דרושים » אבטחת מידע וסייבר » Lead Security Researcher

The Exposure Management Research Group at our company Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research.
About the group
The Exposure Management Research Group is the research arm behind our company's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale.
About the position
Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments.
You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity.
What you'll do
Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure
Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on
Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

We're looking for a Security Researcher to join our team at the intersection of security research, AI, and product. This isn't a traditional research role - you'll be deeply embedded in how the platform is built, working side by side with R&D, Product, and AI teams to make sure security expertise is baked into every layer of what we ship. You'll own detection and analytics research across cloud, identity, endpoint, and beyond, while actively shaping how AI capabilities are applied to solve real security problems at scale.

WHAT YOU WILL DO
Research and develop sophisticated detections and behavioral analytics across multiple security landscapes - cloud, identity, endpoint, network, and application - with a focus on coverage that scales across customer environments.
Work closely with R&D, Product, and AI teams as the security authority - reviewing features, shaping designs, and ensuring security logic is sound, practical, and impactful.
Apply an AI-native approach to detection and analytics challenges - leveraging LLMs, ML signals, and AI-assisted workflows to do things that rule-based approaches can't.
Identify gaps in detection coverage and analytical capabilities, and drive those findings directly into the product roadmap.
Analyze real-world attacker techniques and translate them into detection logic, hunting content, and analytical frameworks that ship as part of the platform.
Evaluate detection quality rigorously - measuring fidelity, coverage, and performance against real attacker behavior and production telemetry.
Stay sharp on the evolving threat landscape and rapidly incorporate new techniques, campaigns, and attacker tooling into our detection library.
Contribute to external research output - blog posts, talks, open-source tooling - that reflects our depth and point of view in the security community.

Security Researcher, AI Security
Everyone is racing to build on AI. Far fewer people are pulling it apart to see how it breaks. That's our work, and we get there before attackers do.
This role is part of our company's AI Security pillar. We research the AI systems the whole industry is rushing to adopt: the agents and frameworks heading into production, and the runtimes and infrastructure beneath them. The work is deep and hands-on. You'll find novel vulnerabilities, build them into full exploit chains, and follow research from a first lead to a working proof of concept.
We're growing the team, and we're looking for a Security Researcher who's at their best with a hard problem and no obvious way in.
Why you'll want to be here
We care about the work, and we care about each other. You'll get room to go deep, people worth learning from, and an early, hands-on look at the security of the tech everyone is betting on. If you've been waiting for a place to do the most interesting research of your career, let's talk.
Key Responsibilities
Research the security of AI systems end to end, from the agents and frameworks they're built on to the runtimes and infrastructure that run them
Take apart complex software and find where it breaks
Turn a vulnerability into a full, working exploit, not just a proof that the bug exists
Understand the defenses modern systems lean on, and how to get past them
Share what you find, through coordinated disclosure and conference talks.

we are looking for a Senior Vulnerability Researcher.
You'll have the room to follow the research where it leads, and the backing of an ecosystem created to set you up for success by providing every tool and access that could help.
Some threads will feed directly into how understands what's genuinely exploitable, grounding the platform in real attacker reality rather than theoretical risk. Others will be pure discovery, pursued because the problem is hard and the finding truly matters, and published to move the field forward.
Either way, your work establishes authority in the field. Through original research, disclosures, and technical thought leadership, you'll build a body of work that earns the respect of the security community and sharpens how the industry thinks about what's truly secure.
What you will Do:
Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names.
Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended.
Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do.
Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook.
Ground understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in.
Promote standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits.

Responsibilities:
Take an ambiguous security challenge from "this might be possible" to a working POC that proves the company`s approach, grounded in technical reality.
Research the customer need, cybersecurity gap, and technical feasibility behind an idea before and while you build.
Own the end-to-end execution loop: scope the problem, build the prototype, evaluate it, document the approach, and ship it.
Partner closely with Product, R&D, and GTM. Dont just write about emerging problems. POC the solutions so customers see something real.
Make the calls on architecture, tooling, and tradeoffs, moving quickly from ambiguity to a tangible prototype.
When a POC succeeds, lead the transition to Engineering and Product so it can receive the resources required for productization.
Stay ahead of the rapid evolution in AI and proactively bring relevant insights into the team.

we are looking for a Senior Product Security Researcher.
As a Security Researcher, you'll own and evolve the core of the Oak platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it.
Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it - defining how discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk.
You'll also shape voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves.
What you will Do:
Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers.
Translate deep expertise in identity and security into the analytical engine that drives how reasons about risk, governance, and access decisions across organizations.
Create and own knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform.
Pioneer approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world
Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers.

As Security Research Team Lead at our company, you will lead the team turning security research and enterprise security data into actionable insights and product capabilities. You will combine people management with hands-on technical leadership, helping customers understand their exposure and get more value from their security tools.
Were looking for a leader with a strong background in cybersecurity research, deep understanding of enterprise security tools, and a data-driven approach to solving problems. You should be equally comfortable mentoring researchers, shaping a research roadmap, and joining customer calls to explain findings and understand real-world challenges.
What You'll Do
Lead and Develop the Team: Manage, mentor, and grow a team of security researchers. Set clear goals, provide technical guidance and feedback, and build a culture of rigor, curiosity, and ownership.
Own the Research Roadmap: Define and prioritize research initiatives in partnership with product and engineering. Balance customer needs, emerging threats, and strategic opportunities, taking projects from initial investigation through production delivery.
Drive Security Tool Research: Lead deep research into enterprise security platforms, including EDR, SIEM, firewalls, IAM, and vulnerability management tools. Assess configurations, policies, coverage, and defensive capabilities to identify gaps and improve security effectiveness.
Engage Directly with Customers: Lead technical customer discussions, explain findings clearly, investigate complex questions, and turn feedback into research and product improvements.
Turn Data into Security Insights: Guide how the team collects, models, correlates, and validates security data. Translate fragmented telemetry and configuration data into reliable assessments, prioritized findings, and actionable recommendations.
Shape Integrations and Product Capabilities: Own the research requirements and security logic behind integrations, security control assessments, and exposure prioritization. Work closely with engineering to ensure research translates into accurate, scalable product features.
Set Research Quality Standards: Establish methods for validating findings, testing assumptions, and measuring accuracy. Ensure conclusions are supported by evidence and recommendations account for customer context and operational constraints.
Guide AI-Powered Research and Workflows: Shape the security knowledge, reasoning logic, and evaluation methods behind our companys AI-powered capabilities, ensuring outputs are accurate, explainable, and useful.
Partner Across our company: Collaborate with product, engineering, data, and customer-facing teams to align priorities, resolve technical challenges, and deliver meaningful customer outcomes.

Were growing and looking to hire a Vulnerability Research Team Lead who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
About the Company:
A global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
Our technology strategy is focused on solving real-world cyber-physical security problems at scale through robust, distributed, cloud-native architectures. We design and evolve a unified platform that serves as the technological backbone for all our products, delivering deep visibility across CPS environments-without disrupting critical operations. Our architecture emphasizes scalability, resilience, and extensibility to support both cloud and on-prem deployments.
About the Role:
As a Vulnerability Research Team Lead, you will lead a world-class group of vulnerability researchers in analyzing complex cyber-physical systems. You will balance hands-on technical excellence with people management, guiding your team through deep-dive disassembly, code audits, and exploit development. You will be responsible for the team's research roadmap, ensuring we stay ahead of emerging threats while fostering a culture of innovation and professional growth.
Responsibilities
As a Vulnerability Research Team Lead, your impact will be:
Leadership & Mentorship: Lead, hire, and develop a team of high-performing Vulnerability Researchers, fostering a collaborative and high-standard environment.
Research Strategy: Define and execute the team's research roadmap, prioritizing targets that provide the highest value to our customers and products.
Technical Oversight: Provide expert guidance on static/dynamic analysis, reverse engineering, and exploit development projects.
Cross-Functional Collaboration: Work closely with R&D, Product Management, and Threat Intelligence teams to translate research findings into actionable security features.
Thought Leadership: Represent our research in the industry through blogs, whitepapers, or conference presentations (BlackHat, DEF CON, etc.).

Required Senior Security Researcher
Description
About us
We are building autonomous AI hackers that think like the world's best offensive security experts, act like them, and then help fix what they find before the real ones do. If this mission speaks to you, come defend the world's software: autonomously, continuously, and in-depth.
About the role:
This is a rare opportunity to work at the intersection of offensive security and AI - and to have your expertise shape a platform used at enterprise scale. As an Security Researcher, you will push the boundaries of what autonomous agents can achieve.
Your goal is to conduct cutting-edge research into novel attack vectors and vulnerabilities, using those insights to both sharpen our AI and lead the industry conversation on AI-driven security. Youll work alongside a tight-knit team building excellent software in the security space.
Responsibilites
Original Research: Develop new attack strategies and offensive testing techniques for web, network and AI targets, and translate real-world knowledge into improvements for the AI agent
Thought Leadership: Produce high-quality technical content, including research papers, stage demonstrations, or technical blog posts that showcase our unique capabilities and security philosophy.
Public Advocacy: Represent our research at major security conferences and industry events.
AI Enhancement: Part of the team improving the AI hacker to make it more dangerous and creative.
Collaboration: Work closely with AI and engineering teams to continuously improve agent capabilities and ensure research findings are integrated into the product.

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Staff Security Researcher- Detection AI Research, you will be tasked with joining the Detection AI Research team, where security research meets machine learning. We use EDR telemetry from millions of endpoints to hunt for sophisticated, highly evasive attacks and to close the coverage gaps they expose, using ML models and LLM-based agents that we design, build, and run in production. As a Senior Security Researcher in our AI Detection research team, you will bring the attacker's-eye view: which techniques matter, how they look in endpoint data, and what separates a real intrusion from benign noise at scale. You will work alongside the data scientists who build our models, and your detections will reach real customers through Wayfinder analysts, threat hunters and detection engines.