דרושים » אבטחת מידע וסייבר » Cloud Security Researcher - Runtime & Threat Research

משרות על המפה
 
בדיקת קורות חיים
VIP
הפוך ללקוח VIP
רגע, משהו חסר!
נשאר לך להשלים רק עוד פרט אחד:
 
שירות זה פתוח ללקוחות VIP בלבד
AllJObs VIP
כל החברות >
משרה זו סומנה ע"י המעסיק כלא אקטואלית יותר
מיקום המשרה: תל אביב יפו
סוג משרה: משרה מלאה
משרות דומות שיכולות לעניין אותך
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
09/08/2026
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
We're looking for a threat Security Researcher to own the "right" side of the platform - from live cloud workloads and the eBPF telemetry they emit, through adversary behavior in containers and Kubernetes, into the AI systems and agents now embedded in production. You'll hunt down how novel attack techniques actually unfold at runtime - the credential theft, the lateral movement, the abuse of a model or an MCP tool - then turn that research into the detection logic that runs over our vast runtime telemetry and powers real-time threat protection. This role sits at the intersection of threat research, cloud, AI security, and detection engineering.
Conduct deep technical research into modern cloud environments and AI systems and discover novel attack techniques.
Lead product initiatives in the threats domain from inception to production. Collaborate closely with product, backend, and GTM, translating research into product capabilities.
Define and create complex detection logic over our vast telemetry, with a focus on coverage that scales across customer environments.
Identify gaps in detection coverage and evaluate detection quality. ensuring security logic is reliable and impactful.
Stay up to date with the evolving threat landscape (threat intelligence, campaigns) and incorporate into our product
Contribute to PR presence - technical research content, talks, open-source tooling.
Requirements:
5+ years of experience in threat research, including threat hunting, incident response or detection engineering
Military background experience, university degree, or Ex-CNAPP
Curious, detail-oriented mindset with proven ability to self-learn complex topics and new mechanisms.
Hands-on skills with scripting languages (e.g., Python) as well as query languages (e.g., KQL
Ability to work independently and also across teams, in a dynamic, fast-moving, demanding environment
Strong written and verbal communication skills in English, with the ability to explain complex security concepts clearly to both technical and non-technical audiences.
Advantages :
Experience in AI Security Research
An AI-native mindset, you've built or applied AI-powered tooling in a security context
Experience conducting data-driven research and working with large-scale telemetry.
Experience in public-facing work, such as presenting at recognized industry conferences or authoring technical blog posts.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8773788
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
Location: Tel Aviv-Yafo
Job Type: Full Time
If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you.
We're looking for a Manager to lead a security research team for detection and response across cloud environments.
This is an opportunity to lead an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their Kubernetes and hybrid cloud environments.
Key Responsibilities
Manage a team of security researchers conducting research on attacks against cloud data , Kubernetes and containers.
Lead, mentor, and grow a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud and Kubernetes infrastructure.
Drive the strategy and execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments.
Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts.
Oversee simulation of real-world attacks and deep behavioral analysis to inform and validate detection content.
Foster collaboration across engineering, product management, and go-to-market teams to deliver impactful security solutions.
Represent the team and share insights with the security community through blogs, conference talks, and publications.
Requirements:
2+ years in a leadership or management role, including mentoring researchers and setting research strategy.
5+ years in security research with a proven track record of driving impactful projects.
Deep expertise in cloud-native security, with strong focus on Kubernetes, containers, and major cloud providers (AWS, Azure, GCP, OCI).
Experience developing or working with detection and response products, such as XDR, EDR, or cloud workload protection platforms.
Excellent communication skills, with the ability to articulate complex research findings and drive alignment across diverse teams.
Proficient in hands-on coding and scripting (e.g., Python).
Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow).
Preferred Qualifications
Familiarity with Kubernetes threat modeling frameworks (e.g., MITRE ATT&CK for Containers).
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8779585
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
26/08/2026
Location: Tel Aviv-Yafo
Job Type: Full Time
We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.
Requirements:
Minimum Qualifications
6+ years of hands-on experience in security or threat research, with a proven track record of driving investigations to actionable, real-world impact.
Experience conducting data-driven research and working with large-scale telemetry.
Proficiency in Python, Go, and query languages (e.g., KQL, SQL).
Strong self-motivation and ability to independently drive complex research projects from concept to delivery.
Preferred Qualifications
Familiarity with cloud infrastructure (AWS, GCP, Azure), Kubernetes, and modern cloud-native architectures.
Background in incident response, red teaming, or threat hunting.
Hands-on experience building and shipping security detections as part of a product.
Experience writing technical blogs, publishing security research, or speaking at industry conferences.
Leveraging AI/LLM-driven tools to enhance detection generation and telemetry analysis.
Clear and effective communicator with excellent collaboration skills, comfortable working across teams and disciplines.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8798641
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
26/08/2026
Location: Tel Aviv-Yafo
Job Type: Full Time
Were looking for a top-notch Threat Detection Researcher to join our team and spread the power. In this role, you will further develop the Runtime Sensor as part of our threat research team.
Responsibilities
Develop detections and tools to protect customers from cloud threats.
Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
Hunt and analyze real-world attacks and emerging cloud and AI threats.
Collaborate closely with the R&D team to transform research insights into product features.
Work with customers in response to requests related to suspicious activity or potential incidents.
Create best practices and security policies based on research findings.
Deliver external-facing content (blog posts and talks at security conferences) based on security insights and novel research.
Requirements:
Minimum Qualifications
6+ years of experience in security or threat research in which you conducted deep research with actionable conclusions and impacts.
Intimate knowledge of OS internals (Windows/Linux/MacOS) and networking.
Familiarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure).
Proficiency in Python for tool development and automation.
Experience delivering security detections in customer-facing product(s).
The ability to learn independently, to be self-driven and goal-oriented.
Preferred Qualifications
Knowledge of Go, Rust, or C/C++.
Hands-on experience with malware analysis/reverse engineering/vulnerability research.
Familiarity with notable threat actors and threat intelligence analysis.
IR/red-team/threat-hunting experience.
Experience leveraging AI to supercharge research and detection workflows.
Deep knowledge of modern threat classes (Supply Chain, CI/CD, or threats targeting AI infrastructure and agentic frameworks).
Excellent communication and teamwork skills.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8798644
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
Location: Tel Aviv-Yafo
Job Type: Full Time
we are seeking a Senior Security Researcher to join our highly technical product research team working at the core of our security products.
This is a rare opportunity to join an elite security research team and do work that directly shapes our AI and Cloud products. Your research will span cloud infrastructure, AI systems, emerging platforms, and modern architectures.
You will perform novel security research, inform product direction, and contribute to our company's thought leadership in cloud and AI security.
We are looking for an exceptional security researcher who thrives on variety and can quickly develop expertise in new areas.
Your Role:
Drive research direction across multiple domains including cloud security, AI security, and emerging threat landscapes.
Perform novel security research to uncover new attack vectors, and adversary techniques across cloud and AI systems.
Translate research findings into actionable product capabilities, detection logic, and risk prioritization guidance.
Stay current with evolving threats across cloud platforms and AIecosystems, identifying where our company should invest next.
Write and speak about security research to strengthen our company's voice in cloud and AI security.
Collaborate with product and engineering teams to translate research into shipped capabilities.
Requirements:
5+ years of experience in security research, vulnerability research, or offensive security.
Demonstrated ability to quickly develop expertise in new technical domains.
Familiarity with OWASP Top 10 for Large Language Model Applications (prompt injection, data poisoning, system prompt leakage).
Strong understanding of AI systems, frameworks, and deployment patterns, with proven ability to exploit them.
Experience conducting original security research - finding vulnerabilities, understanding attacker behavior, or developing novel techniques.
Highly motivated, curious, and able to work independently in ambiguous problem spaces.
Strong communication skills, written and verbal, with the ability to articulate technical findings and opinions clearly.
And Ideally:
Experience across multiple security domains (cloud, AI, infrastructure, application).
Background in offensive security, red teaming, or vulnerability research.
Solid understanding of cloud platforms (AWS, Azure, GCP) and cloud security concepts.
Track record of published security research, conference talks, or technical blog posts.
Experience tracking the evolving AI ecosystem and translating new developments into security research.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8796536
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
11/08/2026
Location: Tel Aviv-Yafo
Job Type: Full Time
We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization.

You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team.

What You'll Do
Drive Groundbreaking Research

Own and drive our most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication.
Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats.
Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities.
Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it.
Be a Voice in the Community

Represent our company as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions.
Build and maintain our reputation as a research-driven company that advances the field - not just a vendor with a blog.
Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing.
Shape the Product

Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats.
Design and develop advanced detection algorithms that directly feed into our platform, closing the gap between research insight and customer protection.
Elevate the Team

Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to.
Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices.
Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities.
Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity.
דרישות:
8+ years in security research, threat research, or closely related fields (offensive security, detection engineering, incident response, cloud security engineering). Fewer years are fine if your depth and track record are exceptional.
Deep multi-cloud expertise - strong hands-on experience across at least two of the major cloud providers (AWS, Azure, GCP), with working knowledge of the third. You understand the IAM models, logging pipelines, APIs, and attack surfaces that matter in each.
A track record of original research - you've published meaningful technical findings through blog posts, conference talks, open-source tools, or vulnerability discoveries that moved the needle. We want someone who doesn't just consume research - you produce it.
Strong adversarial mindset and critical thinking - you think like an attacker targeting cloud infrastructure, SaaS platforms, identity systems, and Kubernetes. You can model threat scenarios, map out attack paths, and poke holes in defenses.
Ability to operate autonomously on ambiguous, high-stakes problems. You don't wait for detailed specs - you identify what matters and drive it forward.#ENGLI המשרה מיועדת לנשים ולגברים כאחד.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8777209
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
16/08/2026
Location: Tel Aviv-Yafo and Herzliya
Job Type: Full Time
We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI.

We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsofts dominant market position and the worlds most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time.

Responsibilities

Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains.

Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time.

Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions.

Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale.

Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy.
Requirements:
Qualifications
4+ years of hands-on experience in security research or threat hunting, with a specialized focus on identity, cloud, or AI-based threat scenarios.
Deep understanding of the threat landscape, including modern attacker techniques and complex kill-chains, with a focus on platform internals across OS, Cloud Workloads and Identity platforms.
Experience hunting across diverse signal sources, effectively uncovering threats within on-premises, hybrid, and cloud environments.
Programming proficiency (e.g., Python, C#, or similar), with a proven ability to develop and ship production-ready protection logic. Demonstrated ability to work effectively in cross-functional teams, bridging the gap between deep research and scalable engineering.

Preferred Qualifications
B.Sc. or M.Sc. in Computer Science or Software Engineering OR/AND related field
Public track record of security research, such as technical blog posts, whitepapers, or presentations at major industry conferences.
Experience in offensive security or adversary simulation.
Deep understanding of AI-driven threats.
Proven ability to reason over large-scale datasets using big-data query languages, applying security expertise to identify novel patterns and make evidence-based decisions.
Familiarity with cloud environments (e.g., Azure, AWS) and the specific security challenges inherent to hybrid and multi-cloud infrastructures in large enterprise customers.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8782813
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
09/08/2026
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
We're looking for a research-minded, DevOps-fluent Security Researcher to own the "left" side of the platform - from source code and IaC, through CI/CD pipelines, into running cloud workloads and the sensitive data they touch. You'll trace how risk originates in a commit or a data store and follows an attack path all the way to runtime, then turn that research into the posture logic that powers our code-to-cloud, CSPM and DSPM capabilities. This role sits at the intersection of DevSecOps, cloud, data security, and AI systems.
Conduct deep technical research across the full software development lifecycle - source code, IaC, dependencies, CI/CD pipelines, artifacts, and runtime - to map the environment and discover novel risks, misconfigurations, and end-to-end attack paths (code-to-cloud), then enrich findings with context and generate meaningful, actionable remediation.
Lead research into Data Security Posture Management (DSPM): how sensitive data is stored, classified, moves, and gets exposed across cloud data stores, and translate this into data discovery, classification, and data-flow risk logic.
Correlate runtime context from our eBPF sensors with code, pipeline, and data findings to prioritize what is actually reachable and exploitable - not just theoretically vulnerable.
Research and apply AI and ML techniques to strengthen the policy engine itself - improving detection accuracy and coverage, reducing false positives, and making risk prioritization and analytics smarter across code, cloud, data, and runtime signals.
Lead product initiatives from inception to production. Collaborate closely with product, backend, and GTM, translating research into shipped product capabilities.
Define and build complex policy and risk-prioritization logic spanning code, cloud, data, and runtime.
Requirements:
5+ years of experience in Cyber Security research, cloud security, or DevSecOps, particularly in cloud environments.
Military background experience, University Degree, or Ex-CNAPP.
Deep understanding of modern DevOps and CI/CD environments - pipelines (e.g., GitHub Actions, GitLab CI, Jenkins), Infrastructure-as-Code (e.g., Terraform, CloudFormation), containers, and Kubernetes.
Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure) and its data and identity services.
Ability to learn the inner mechanisms of complex architectures - low level, cloud, and data.
Hands-on skills with scripting languages (e.g., Python) and query languages (e.g., SQL); comfort reasoning about data stores and data flows.
Ability to work independently in a dynamic, fast-moving, and demanding environment - owning research initiatives end-to-end and leading projects on your own across product, backend, and GTM teams.
Excellent written and oral communication skills in English.
Advantages:
Experience in AI Security Research, or securing AI/ML pipelines and workloads.
Experience with DSPM, data classification, or data security tooling.
Knowledge of graph and data science algorithms (e.g., graph analytics, clustering, anomaly detection, statistical modeling).
Experience with software supply chain security (SBOM, dependency and artifact/registry security).
Contributions to open-source security tooling.
Experience in public-facing work, such as presenting at recognized industry conferences, authoring technical blog posts, or publishing research.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8773769
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
27/08/2026
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
We're looking for an AI Security Researcher to join us and uncover emerging AI threats, derive detection logic, discover new attack vectors, conduct red teaming, and identify insider threats and misconfigurations.
What You'll Do:
Deep-dive into AI usage risks, including threat detection for chat platforms and AI agents.
Research emerging agent threats and LLM attacks, such as jailbreaks and prompt injection.
Conduct red teaming and large-scale experiments on AI agents, including quantitative experimentation and advanced result analysis.
Assess internal and externally-facing AI agents for security posture and risk exposure.
Evaluate and attack real-time defenses and runtime protections for AI applications.
Conduct research across cloud, web, and API security to uncover novel threats and attack vectors relevant to AI systems.
Partner with product and engineering teams to turn research findings into detection logic, guardrails, or product features.
Stay current on and contribute to industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS) - potentially contributing back to the community.
Publish blog posts, give talks, and represent research at conferences.
Requirements:
Background in AI/ML or security research. Ideal candidates have both, but we're equally open to candidates from data science or security research backgrounds with demonstrated depth in AI systems.
5+ years of experience in the AI or security industry.
Solid understanding of AI agents: how tool use, memory, planning, and orchestration layers interact, and where that architecture introduces risk.
Working knowledge of LLM and agentic security - prompt injection, jailbreaks, tool-use exploitation, memory/context poisoning, and related attack classes.
Knowledge of AI vulnerabilities at both the model and infrastructure layers, and familiarity with effective mitigation strategies (e.g., guardrails, sandboxing, input/output filtering, access controls).
In-depth understanding of LLMs, generative AI, agentic systems, and RAG pipelines - how they're built, where they break, and how failure modes propagate through a system.
Strong research methodology and judgment: experience designing large-scale experiments, forming hypotheses, and applying quantitative rigor to evaluate results, identify signal from noise, and draw defensible conclusions from complex or ambiguous data.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8800549
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
17/08/2026
Location: Tel Aviv-Yafo
Job Type: Full Time
Hunt, investigate, and analyze advanced persistent threat (APT) activity across endpoints, servers, cloud, and network infrastructure. partner with our Threat Intelligence team to resolve complex intrusions in customer networks. You'll uncover stealthy adversary behavior, reconstruct attack chains, and build the tools and methods that make our hunting and forensics better. You'll also present original research at top-tier industry conferences and
Key Responsibilities
Hunt and investigate targeted intrusions, long-dwell compromises, and espionage- driven activity across enterprise, cloud, identity, and network environments.
Perform advanced forensics across operating systems, cloud, memory, and network telemetry; correlate signals to determine the scope of compromise.
Build innovative tooling, research systems, and hunting/investigation workflows; identify capability gaps and propose automations to close them.
Produce clear reports, forensic timelines, threat-actor assessments, and actionable detection and remediation guidance.
Support internal security, threat intelligence, detection engineering, and investigation teams with expert forensic findings and technical analysis.
Partner with the Threat Intelligence team to resolve complex intrusions in customer networks.
Represent the organization through conference talks, workshops, and original research.
Requirements:
Extensive hands-on APT hunting, intrusion investigation, and digital forensics.
Deep understanding of APT tradecraft - stealth, persistence, credential abuse, defense evasion, living-off-the-land, custom tooling, supply-chain compromise, and command-and-control.
Broad forensic expertise across operating systems, cloud platforms, network and edge infrastructure, and memory, using industry-standard forensic and hunting tools.
Telemetry analysis across security platforms (EDR, SIEM, network, and identity systems) and the ability to build detection and hunting logic.
Strong development skills in Python (and ideally another language such as Go, C/C++, or PowerShell) to build tooling, automations, and analysis pipelines.
Strong communication for technical and executive audiences, including conference-grade presentations.
Represents the organization publicly, delivering talks, workshops, and research at top-tier cybersecurity and forensics conferences.
Nice to Have
Malware analysis and reverse engineering.
Experience with enterprise EDR/XDR and SIEM platforms.
Container, SaaS, and hybrid-cloud investigation experience.
Threat-intel collaboration; published research or prior conference talks.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8785669
סגור
שירות זה פתוח ללקוחות VIP בלבד