דרושים » אבטחת מידע וסייבר » malware researcher

We are seeking a Senior / Principal Security Researcher to join our high-caliber Security ML Team. Our team solves complex security challenges using disruptive technologies, AI/ML algorithms, and massive datasets to design and develop groundbreaking security solutions that transition directly from research into production-grade protection.
In this role, you will serve as the core security domain expert within a multidisciplinary team, providing essential security-side expertise to assist in the development of ML models, deeplearning models, and Small Language Models (SLMs). By translating complex malware behaviors and static file attributes into actionable logic, your research will directly shape the algorithms that protect millions of endpoints worldwide. If you are looking to autonomously drive high-impact research initiatives from inception to production and use data-informed critical thinking to influence advanced security modeling, we want to hear from you.
Key Responsibilities
The Bridge to the AI Ecosystem: Serve as the core security domain expert within a multidisciplinary team, translating complex malware behaviors and static file attributes into actionable features, labels, or heuristics-fueling AI algorithms and automated, data-driven security logic.
Telemetry & Sensor Optimization:Analyze raw endpoint telemetry (such as memory buffers, hook outputs, and IPC artifacts) to evaluate algorithm effectiveness and work with AI researchers to tweak or implement new models..
Deconstruct File Behavior: Look past the "black box" of machine learning by digging into executable formats (PE, ELF, Mach-O) and scripts to identify malicious behavior(e.g., packing, anomalous imports, obfuscation).
Drive Intelligent Protections:Take a security hypothesis, validate it via data analysis, and build Python-based proof-of-concepts that scale into production-grade detections-spanning machine learning classifiers to AI-informed automated rule generation.
Shape the Pipeline: Influence data pipeline strategies and model design by ensuring our datasets and automated logic accurately capture the ground truth of modern threat landscapes.

As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.
You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the company collection platform to new levels as our customer base continues to grow.
Why You'll Love It:
You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
Got an idea? You can take it straight to the COO - no red tape, no politics.
The people make it - SecRes and our company are genuinely great teams to be part of.
*Fully remote position
Responsibilities
Conducting in-depth research on tools or services that prevent the free collection of public web data.
Building and improving HTTP client solutions to guarantee the success of our company's Data collection efforts.
Identifying new standards and technologies that could impact our data collection capabilities.
Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
Theres much more.

About GeoEdge GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. For over a decade, we've protected the integrity of the digital advertising ecosystem with real-time technology that empowers our partners to deliver clean, trustworthy user experiences. The Role Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our Head of Security & Research, you'll report directly to the CEO and own GeoEdge's malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts GeoEdge on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of GeoEdge for customers, partners, and the wider security community. What You'll Do Set the strategy and roadmap for GeoEdge's malvertising detection and security research Lead, mentor, and grow the security research team Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem Own detection quality: push for uncompromising precision, coverage, and speed Drive original research and publications, and represent GeoEdge at leading security conferences Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it Report to the CEO and management on research impact, threat landscape, and priorities

We are looking for a Linux Low Level Security Research group manager for our Tel Aviv R&D center. You will manage and lead a group that is responsible for researching the most recent Malwares, Kernel mitigations, EBPF, vulnerabilities, exploits and advanced cybersecurity threats, as well as designing, developing and improving our Linux Agent ability to protect against different threats. The position includes researching Linux internals, Reverse engineering, malware analysis, vulnerability analysis, diving into internals of the Linux kernel and user-mode code, java, javascript and more. The group consists of two Linux Low Level researcher teams.
Key Responsibilities
Leading the existing employees as well as hiring future employees to join your group.
Be a thought leader around Linux detection and protection; designing, planning, and improving our anti-exploit, as well as anti-malware detection and prevention capabilities.
Lead the rapid response and find ways to prevent new critical vulnerabilities and malware.
Figure out different ways to generally catch entire bug-classes or exploitation building blocks to prevent exploits.
Respond to different breach and security events arriving from customers.
Stay up to date with current vulnerabilities, exploitation techniques and malware.

We are looking for an experienced Security Researcher to join our growing research team. The team's responsibility is vulnerability research for both PR purposes and research for our product. In this role, you will focus on vulnerability research of open-source projects and reverse engineering of low-level binaries. The team also focuses on AI security and low-level product security research.

A key part of your work will include analyzing internal code and identifying security risks to improve our overall security posture and support our PR efforts.

What you will do:

Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs).

Public Research & PR: Publish technical blogs and present your research at major security conferences.

Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of Zafrans product and platform.

Stay up to date with newly discovered CVEs, attack techniques, and threat trends

Cross-Functional Collaboration: Partner with product and engineering teams to help improve Zafrans security.

We are seeking a visionary and highly technical Principal / Sr. Principal Security Researcher to join our security research team. In this role, you will be at the forefront of innovating automated defense systems to rapidly protect platform customers against advanced cyber threats at an unprecedented scale. This position offers a unique opportunity to blend deep traditional cybersecurity expertise - including OS internals, reverse engineering, and advanced detection engineering with cutting-edge AI technologies like LLMs, SLMs, and agentic workflows.
You will spearhead the creation of innovative prevention solutions, leveraging massive streams of agent telemetry to design AI-driven logic that neutralizes threats before they execute. As a key technical leader, you will partner closely with top-tier data scientists and product engineers to translate cutting-edge security research into production-grade capabilities, ensuring we stay ahead of the evolving threat landscape.
Key Responsibilities
Develop Automated Defense Systems:Create, engineer, and deploy automated solutions for the prevention and detection of advanced cyber threats, analyzing complex data to rapidly protect platform customers at scale.
Innovate with AI:Partner closely with data scientists to leverage LLMs, SLMs & deeplearning techniques to fuel these advanced prevention solutions and automated defense capabilities.
Enhance Palo Alto Networks Agentix:Research, develop, and continuously improve the Agentix solution. Drive the development of next-generation security content by designing and implementing specialized AI agents to automate security operations and workflows.
Drive Security Innovations:Spearhead new research initiatives from the ground up. Act as the primary driver across key stakeholders, leading top-tier data scientists and engineers to ensure the successful delivery of enterprise-grade security capabilities.

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

were the company.
were building the future of product security. our mission is to enable both humans and ai to build secure-by-design software, at scale, without slowing innovation.
were backed by $36m from team8, notable capital, and svci, and trusted by multiple fortune 500 companies.
but funding and logos dont define us. people do.
our about us page offers a real look at our culture, our values, and the people behind the product.
this is where you come in.
were looking for a security researcher to join our research team and drive cybersecurity research at the intersection of product security and ai. you'll investigate security risks in modern software development, including ai-assisted and agentic workflows, and translate research into product capabilities, customer guidance, and industry insights.
what youll do
conduct deep technical research across codebases, architectures, integrations, data flows, permissions, and agentic workflows to identify product security risks that traditional scanners often miss.
investigate how ai coding agents, llm-based workflows, and ai-assisted engineering practices change the way security risks are introduced, missed, prioritized, and remediated.
turn research into useful outputs, including product recommendations, customer-facing guidance, technical writeups, evaluation ideas, talks, and internal briefs.
maintain and evolve the company's threat-pattern corpus, security context modules, and research-backed detection logic.
work with product and engineering to translate findings into shipped capabilities, evals, onboarding materials, and go-to-market narratives.
what were looking for
strong application or product security expertise, with the ability to reason across code, architecture, product behavior, and business context.
a track record of owning research end-to-end: defining questions, doing deep technical work, forming a point of view, and producing useful artifacts.
strong threat modeling judgment, with experience using frameworks such as owasp, stride, or similar methodologies to identify and assess common appsec risks.
heavy hands-on use of ai coding agents, llm-based development workflows, or ai-assisted software engineering tools in real-world engineering/research environments.
strong communication skills, curiosity, independence, and the ability to turn research into outcomes that influence product, engineering, customers, or the market.
if this role excites you - even if you dont check every box - wed love to hear from you.

we are looking for a Security Researcher.
As a Security Researcher, you will play a crucial role in researching, building, and enhancing our cutting-edge technology to address the evolving cybersecurity challenges faced by the world's largest enterprises.
Responsibilities
Research, develop, and implement new offensive security capabilities that push the boundaries of the EASM category, including exploit development and PoC creation across web applications, AI/LLM assets, network infrastructure, cloud environments, and supply chain dependencies.
Drive innovation by conceptualizing, implementing, and adopting AI-driven initiatives and offensive security expertise to enhance detection, validation, and automation capabilities at scale.
Conduct in-depth research to continuously expand platform coverage.
Develop exploitability tests to uncover critical, real-world findings across enterprise attack surfaces - directly demonstrating the power of the platform.
Collaborate with global enterprises as design partners to understand their security needs and design solutions accordingly.
Take ownership of key research projects, addressing security and scalability challenges from concept through to delivery.

We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences.
Key Responsibilities:
Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities.
Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks.
Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems.
Author high-quality technical blogs, whitepapers, and vulnerability reports.
Represent the company by speaking and participating in leading global security conferences.