דרושים » תוכנה » Principal/Senior Security Researcher - Autonomous EDR- Windows (Cortex)

Required Principal / Sr. Principal Security Research - Advanced Cyber Research (Cortex)
We are seeking a visionary and highly technical Principal / Sr. Principal Security Researcher to join our security research team. In this role, you will be at the forefront of innovating automated defense systems to rapidly protect platform customers against advanced cyber threats at an unprecedented scale. This position offers a unique opportunity to blend deep traditional cybersecurity expertise - including OS internals, reverse engineering, and advanced detection engineering with cutting-edge AI technologies like LLMs, SLMs, and agentic workflows.
You will spearhead the creation of innovative prevention solutions, leveraging massive streams of agent telemetry to design AI-driven logic that neutralizes threats before they execute. As a key technical leader, you will partner closely with top-tier data scientists and product engineers to translate cutting-edge security research into production-grade capabilities, ensuring we stay ahead of the evolving threat landscape.
Key Responsibilities:
Develop Automated Defense Systems:Create, engineer, and deploy automated solutions for the prevention and detection of advanced cyber threats, analyzing complex data to rapidly protect platform customers at scale.
Innovate with AI:Partner closely with data scientists to leverage LLMs, SLMs & deeplearning techniques to fuel these advanced prevention solutions and automated defense capabilities.
Research, develop, and continuously improve the Agentix solution. Drive the development of next-generation security content by designing and implementing specialized AI agents to automate security operations and workflows.
Drive Security Innovations:Spearhead new research initiatives from the ground up. Act as the primary driver across key stakeholders, leading top-tier data scientists and engineers to ensure the successful delivery of enterprise-grade security capabilities.

Required Senior/ Principal Security Researcher - Cloud & Kubernetes (Cortex)
Job Summary:
If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you. This is an opportunity to join an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their Kubernetes and hybrid cloud environments.
Key Responsibilities:
Contribute to a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud and Kubernetes infrastructure.
Drive the execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments.
Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts.
Simulate real-world attacks and perform deep behavioral analysis to inform and validate detection content.
Collaborate across engineering, product management, and go-to-market teams to deliver impactful security solutions.
Share insights with the security community through blogs, conference talks, and publications.

We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI.

We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsofts dominant market position and the worlds most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time.

Responsibilities

Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains.

Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time.

Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions.

Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale.

Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy.

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

we are seeking a Senior Security Researcher to join our highly technical product research team working at the core of our security products.
This is a rare opportunity to join an elite security research team and do work that directly shapes our AI and Cloud products. Your research will span cloud infrastructure, AI systems, emerging platforms, and modern architectures.
You will perform novel security research, inform product direction, and contribute to our company's thought leadership in cloud and AI security.
We are looking for an exceptional security researcher who thrives on variety and can quickly develop expertise in new areas.
Your Role:
Drive research direction across multiple domains including cloud security, AI security, and emerging threat landscapes.
Perform novel security research to uncover new attack vectors, and adversary techniques across cloud and AI systems.
Translate research findings into actionable product capabilities, detection logic, and risk prioritization guidance.
Stay current with evolving threats across cloud platforms and AIecosystems, identifying where our company should invest next.
Write and speak about security research to strengthen our company's voice in cloud and AI security.
Collaborate with product and engineering teams to translate research into shipped capabilities.

We're looking for a talented Applied Security Researcher to join our team and play a major role in our frontier research team, enabling contextual code understanding across complex cloud deployments.
Responsibilities:
Investigate the Code, Cloud, and AI technologies that we integrate with and protect, answering key research questions to unlock new features and product areas.
Design and build high-quality functional prototypes, driving abstract product ideas from inception into working PoCs and supporting development teams through initial implementation.
Conduct technical research to model risks and attack vectors specific to modern cloud- and AI-native architectures and systems.
Define and implement novel agentic workflows and advanced methods to express consistent contextual understanding of evolving application and cloud environments.

Principal Security Researcher (Cortex - AgentiX)
Job Summary:
As a Principal Security Researcher , you will act as an architect for the Autonomous SOC, focusing directly on Cortex AgentiX. You will design and build intelligent, automated investigation and remediation agents that empower thousands of customers to secure their environments at scale.
We are looking for a practitioner who combines deep hands-on expertise investigating threats and protecting organizations with a pragmatic approach to solving complex security challenges.
Key Responsibilities:
Develop in-product specialized agents to accelerate detection, respond to real-time threats, prioritize, and mitigate risks.
Establish guardrails, continuous evaluation metrics, and deterministic controls for agentic AI, ensuring complex multi-step plans execute reliably.
Drive the complete product development lifecycle, encompassing definition, design, implementation, and testing phases.
Partner cross-functionally with product management, engineering, and research teams.

we are looking for a Security Researcher.
As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production.
What You'll Do:
Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features.
Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats.
Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data.
Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments.
Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter.
Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation.
Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build.

We are a fast growing cybersecurity startup redefining how organizations defend themselves. As attackers leverage AI for high speed strikes, we provide defenders with the same capabilities. Our platform creates an AI driven Autonomous Attacker that thinks like a hacker, generating end to end attack chains across Web, Cloud, and AI applications to prioritize mitigation where it matters. Founded a year and a half ago, weve moved at lightning speed raising a Seed from CyberStarts and a Series A from Lightspeed. With offices in Tel Aviv and New York, we maintain a high transparency, low ego environment where exceptional individuals have the autonomy to make a massive impact on a category defining product.
We are looking for a talented Security Researcher to join our team. As the brain behind our AI, you will stay ahead of the hacker community, analyze sophisticated threats, and teach our platform how to think and act like an attacker to revolutionize the penetration testing landscape
What Youll Do
Conduct deep research to uncover vulnerabilities, analyze exploits, and develop novel attack techniques.
Investigate emerging threats and build complex, automated "kill chains" across Web, Cloud, and AI applications.
Perform detailed technical analysis, including reverse engineering, protocol analysis, and exploit development.
Work side-by-side with the engineering team to turn research findings into scalable, automated AI code.
Publish research findings and contribute to the global cybersecurity community.

The team is responsible for developing and improving our Linux anti-malware prevention. This includes having top-notch knowledge about the latest malware families in the wild, Linux internals, different attack frameworks and hacktools. As part of this, the team analyzes customer data and issues to prevent malicious activities in our customer's environment, and help to improve the product.
Key Responsibilities
Research and analyze malware and keep up-to-date on the most recent tactics and techniques used in the wild
Create behavioral-based protection that enhances our product's coverage
Leverage Palo Alto Networks massive collection network to identify coverage gaps and emerging threats
Assist in the design, research, evaluation and implementation of new security technologies and features
Work in close coordination with other teams, including both development and other research teams, as well as support, sales and other cross-functional teams.