דרושים » אבטחת מידע וסייבר » CTO Office Team Member

we are looking for a Lead Security Researcher.
You will lead security research. This is not a bug hunting role. Your job is to invent the approaches that become product capabilities: new ways to detect, triage, and remediate vulnerabilities using LLMs and program analysis, proven on real data before a customer ever sees them.
You own the path from idea to shipped capability. You form the hypothesis, build the proof of concept, measure whether it actually works, and partner with engineering until it is in the product. You also own the quality bar: the benchmarks and evaluations that decide whether what we ship is good enough to put in front of customers.
You will set the research agenda, not just execute one. As the team grows, you will shape how research works here.

Forward Deployed Engineering sits at the frontier of that work. We embed with our most strategic enterprise customers, running on-prem, air-gapped, and heavily regulated environments, and own the technical arc from discovery through production.

Your day might include designing a solution architecture for a high-impact agentic use case, debugging a production routing issue deep in our codebase, deploying a new MCP server with a customer team, or aligning with a CTO on a rollout plan; all in service of outstanding outcomes and rapid time to value for the organizations we work with.

This is a founding function. The first FDEs will define how we conducts field engineering: the standards, playbooks, and technical bar. The work is hands-on, commercially scoped, and high-leverage: youll partner closely with Product, Research, Platform, Security, and GTM, and what you learn in production directly shapes what the core team ships next. If you thrive under ambiguity, make fast and sound decisions when the stakes are high, and get energy from closing the gap between what customers hit in production and what we build next, this role is for you.

In This Role You Will
Own technical delivery across multiple deployments from first prototype to stable production, including core engineering work that unblocks strategic accounts.
Lead deep technical diagnosis and remediation in our codebase and production environments, model routing and gateway behavior, large-PR scaling, multi-pass behavior, performance and reliability issues.
Build customer-specific extensions (MCP servers, agent skills, platform integrations) that deliver immediate value and become durable product capability; upstream them into the main roadmap where appropriate.
Embed closely with customer engineering teams: serve as their senior technical counterpart for hands-on debugging, architecture reviews, and joint implementation.
Scope work, sequence delivery, and remove blockers early; make deliberate trade-offs between scope, speed, and quality to protect delivery timelines.
Partner with Product, Research, and Platform to convert account learnings and eval-driven feedback into roadmap items, specs, and prioritized engineering work.
Codify working patterns into tools, playbooks, runbooks, and reproducible benchmarks that Support and account teams can operate independently and help scale the field engineering function across the organization.

The Exposure Management Research Group at our company Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research.
About the group
The Exposure Management Research Group is the research arm behind our company's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale.
About the position
Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments.
You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity.
What you'll do
Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure
Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on
Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

Were looking for an experienced Vulnerability Researcher to help us uncover how modern AI tools, agents, and enterprise environments can be abused - and turn those findings into impactful security research.
This role combines deep technical research with real industry impact.
Youll investigate emerging attack techniques, build proof-of-concepts, publish research the security community cares about, and help shape how our company protects customers.
Were looking for someone who loves understanding how things work, thinks creatively like an attacker, and knows how to turn technical findings into research people actually want to read and talk about.
What Youll Do
Research vulnerabilities and attack techniques across AI tools, endpoints, browsers, MCP servers, extensions, and enterprise environments
Investigate real-world threats, CVEs, supply-chain attacks, and AI-related security risks
Build proof-of-concepts and demonstrations of new attack paths
Publish technical research, blog posts, and security content
Work closely with Product and Engineering to improve our companys detection and prevention capabilities
Help position our company as a leading company in AI security research
Explore new technologies and identify risks before they become mainstream.

Required Senior Security Researcher
Description
About us
We are building autonomous AI hackers that think like the world's best offensive security experts, act like them, and then help fix what they find before the real ones do. If this mission speaks to you, come defend the world's software: autonomously, continuously, and in-depth.
About the role:
This is a rare opportunity to work at the intersection of offensive security and AI - and to have your expertise shape a platform used at enterprise scale. As an Security Researcher, you will push the boundaries of what autonomous agents can achieve.
Your goal is to conduct cutting-edge research into novel attack vectors and vulnerabilities, using those insights to both sharpen our AI and lead the industry conversation on AI-driven security. Youll work alongside a tight-knit team building excellent software in the security space.
Responsibilites
Original Research: Develop new attack strategies and offensive testing techniques for web, network and AI targets, and translate real-world knowledge into improvements for the AI agent
Thought Leadership: Produce high-quality technical content, including research papers, stage demonstrations, or technical blog posts that showcase our unique capabilities and security philosophy.
Public Advocacy: Represent our research at major security conferences and industry events.
AI Enhancement: Part of the team improving the AI hacker to make it more dangerous and creative.
Collaboration: Work closely with AI and engineering teams to continuously improve agent capabilities and ensure research findings are integrated into the product.

We're looking for our **first Forward Deployed Engineer**. You'll sit directly with our customers' engineering teams and get their workloads onto Impala - from the first scoping conversation to a production endpoint carrying real traffic, at a cost and latency profile they couldn't hit anywhere else.
This is an engineering role. You will write code every day, in customer repos and in ours. It also carries pieces of solutions architecture, product management, and pre-sales, and you should want that mix rather than tolerate it. Ambiguous business goals come in; observable, benchmarked, production services go out.
As the founding FDE you also define the function: what a POC looks like, what we promise and measure, which patterns get productized, and how the field feeds the roadmap. The next FDEs will work from what you build here.
What You'll Do
- **Own customer outcomes end to end:** problem framing, evaluation design, migration, deployment, benchmarking, monitoring. You're the technical owner from first call through expansion.
- **Win the POC:** turn a vague objective into a tight spec and a working proof of concept fast, with explicit quality, latency, throughput, and cost-per-token targets - and hit them.
- **Tune serverless inference for real workloads:** model and engine selection, batching strategy, KV cache behavior, speculative decoding, quantization, parallelism, cold-start and autoscaling behavior under bursty traffic. Diagnose regressions down to the inference engine.
- **Migrate workloads onto Impala:** move customers off OpenAI-compatible APIs, self-managed vLLM, SageMaker, or their own GPU fleets - and prove out the quality and cost delta with numbers.
- **Guide model strategy:** advise on open-weight model selection, distillation, and fine-tuning for specific tasks; help customers get from a general-purpose frontier model to a smaller, faster, cheaper one that holds quality.
- **Close the product loop:** bring the field back into the roadmap - write the PRDs, land the PRs, and turn one-off customer work into platform features.
- **Be the technical anchor in the room:** support sales on complex evaluations, run technical onboarding, earn trust with staff engineers and CTOs.

As Security Research Team Lead at our company, you will lead the team turning security research and enterprise security data into actionable insights and product capabilities. You will combine people management with hands-on technical leadership, helping customers understand their exposure and get more value from their security tools.
Were looking for a leader with a strong background in cybersecurity research, deep understanding of enterprise security tools, and a data-driven approach to solving problems. You should be equally comfortable mentoring researchers, shaping a research roadmap, and joining customer calls to explain findings and understand real-world challenges.
What You'll Do
Lead and Develop the Team: Manage, mentor, and grow a team of security researchers. Set clear goals, provide technical guidance and feedback, and build a culture of rigor, curiosity, and ownership.
Own the Research Roadmap: Define and prioritize research initiatives in partnership with product and engineering. Balance customer needs, emerging threats, and strategic opportunities, taking projects from initial investigation through production delivery.
Drive Security Tool Research: Lead deep research into enterprise security platforms, including EDR, SIEM, firewalls, IAM, and vulnerability management tools. Assess configurations, policies, coverage, and defensive capabilities to identify gaps and improve security effectiveness.
Engage Directly with Customers: Lead technical customer discussions, explain findings clearly, investigate complex questions, and turn feedback into research and product improvements.
Turn Data into Security Insights: Guide how the team collects, models, correlates, and validates security data. Translate fragmented telemetry and configuration data into reliable assessments, prioritized findings, and actionable recommendations.
Shape Integrations and Product Capabilities: Own the research requirements and security logic behind integrations, security control assessments, and exposure prioritization. Work closely with engineering to ensure research translates into accurate, scalable product features.
Set Research Quality Standards: Establish methods for validating findings, testing assumptions, and measuring accuracy. Ensure conclusions are supported by evidence and recommendations account for customer context and operational constraints.
Guide AI-Powered Research and Workflows: Shape the security knowledge, reasoning logic, and evaluation methods behind our companys AI-powered capabilities, ensuring outputs are accurate, explainable, and useful.
Partner Across our company: Collaborate with product, engineering, data, and customer-facing teams to align priorities, resolve technical challenges, and deliver meaningful customer outcomes.