דרושים » תוכנה » Senior Vulnerability Researcher

we are looking for a Senior Security Analyst to join our research team. In this role, you will help uncover critical security risks in cloud, SaaS, and AI environments, with a strong focus on AI Agents & Non-Human Identity (NHI) Security.

You will own hands-on security research across active customer POCs, conducting deep-dive security research on their environments, identifying vulnerabilities, surfacing real risks, and delivering clear remediation steps. Utilizing cutting-edge platform alongside hands-on manual research, you will translate complex security gaps into high-impact insights and executive reports, helping shape the way organizations secure machine and AI-driven identities at scale.

What We Do
The Frontier of Identity Security: a pioneering startup in the AI Agent & Non-Human Identity (NHI) security space.
Research-Driven Value: Our team focuses on IAM security across cloud, SaaS, and GenAI/AI Agent infrastructures, working hands-on with customer environments.
Customer Journey Partners: Analysts play a critical role in POCs, uncovering misconfigurations and building actionable Security Reports that move deals and guide customers toward a stronger security posture.
Cross-Functional Impact: Youll bridge the gap between technical research and business value, collaborating with Product, Engineering, and Sales to drive product enhancements and help close strategic deals.
Your Responsibilities
Lead Security Research in POCs: Conduct hands-on security analysis of customer environments using platform, manual techniques, and advanced AI tools to optimize your research workflow.
Manual Environment Analysis: Deep-dive into customer architectures using APIs, access keys, and to expose weaknesses in IAM, machine identities, and AI agent permissions.
Deliver Actionable Insights: turn complex findings into high-level, impactful Security Reports that outline significant risks and provide clear, step-by-step remediation guidance.
Drive Product & Sales Excellence: Collaborate with Product and Engineering teams to share insights from the field and help improve the platform.
Partner with Sales teams to review environmental reports and confidently present security findings to customer stakeholders.
Stay Ahead of the Curve: Continuously track emerging risks in cloud security trends, IAM vulnerabilities, and emerging threats related to AI agents and automation.

We are seeking a talented Penetration Tester & Researcher to lead complex offensive security engagements and groundbreaking research. You will execute sophisticated attack simulations, identify high-value vulnerabilities, and collaborate with clients to enhance their security posture.

This role offers a balance between hands-on technical assessments and original research that shapes the broader cybersecurity community.

Roles and Responsibilities:
Conduct advanced penetration tests across web, mobile, and thick-client applications.
Contribute to internal tools, scripts, and methodologies that enhance efficiency.
Design and simulate real-world attack chains reflecting modern threat actors.
Perform vulnerability research, exploit development, and threat modeling.
Research, develop, and implement offensive security methodologies utilizing AI technologies.
Produce detailed technical reports with actionable remediation strategies.
Collaborate directly with clients to guide mitigation and improve resilience.
Publish research, present findings, and represent us at conferences or in public forums.

Were looking for a Security Vulnerability Researcher to be a core driver in how our product empowers security teams. You will be expected to deeply understand customer needs and translate them directly into product features that deliver real value. You'll own key parts of our frontend stack, drive key architectural decisions, and turn complex security data into clear, actionable business insights.



This is a hands-on role for a seasoned offensive researcher who thrives on technical depth and creativity. Youll collaborate closely with product, marketing, and engineering teams to deliver research that drives customer trust, informs product direction, and shapes industry thought leadership.

What Youll Do

Perform AI-Focused Vulnerability Research: Investigate security risks in AI models, APIs, and infrastructure to uncover exploitable weaknesses and publish insights that strengthen our market leadership.
Lead Red Teaming Against AI Systems: Simulate adversarial attacks on AI pipelines and APIs, creating impactful PoCs that showcase real-world risk and defensive strategies.
Build Customer-Facing Proof-of-Concepts: Partner with product and engineering teams to design and deliver PoCs that align with customer use cases and highlight security capabilities.

As a Product Security Low-Level Researcher , you will focus on deep technical research across operating systems, kernels, drivers, and low-level system components that underpin modern enterprise computing. You will investigate complex attack surfaces, uncover subtle and high-impact vulnerabilities, and translate cutting-edge research into practical security improvements for platform. This role emphasizes deep systems knowledge, hands-on experimentation, and original research that pushes beyond application-layer security.



Key Responsibilities:

Low-Level Vulnerability Research: Research and discover vulnerabilities in operating system kernels, drivers, system services, virtualization layers, and low-level system components relevant to execution and trust boundaries.
Kernel & OS Internals Analysis: Analyze kernel subsystems (memory management, scheduling, IPC, filesystems, networking) and OS security primitives to identify design flaws, logic bugs, and exploitation opportunities.
Exploit Development & Validation: Develop proof-of-concept exploits for kernel- and driver-level issues to validate impact, assess exploitability, and inform mitigation strategies.
Security Testing & Tooling: Design and build custom tooling for kernel fuzzing, syscall/interface testing, driver analysis, and low-level instrumentation across supported platforms.
Cryptography & Trust Mechanisms: Assess the implementation and usage of cryptographic primitives, key management, secure boot, attestation, and hardware-backed security features, identifying weaknesses or misuse patterns.
Threat Modeling at the System Level: Collaborate with architects, platform engineers, and the Product Security Lead to model threats across privilege boundaries, boot chains, isolation mechanisms, and OS-level integrations.
Research Enablement & Knowledge Sharing: Track emerging exploitation techniques, kernel research, and advanced persistent threat tradecraft; contribute findings to internal playbooks, design guidance, and long-term security strategy.

Required Head of Research
Were looking for driven and talented people like you to join our team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
About the role:
As the Head of Research, you will lead our threat-research, security-innovation, and vulnerability-discovery efforts. You will define the strategy for how we uncover threats, identify novel attack vectors, influence product direction, and contribute thought leadership to the cybersecurity community. You will manage and grow a team of world-class researchers, work closely with product, engineering and go-to-market teams, and ensure our research remains cutting-edge, rigorous and impactful. This role emphasizes strong people leadership and cross-functional execution, alongside technical depth and hands-on research judgment.
What youll do:
Develop, own and evolve the research strategy by defining high value focus areas (for example misconfigurations, identity threats, workload vulnerabilities, and emerging attack techniques), and ensure alignment with our product roadmap and business objectives.
Lead, coach, and mentor a multidisciplinary research team (researchers, threat analysts, and engineers).
Build a healthy, high-performing org, including hiring, onboarding, and performance management.
Partner closely with product and engineering leadership to turn research insights into concrete roadmap items, detection logic, and customer value.
Drive discovery of new vulnerabilities, attack techniques, or adversary behaviors across cloud and modern infrastructure environments (for example containers, serverless, data stores, IAM).
Define metrics for research impact (for example vulnerabilities discovered, time to validate and operationalize new findings, research-driven product improvements, external reach).
Establish and maintain external partnerships (industry peers, academic groups, independent researchers) to expand our capabilities and pipeline.
Publish and present research findings (blog posts, white papers, conference talks).
Lead vulnerability disclosure and responsible communications.
Ensure the research function has the right infrastructure and processes (tooling, sandboxes, repeatable experimentation, documentation standards).
Stay current with the threat landscape, emerging technologies, attacker tradecraft, and relevant compliance or regulatory shifts.

we are looking for a Security Researcher to join our core R&D team and help build the next generation of cloud runtime protection.
In this role, you'll research vulnerabilities, attack techniques, and emerging threats, turning your findings into real product capabilities through clean, efficient code. You'll work on low-level systems, offensive security research, and help develop the technologies that protect enterprise cloud environments.
If you're passionate about building security products that make a real impact, we'd love to hear from you!

Responsibilities
Research emerging attack techniques, vulnerabilities, and adversary behaviors.
Design and develop new security capabilities to identify sophisticated threats.
Perform reverse engineering and in-depth analysis of malware, exploits, and attack techniques.
Collaborate closely with Product and Engineering teams to translate research into product capabilities.
Build research tools, prototypes, and automation to support security investigations.
Research emerging threats and translate relevant findings into new product capabilities.
Improve detection quality by analyzing false positives, false negatives, and attacker behavior.
Contribute to technical discussions, knowledge sharing, and security best practices across the company.

This is a rare opportunity to work at the intersection of offensive security and AI - and to have your expertise shape a platform used at enterprise scale. As an Security Researcher, you will push the boundaries of what autonomous agents can achieve.

Your goal is to conduct cutting-edge research into novel attack vectors and vulnerabilities, using those insights to both sharpen our AI and lead the industry conversation on AI-driven security. Youll work alongside a tight-knit team building excellent software in the security space.

Responsibilites
Original Research: Develop new attack strategies and offensive testing techniques for web, network and AI targets, and translate real-world knowledge into improvements for the AI agent
Thought Leadership: Produce high-quality technical content, including research papers, stage demonstrations, or technical blog posts that showcase unique capabilities and security philosophy.
Public Advocacy: Represent research at major security conferences and industry events.
AI Enhancement: Part of the team improving the AI hacker to make it more dangerous and creative.
Collaboration: Work closely with AI and engineering teams to continuously improve agent capabilities and ensure research findings are integrated into the product.

We are seeking a Principal/Senior Security Researcher to lead proactive research into emerging abuse patterns across agentic and modern endpoint environments. This includes browser extensions, SaaS- and web-delivered code, autonomous agents, MCPs and related tooling, and other forms of non-binary software that do not fit neatly into a traditional malware-focused model.
In this role, you will define and drive independent research initiatives rather than simply respond to predefined queues. You will conduct deep technical investigations, including reverse engineering, telemetry analysis, controlled experimentation, and data-driven validation, and translate your findings into actionable outcomes for the product. These may include detection concepts with clear success criteria, recommendations for new telemetry or platform behavior, and concise technical narratives for engineering, product, executive, or customer-facing audiences.
You will act as a senior research partner to engineering and product leadership, helping shape priorities around what to instrument, what to build, what to retire, and how to reason about ambiguous signals in production environments. The role requires strong technical judgment, strategic thinking, and the ability to turn complex research into evidence-backed product impact.
Key Responsibilities
Define and execute proactive research programs: novel attack surfaces (e.g., browser extensions, SaaS-delivered code, autonomous agents, MCP/tooling ecosystems), long-horizon threats, and systemic gaps in visibility or detection.
Perform deep technical analysis beyond routine triage: reverse engineering, behavioral modeling, data-driven hypothesis testing, and rigorous validation of findings at scale.
Set direction for how research translates into product and detection: prioritization frameworks, threat models, evaluation criteria, and standards of evidence for shipping high-impact changes.
Partner with senior engineering and product stakeholders to shape roadmap, telemetry, and architecture informed by research; influence design tradeoffs before issues appear in the field.
Lead complex, ambiguous investigations end-to-end and synthesize conclusions for executive and customer-facing audiences when stakes are high.
Represent the team through high-quality technical artifacts (e.g., in-depth publications, conference-quality work, or equivalent internal briefings) that establish external and internal credibility.

We are looking for a Security Researcher who thrives on both sides of the fence. You will develop offensive tradecraft-discovering new attack vectors and writing exploits-then use that perspective to engineer robust, product-level mitigations. If youre energized by finding a novel browser attack on Monday and shipping the defense for it by Friday, this role is for you.

Key Responsibilities

Offensive Research: Discover new attack vectors, abuse patterns, and security gaps in browsers, web applications, OS internals, and enterprise workflows.
Defensive Engineering: Design and implement detections, mitigations, and security policies informed by your offensive findings; close the loop from attack to protection.
Vulnerability & Malware Analysis: Perform reverse engineering on malware, exploits, and obfuscated code across Windows, macOS, and browser environments.
Web & Browser Security: Research techniques ranging from classic vulnerabilities (XSS, SSRF) to browser-specific primitives (extension abuse, DOM manipulation, same-origin bypasses).
Supply-Chain Security: Investigate threats in software supply chains, including browser extension marketplaces and package registries.
Threat Intelligence: Correlate signals across multiple sources to identify malicious infrastructure and adversary TTPs.
Public Impact: Write technical blog posts, publish research, and represent at major security conferences (Black Hat, DEF CON, etc.).

Were looking for an experienced Vulnerability Researcher to help us uncover how modern AI tools, agents, and enterprise environments can be abused - and turn those findings into impactful security research.
This role combines deep technical research with real industry impact.
Youll investigate emerging attack techniques, build proof-of-concepts, publish research the security community cares about, and help shape how our company protects customers.
Were looking for someone who loves understanding how things work, thinks creatively like an attacker, and knows how to turn technical findings into research people actually want to read and talk about.
What Youll Do
Research vulnerabilities and attack techniques across AI tools, endpoints, browsers, MCP servers, extensions, and enterprise environments
Investigate real-world threats, CVEs, supply-chain attacks, and AI-related security risks
Build proof-of-concepts and demonstrations of new attack paths
Publish technical research, blog posts, and security content.
Work closely with Product and Engineering to improve our companys detection and prevention capabilities
Help position our company as a leading company in AI security research
Explore new technologies and identify risks before they become mainstream