Were looking for a top-notch Detection Software Engineer to join our Threat Research team and further develop the Runtime Sensor. In this role, you will work on a world-class runtime security solution affecting some of the largest cloud workloads, collaborating closely with engineering and research to enable new and better threat detection capabilities.
Check out some of our recent research:
PostgreSQL Cryptomining
SeleniumGreed Cryptomining Exploit Attack Flow & Remediation Steps
PyLoose: First Python-based Fileless Attack on Cloud Workloads
Responsibilities:
Work on a world-class runtime security solution affecting some of the largest cloud workloads.
Work closely with engineering and research to enable new and better threat detection capabilities.
Build and extend our research infrastructure, automated testing infra and release processes.
Conduct research and develop new detection capabilities, from concept to implementation.
Constantly shift things from an art to a science - make the hard things easy, fast and scalable.
Quickly address gaps and changes when needed. Bias towards action.
Analyze, debug and solve problems in test, staging and production environments.
Create and enforce best practices and security policies.
Work with customers in response to requests and questions when needed.

We're hiring a Detection Engineering & Response Lead to build and run our D&R capability from the ground up. You'll own the detection engineering, threat intelligence, and incident response functions across Cloud - and lead a small, growing team of analysts and engineers.

This is a lead engineering role responsible for detection development, handling the most complex security incidents, forensics, and shaping the D&R strategy.

What youll do
Lead detection development: maintain low false-positive and false-negative rates. Work closely with alerts consumers (20+ teams) to keep noise low and signal high, ensuring they can act quickly without missing genuine threats.

Architect and operate detection coverage across our cloud and bare-metal environments

Build and extend our internal D&R tools and pipelines - onboard new logs, build and automate response runbooks.

Integrate threat intelligence into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure

Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews and controlling critical action items are closed to prevent future possible incidents.

Partner with Compliance and Engineering teams to detect real threats while meeting the needs of both engineers and regulators.

Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates, etc.

Build and maintain Security Incident Response program: people, processes, tools.

Build tools, runbooks, and on-call processes that scale as the company grows.

Were looking for driven and talented people like you to join our R&D team and our mission to change the future of cloud security.

As a Senior Software Engineer on the KSPM team, you will join a mission-critical group building and scaling one of the companys core and fastest-growing security products. Our team enables customers to secure their Kubernetes environments across every major cloud provider, delivering deep visibility into cluster misconfigs, RBAC risk, admission control, compliance drift and container vulnerabilities.

In this role you will design the backend services and data models that discover, onboard, scan, and represent K8s workloads, APIs, and configurations at scale. You will own core services end-to-end, drive architectural improvements and partner with security researchers to turn complex threat vectors into actionable insights.

We are looking for backend engineers who care deeply about software design, cloud-native infrastructure, and container security. This is a high-impact role with real ownership - lead features end-to-end, mentor teammates, and help shape the technical direction of our KSPM offering.

What Youll Do:
Design & build at scale: Design, implement, and maintain scalable backend services that discover, onboard, scan, and analyze Kubernetes environments across multi-cloud and managed clusters.
Model K8s security: Map and represent Kubernetes resources as clean data models that surface misconfigurations, exposure risks, and compliance violations.
Integrate detection engines: Integrate and evolve detection engines for container vulnerabilities, secrets, RBAC risks, misconfigurations, and compliance frameworks.
Collaborate on research & product: Partner with security researchers and product managers to translate novel findings and complex requirements into impactful features.
Design for quality: Write clean, well-tested code in Python or Go, with thoughtful abstractions and APIs that keep the system correct and maintainable as it grows.
Lead & mentor: Lead design discussions and code reviews that uphold high engineering and security standards across the team.
Own it end-to-end: Own features through their full lifecycle - from technical specification and design through implementation, testing, and release.

We are seeking an Incident Response Engineer to join the IR team. This technical role focuses on active investigation, threat mitigation, and the continuous improvement of the security organizations posture through detection engineering and automation development.
The successful candidate will be responsible for the full lifecycle of security incidents, from initial triage to recovery. Beyond reactive response, this role involves tuning SIEM correlation rules and developing SOAR workflows to increase operational efficiency.
What Youll Be Doing:
Incident Management: Execute the IR lifecycle (Triage, Containment, Eradication, Recovery) for complex security events.
Technical Investigation: Perform root cause analysis and forensic examination across Windows, Mac, and Linux environments.
Detection & Tuning: Collaborate with the IR team to create, test, and tune SIEM rules and dashboards to reduce false positives and improve visibility.
Automation Engineering: Build and refine SOAR playbooks and automated response actions to streamline repetitive investigation tasks.
Cloud Security: Monitor and mitigate cloud-native threats across Azure, AWS, and GCP environments.

The Falcon Secure Access (FSA) team is expanding. As a Senior Software Engineer on our team, you will architect and deliver a next-generation secure access platform that converges Zero Trust Network Access with browser-native security.

You'll build the core systems that enable users to seamlessly and securely access internal sites, private applications, and cloud resources directly from the browser - without legacy VPNs or remote desktops - while enforcing real-time protection against zero-day exploits, phishing, data exfiltration, and unauthorized access.

This role sits at the intersection of network engineering and browser security: you'll design and implement advanced proxy communication, secure tunneling, and identity-aware routing - all operating at the browser's core to deliver holistic protection including DLP, insider threat detection, SaaS security, and continuous zero-trust verification.

What You'll Do:

Design and build ZTNA infrastructure - implement zero-trust access policies, secure tunneling, and identity-aware network routing that replaces traditional VPN architectures.

Develop advanced networking solutions - build and optimize proxy communication layers, WebSocket-based transport, and encrypted client-to-server channels that handle millions of concurrent connections.

Architect high-scale backend systems - design distributed microservices for policy enforcement, real-time threat detection, and access control at scale using Node.js / TypeScript.

Implement secure client-server communication - design highly secured agent-to-cloud architectures with certificate pinning, mutual TLS, and encrypted tunneling protocols.

Build browser-native security components - develop browser extensions and agents (Chrome, Edge, Firefox etc.) that enforce data protection, prevent data leakage, and provide granular visibility and control.

Own features end-to-end - from design through delivery, including deployment and monitoring.

Influence architecture and roadmap - play a key role in architectural decisions, building toward an efficient distributed zero-trust architecture.

Research and develop - drive new initiatives and POCs in zero-trust access domains and browser security.

Collaborate cross-functionally - work with security researchers, product, and platform teams across multiple locations to solve complex problems.

As a Security Operations Engineer , you will be a core member of the SecOps team, owning incident detection, triage, and response across infrastructure and enterprise browser platform. You will work closely with the SecOps Lead to mature our IR capabilities, build the automation and tooling that power our operational workflows, and help keep and its customers ahead of real-world threats.

This is a hands-on, build-and-operate role - ideal for someone who is equally comfortable writing a detection rule, investigating a live incident, and shipping a Torq workflow before end of day.

Key Responsibilities

Incident Response: Lead and participate in the full incident lifecycle - detection, triage, investigation, containment, and post-mortem. Own runbooks and ensure they reflect current threat landscape and tooling.
Detection Engineering: Develop, tune, and maintain detection rules across SIEM, EDR, and security audits. Minimize false positives; maximize signal value.
Security Automation: Build and improve automated response workflows using platforms like Torq; reduce manual toil on alert triage, enrichment, and escalation paths.
Threat Monitoring & Hunting: Continuously monitor the environment for anomalies and indicators of compromise; proactively hunt for threats aligned to our threat model.
Cloud Security Operations: Investigate and triage findings from cloud-native security tooling (Wiz, AWS CloudTrail); collaborate with engineering teams on remediation of infrastructure-level issues.
Tooling & Integrations: Contribute to the ongoing development of the SecOps toolchain - integrating alert sources, building dashboards, and improving the Jira-based alert center.IR Documentation: Maintain incident.io flows, response playbooks, and post-incident reports; contribute to the team's runbook hub.

As a SecOps Lead , you will own the core of the security operations function: detection, response, automation, and the processes that connect them. You will guide incident response from first alert through post-mortem, keeping efforts structured and stakeholders informed along the way. You will shape how the team detects, triages, and resolves, and communicate that work clearly to leadership, engineering, and customers.

This is a hands-on role with broad ownership. You should be comfortable writing a detection rule, coordinating a live incident, and walking stakeholders through a post-incident review.

Key Responsibilities

Lead Incident Response: Own the end-to-end incident response lifecycle across infrastructure and enterprise browser platform, driving investigations, coordinating responders, and ensuring timely resolution and post-incident improvements.
Own the IR Framework: Build, maintain, and continuously improve incident response processes, including runbooks, severity definitions, escalation paths, on-call procedures, and communication standards.
Drive Detection Engineering: Design, implement, and continuously improve high-fidelity detections across SIEM, EDR, cloud, and endpoint security platforms, closing visibility gaps and strengthening detection coverage.
Automate Security Operations: Build automation and AI-driven workflows that streamline triage, investigation, enrichment, and response, reducing manual effort and improving operational efficiency.
Threat Hunting & Research: Proactively hunt for threats, leverage threat intelligence, and identify emerging attack techniques relevant to modern enterprise environments.
Own Security Operations: Serve as the technical owner for Security Operations within Product Security, driving strategy, setting best practices, and continuously improving detection and response capabilities.
Partner Across Engineering: Collaborate closely with Engineering, IT, Infrastructure, and Compliance teams to embed security into new services, infrastructure changes, FedRAMP initiatives, and customer-facing security requirements.
Communicate During Incidents: Provide clear, timely communication throughout incident response, keeping technical teams, leadership, and stakeholders aligned on impact, progress, risks, and next steps.

We are seeking a Software Engineer to join Dashs core development team. You will design, build, and ship the platform that powers discovery, session-aware detection, policy governance, and runtime enforcement across workstations, SaaS, and cloud. You will work on scalable, low-latency services that process agent activity in real time and enforce security policies without slowing builders down. This role requires strong engineering fundamentals, a focus on system reliability, and an interest in the unique challenges of agentic security.
Responsibilities:
Design and Implement Services: Design, develop, and deploy scalable backend services and APIs for the Dash Security platform (customer and admin APIs, detection ingestion, aggregation, and control-plane services).
Build Core Features: Implement features for agent/MCP/skill discovery, session and intent-aware detection, policies, and runtime enforcement across coding agents and enterprise AI platforms.
Optimize Runtime Protection: Maintain and optimize high-throughput detection and enforcement pipelines that operate at enterprise scale (ingestion, detectors, verdicts, and policy dispatch).
Integrate with Platforms: Build and deepen integrations with coding agents, SaaS AI platforms, identity providers, EDR, SIEM, and outbound action systems to ingest telemetry and enforce controls.
Ensure Reliability: Focus on code quality, performance, monitoring, and stability through robust testing, CI/CD, and operational excellence.
Collaborate with Research: Partner with the AI Security Research team to turn findings, signatures, and heuristics into production-ready detectors and enforcement logic.
Contribute to Architecture: Participate in technical design and architectural reviews across our codebases, agents, and event-driven backend services.
Stay Current: Continuously learn and apply new technologies, development methodologies, and security best practices.

We are constantly striving to make our systems reliable, scalable, and simple to operate so our services are available to travelers when they need them most. With our continued growth, we have exciting challenges ahead and we're looking for a Senior Site Reliability Engineer to join our team in Tel Aviv. This role blends classic SRE ownership with pragmatic AI SRE work: you will build and operate the platforms, automation, observability, and incident response practices that keep Navan reliable, while helping teams use AI solutions, AI providers, and their APIs safely and dependably.



This is a hands-on engineering role, not a research role. You will partner with product, platform, data, security, support, and incident response teams to make production systems and AI-powered experiences more resilient. You will use software engineering, infrastructure as code, SLOs, telemetry, provider observability, and automation as your main tools, and you will apply AI where it creates measurable reliability value rather than novelty.



This position is based out of our new Tel Aviv office.



What You'll Do:

Support AI-based application solutions where reliability matters. Partner with the development teams building AI-powered travel experiences to support the development and production operation of their solution.
Work with AI solutions, providers, and APIs. Partner with teams integrating AI capabilities and providers, with attention to API reliability, authentication, quotas, rate limits, latency and provider-specific operational constraints.
Troubleshoot AI tools and provider issues. Diagnose failures across AI-powered workflows, provider APIs, configuration, permission errors, degraded responses and related areas.
Operate reliable production platforms. implement and run cloud infrastructure,and help product teams move quickly without compromising reliability.
Improve observability. Build dashboards, alerts, traces, logs, and runbooks that make service health clear, actionable, and tied to SLOs and customer impact.
Apply AI to SRE workflows. Prototype and productionize AI-assisted systems that create effective and efficient operations
Automate operational toil. Create tools, workflows, and automation that remove repetitive manual work and make operational knowledge easier to use.

We're looking for a Security Engineer - Product to spread the power. The ideal candidate will have experience performing security reviews, vulnerability management, and detection and response operations in cloud-native environments. Youll get to collaborate with our software development and DevOps teams to secure our products, CI/CD infrastructure, and production infrastructure. Youll also have the opportunity to influence our product roadmap by utilizing our platform to assess, monitor, and harden our environments.
Responsibilities:
Lead threat modeling and security review exercises across our production and CI/CD environments - identifying and mitigating risks in our products and the cloud services that support them.
Drive vulnerability management and remediation efforts - prioritizing issues, implementing mitigations, and designing strategic preventative controls.
Extend our detection and response capabilities - building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
Collaborate with our Federal team - extending our DevSecOps and Product Security practices to our FedRAMP environment and ensure it meets key security requirements.
Build deep functional partnerships with our engineering and operations teams - helping them deliver secure-by-design solutions.