ensuring compliance with industry standards.
Research Novel Threats: Stay at the forefront of novel attack vectors and emerging cloud/API threats, translating new techniques into executable behaviors for the DAST engine.
Drive Product Evolution: Collaborate directly with Research, Backend, and R&D teams to turn operational insights into feature requests, positioning us as the market leader in vulnerability management.

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Windows Detection Engineering Manager you will be tasked with helping shape the future of endpoint security through a unified, converged platform that automatically prevents, detects, and responds to threats in real time. You will lead a team of engineers that create advanced Windows behavioral detections and in memory traps by combining deep understanding of the OS system, behavioral analysis, and innovative machine learning techniques to identify and stop sophisticated attacks before they cause harm.
You will join a growing team of passionate security experts and technical leaders who think differently, challenge assumptions, and constantly explore new ways to outsmart adversaries. In this role, you will lead a strategic team to advance windows detection forward through both research and engineering.
What Will You Do?
Primary responsibilities include:
You will manage a team of detection engineers and guide them through the research and development of detection rules and infrastructure.
You will be responsible for driving the detection of the newest malware and exploits based on our companys Endpoint Protection platform. Your role wont end with a hypothesis or a document - youll have an end-to-end responsibility for behavior-based detection capabilities, starting from leading any prior research, designing new methods to detect or prevent those, and the implementation of it in the product in the end (SW development in C++23 and scripting in Lua).
You will be leading the development and research of attack tools, PoCs, and the discovery of new ways to detect/prevent exploitation attacks (EoP, drive-by attacks, and more).
At the end of the day, your deliveries will enhance the security of dozens of millions of Windows endpoints, which are protected by our platform.
You will meet extraordinary challenges facing the newest attacks and tech obstacles, and overcome them. You will work with the very BEST in the industry in a flexible and independent environment. You will influence the design of a disruptive product that will shape the security industry of tomorrow.

we are seeking a Senior Engineer for Cloud Security Product Group.

Were extending mission of stopping breaches into the public cloud and cloud-native workloads. product offering will give customers the ability to monitor and track their cloud-native workloads as well as hardening and protecting them against attacks prior to deployment. This offering will help with defending against potential adversary activities involving cloud-native resources. When coupled with Falcon, endpoint security offering, our CSPG offering will provide a more comprehensive perspective on how the adversary is targeting key customer infrastructure. Our ultimate goal is to provide a single platform for securing the entire lifecycle of cloud workloads and cloud security posture.

What You'll Do:

Lead backend engineering efforts from rapid prototypes to large-scale applications across products

Leverage and build cloud-based systems to detect targeted attacks and automate cyber threat intelligence production at a global scale

Brainstorm, define and build collaboratively with members across multiple teams

Work in a startup-like environment with a small fast-moving team

Be mentored and mentor other developers on backend, and data storage technologies and our system

Constantly re-evaluate our product to improve architecture, knowledge models, user experience, performance and stability

Be given the autonomy to own your work in a high trust environment

We are seeking a highly skilled and experienced Red Team Developer for our specialized attack team focused on developing offensive, production-ready attack capabilities. This is a research and development (R&D) role at the core of our offensive security efforts. You will be responsible for architecting and delivering advanced low-level attack components used in evasion techniques, red team tooling, and adversary simulations.

The Impact You Will Have:
Lead the design, development, and deployment of production-grade offensive capabilities targeting application and OS CVEs exploits.
Develop attack components for Windows/Linux including OS-level evasion mechanisms.
Implement Python bindings to connect native low-level components with Python-based research tools and automation.
Research and develop bypass techniques for modern security controls.
Collaborate with the Research Team and other R&D stakeholders to implement and refine offensive concepts.
Harness AI coding agents to streamline the above processes.

We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization.
You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team.
What You'll Do
Drive Groundbreaking Research
Own and drive our most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication.
Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats.
Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities.
Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it.
Be a Voice in the Community

Represent our company as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions.
Build and maintain our reputation as a research-driven company that advances the field - not just a vendor with a blog.
Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing.
Shape the Product

Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats.
Design and develop advanced detection algorithms that directly feed into our platform, closing the gap between research insight and customer protection.
Elevate the Team
Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to.
Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices.
Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities.
Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity.

We are looking for a Windows Malware Security Researcher for our Tel Aviv R&D center. You will be part of a team that is responsible for researching the most recent and advanced cybersecurity threats, as well as designing, developing, and improving Anti-Malware capabilities to protect against them. The position includes researching OS internals, picking apart malware samples, delving into the internals of Windows kernel and user-mode code, and finding ways to mitigate new attack vectors.
The proposed role will be part of the research team of the Cortex XDR endpoint protection solution.
We are seeking a highly skilled and experienced Windows Malware Security Researcher to join our growing Windows malware research team of the Cortex XDR agent group. In this role, you will play a key part in enhancing our Endpoint Detection and Response (EDR) agent by prototyping new protection components and techniques and developing advanced malware prevention strategies. You will work on identifying, analyzing, and mitigating sophisticated threats, working closely with various teams to drive innovation. A deep understanding of the Windows operating system is essential.
Key Responsibilities
Playing a pivotal role in shaping the future of our security solutions.
Enhance the effectiveness of our EDR product by designing cutting-edge protection components and developing sophisticated prevention rules.
Researching OS internals and how Windows works under the hood - leveraging this knowledge to develop and improve our anti-malware mechanisms and capabilities.
Research and lead novel protection ideas to production-grade level, serving as the feature subject matter expert.
Research new malware and APT mitigation techniques and develop corresponding capabilities (POC level), or improve existing mitigation capabilities.
Respond to malware-based security events at clients' networks.
Stay up to date with current malware and APT techniques.
Provide feedback to the product management team on new feature requests and product enhancements from our customer base.
Find new malware techniques and APT attacks, including analysis of caught-in-the-wild malware.
Operate independently end-to-end - from initial threat idea, through research and POC, to handing off a production-ready design to core agent engineering with clear specs, test cases, and edge-case analysis.
Be a team player who lifts others up - happy to jump in when a teammate is stuck on a tricky Windows internals or RE question, share what you've figured out, and generally make the people around you better.

Join a new initiative within the Cortex XDR agent group as an Infrastructure and internal tooling Software Engineer, focused on enhancing developer velocity and quality. You will be part of a task force developing end-to-end testing frameworks, innovating CI processes, and incorporating new tools to streamline development. This role is pivotal in improving processes and increasing the efficiency of our security R&D group. You will work with multiple stakeholders to build productive relationships and drive the team's success.
Key Responsibilities
Implement and manage an end-to-end Python testing framework for developers to run tests in development and CI.
Set up and maintain innovative CI/CD processes to streamline development and ensure high-quality software outputs.
Enhance developer productivity by contributing to initiatives that increase development velocity and reduce routine tasks.
Lower code to product CI/CD cycle time.
Collaborate with development, research, DevOps, and QA teams to align infrastructure projects with their requirements.
Continuously learn and adapt new technologies and tools to keep the development process efficient.

If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you. This is an opportunity to join an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their Kubernetes and hybrid cloud environments.
Key Responsibilities
Contribute to a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud and Kubernetes infrastructure.
Drive the execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments.
Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts.
Simulate real-world attacks and perform deep behavioral analysis to inform and validate detection content.
Collaborate across engineering, product management, and go-to-market teams to deliver impactful security solutions.
Share insights with the security community through blogs, conference talks, and publications.

we are looking for a Junior Fraud Data Scientist.
As a Junior Fraud Data Scientist, you will contribute to our ongoing efforts to protect our ecosystem from financial threats and abuse. Working under the guidance of senior team members in a data-rich environment, you will assist in identifying malicious behaviors, support detection coverage, and help maintain our automated mitigation strategies.
This role is designed for an analytical professional with 1-2 years of experience who wants to build a deep expertise in adversarial data, learn from an experienced team, and develop their technical skills across modern cloud data platforms.
What You Will Be Doing
Exploratory Data Analysis: Support the team by mining behavioral and transactional datasets to help identify anomalies and emerging fraud patterns.
Model Support & Optimization: Assist in building, tuning, and validating machine learning models (e.g., XGBoost, LightGBM) under the supervision of senior data scientists.
Feature Generation: Extract, engineer, and prepare new data features from structured and unstructured sources to help improve model performance.
Dashboarding & Monitoring: Build and maintain internal dashboards and pipelines to track model health, data drift, and key fraud KPIs.
Cross-functional Collaboration: Work alongside Fraud Analytics and Product teams to help translate operational fraud insights into automated data solutions.

We are looking for a Platform Security Director to lead the engineering of our security infrastructure. Your mission is to build a Security Machine that is as sophisticated as our AI. You will move us beyond traditional "defense" into a "Secure-by-Default" reality, where our multi-cloud infrastructure (AWS and Azure) is hardened, automated, and resilient by design.
Youll Own:
The end-to-end security strategy across Application Security, Cloud (AWS/Azure), and Platform layers, ensuring a Secure-by-Default framework, as measured by deployment coverage, critical vulnerability reduction, and developer adoption metrics.
A unified Security Engineering organization covering AppSec, SecDevOps, and AI Security leadership, collaboration points with adjacent teams (Infrastructure, R&D, Product Engineering), and building and mentoring a high-performing team.
Lead our Platform Security domain - from Layer 7 protections to AWS architecture, security tooling, automated risk scoring, and AI-assisted automation workflows that improve detection and remediation times.
Security controls (WAF, Rate Limiting) embedded into the SDLC and CI/CD pipelines, including mandatory security gates, artifact scanning, and automated deployment checks.
Lead our AI strategy - enabling secure use in our platform products as well as for our internal engineering usage, and scaling AI security governance and controls.
The evolution of scalable infrastructure security, including Kubernetes, containers, IAM, and Zero Trust architectures, strengthening Kubernetes and cloud security posture.
Own and execute the comprehensive Vulnerability Management program, from discovery (SAST/DAST/OSS scanning) through remediation tracking, and manage the external Bug Bounty program, with a focus on improving remediation SLAs and automation coverage.
Mature secure-by-default engineering practices across the SDLC.
Increase developer adoption of automated security tooling.
Youll Solve:
Eliminating manual bottlenecks through code-driven guardrails and frictionless developer experiences.
Securing complex production systems and multi-tenant AI architectures in cloud-native production environments, with a focus on model integrity, training data provenance, data exfiltration prevention, and minimizing unique risks associated with Large Language Models (LLMs), by applying specific AI threat models.
Operationalizing Red/Purple Team exercises, penetration testing, and the Bug Bounty program to ensure a continuous feedback loop that drives proactive risk reduction.
Youll Impact:
Support a culture where security is embedded into the foundation of engineering
Turn security into a strategic product advantage and customer trust differentiator
Improve developer experience by making the secure path the easiest path
Increase engineering velocity while strengthening platform resilience
Shape the future intersection of Security, AI, and Platform Engineering
Create scalable systems, processes, and relationships that grow with the companys innovation pace.