דרושים » אבטחת מידע וסייבר » malware researcher

As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.
You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the company collection platform to new levels as our customer base continues to grow.
Why You'll Love It:
You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
Got an idea? You can take it straight to the COO - no red tape, no politics.
The people make it - SecRes and our company are genuinely great teams to be part of.
*Fully remote position
Responsibilities
Conducting in-depth research on tools or services that prevent the free collection of public web data.
Building and improving HTTP client solutions to guarantee the success of our company's Data collection efforts.
Identifying new standards and technologies that could impact our data collection capabilities.
Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
Theres much more.

About GeoEdge GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. For over a decade, we've protected the integrity of the digital advertising ecosystem with real-time technology that empowers our partners to deliver clean, trustworthy user experiences. The Role Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our Head of Security & Research, you'll report directly to the CEO and own GeoEdge's malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts GeoEdge on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of GeoEdge for customers, partners, and the wider security community. What You'll Do Set the strategy and roadmap for GeoEdge's malvertising detection and security research Lead, mentor, and grow the security research team Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem Own detection quality: push for uncompromising precision, coverage, and speed Drive original research and publications, and represent GeoEdge at leading security conferences Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it Report to the CEO and management on research impact, threat landscape, and priorities

We are looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for our product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research.

A key part of your work will include analyzing internal code and identifying security risks to improve our overall security posture and support our PR efforts.

What you will do:

Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs).

Public Research & PR: Publish technical blogs and present your research at major security conferences.

Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafrans product and platform.

Stay up to date with newly discovered CVEs, attack techniques, and threat trends

Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafrans security.

At our company, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
This is where innovation meets real-world impact. Youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
Were proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
What really sets our company apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
If youre excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.
Key Responsibilities
We are looking for an experienced malware researcher to lead our Endpoint Research & Protection team , someone with a passion for investigating cyber threats across every stage of the infection chain and a desire to understand real-world attacks.
In this position, you will use your expertise in malware analysis, Windows internals, and threat hunting to analyze and create threat detections based on data from our company's various products.
Responsibilities
Lead a team of malware researchers
Respond to high-profile attacks, understand them, and create relevant protections
Release protections for our customers and monitor detections
Investigate our broad sensor data to find leads and interesting cases of targeted attacks and campaigns
Automate daily processes to increase the team's efficiency
Run deep investigations into our company products and lead enhancements in security and UX
Present your work in different forums, including to stakeholders and strategic customers and at security conferences
Publish marketing and technical blogs about the team's interesting findings.

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

were the company.
were building the future of product security. our mission is to enable both humans and ai to build secure-by-design software, at scale, without slowing innovation.
were backed by $36m from team8, notable capital, and svci, and trusted by multiple fortune 500 companies.
but funding and logos dont define us. people do.
our about us page offers a real look at our culture, our values, and the people behind the product.
this is where you come in.
were looking for a security researcher to join our research team and drive cybersecurity research at the intersection of product security and ai. you'll investigate security risks in modern software development, including ai-assisted and agentic workflows, and translate research into product capabilities, customer guidance, and industry insights.
what youll do
conduct deep technical research across codebases, architectures, integrations, data flows, permissions, and agentic workflows to identify product security risks that traditional scanners often miss.
investigate how ai coding agents, llm-based workflows, and ai-assisted engineering practices change the way security risks are introduced, missed, prioritized, and remediated.
turn research into useful outputs, including product recommendations, customer-facing guidance, technical writeups, evaluation ideas, talks, and internal briefs.
maintain and evolve the company's threat-pattern corpus, security context modules, and research-backed detection logic.
work with product and engineering to translate findings into shipped capabilities, evals, onboarding materials, and go-to-market narratives.
what were looking for
strong application or product security expertise, with the ability to reason across code, architecture, product behavior, and business context.
a track record of owning research end-to-end: defining questions, doing deep technical work, forming a point of view, and producing useful artifacts.
strong threat modeling judgment, with experience using frameworks such as owasp, stride, or similar methodologies to identify and assess common appsec risks.
heavy hands-on use of ai coding agents, llm-based development workflows, or ai-assisted software engineering tools in real-world engineering/research environments.
strong communication skills, curiosity, independence, and the ability to turn research into outcomes that influence product, engineering, customers, or the market.
if this role excites you - even if you dont check every box - wed love to hear from you.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.

Responsibilities

Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.

Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.

Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.

Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.

Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.

Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.

Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.

Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

we are looking for a Security Researcher.
As a Security Researcher, you will play a crucial role in researching, building, and enhancing our cutting-edge technology to address the evolving cybersecurity challenges faced by the world's largest enterprises.
Responsibilities
Research, develop, and implement new offensive security capabilities that push the boundaries of the EASM category, including exploit development and PoC creation across web applications, AI/LLM assets, network infrastructure, cloud environments, and supply chain dependencies.
Drive innovation by conceptualizing, implementing, and adopting AI-driven initiatives and offensive security expertise to enhance detection, validation, and automation capabilities at scale.
Conduct in-depth research to continuously expand platform coverage.
Develop exploitability tests to uncover critical, real-world findings across enterprise attack surfaces - directly demonstrating the power of the platform.
Collaborate with global enterprises as design partners to understand their security needs and design solutions accordingly.
Take ownership of key research projects, addressing security and scalability challenges from concept through to delivery.

We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences.
Key Responsibilities:
Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities.
Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks.
Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems.
Author high-quality technical blogs, whitepapers, and vulnerability reports.
Represent the company by speaking and participating in leading global security conferences.