דרושים » אבטחת מידע וסייבר » Security Researcher (Application)

We're looking for an experienced Application Security Researcher to help customers maximize the value of our AI-powered offensive security platform.

In this role, you'll work hands-on with customer environments, validate security findings, investigate complex application vulnerabilities, and help organizations understand, reproduce, and remediate the risks identified by our platform.

You'll collaborate closely with customers, Product, Engineering, AI Research, and Customer Success teams, providing valuable feedback that continuously improves the platform while serving as a trusted technical advisor throughout the customer journey, from complex deployments to production investigations.

This is an ideal role for someone with a strong offensive security background who enjoys combining technical research with customer interaction and wants to help shape the future of AI-driven application security.

Responsibilities
Validate vulnerabilities discovered by our AI platform and provide clear technical evidence of successful exploitation.
Perform hands-on testing of modern web applications and APIs to verify findings and identify additional attack paths.
Analyze complex application security issues, including authentication, authorization, business logic flaws, and API vulnerabilities.
Help customers understand security findings, reproduce vulnerabilities, assess risk, and implement remediation recommendations.
Investigate cases where the platform missed, misclassified, or incorrectly assessed vulnerabilities and provide actionable feedback to Product and Engineering teams.
Collaborate closely with AI Research and Engineering teams to improve detection accuracy, attack coverage, and platform capabilities.
Develop new attack methodologies and validation techniques for modern web applications.
Stay current on emerging application security trends, offensive techniques, and modern attack methodologies.
Support customers during complex deployments, integrations, and production troubleshooting, including BYOM deployments and connectivity to internal applications.

This is a rare opportunity to work at the intersection of vulnerability research and AI. You will perform vulnerability and general cybersecurity research, experimenting and pushing the boundaries of what AI can and cannot reliably do in this space.You'll be working with other researchers on individual and group projects around research and prototyping AI agents, building evaluations and finding bugs.

Responsibilites
Vulnerability research on public and private targets, building harnesses to automate work, and writing up the results
Building evaluations and challenge benchmarks to find boundaries of what specific AI agents and models can and cannot do
Analyze where AI agent needs to improve, investigate cases where the AI missed, misclassified, or hallucinated vulnerabilities
Develop new attack strategies and offensive testing techniques for web and network targets, and translate real-world knowledge into prototypes of new AI agents

Were looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team.

This is a role for someone who can perform offensive security testing at scale, combining deep security expertise with the judgment to direct and improve AI-driven tooling.

What You'll Actually Be Doing
Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth that you will develop.
Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find.
Run end-to-end engagements: scoping, execution, reporting, and remediation guidance.
Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes.
Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness.
Produce high-quality technical reports with clear exploitation paths and prioritized remediation.
Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale.
Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting.
Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision.
Translate your own tradecraft into reusable, explainable automation that the team can run and build on.

We're looking for an AI Security Researcher with a strong AppSec foundation. At the core, this is a deeply technical application security role at an engineering level. You'll sit with development teams, get involved in their processes, understand how software is actually built, and bring a security perspective from the inside. You'll enhance traditional AppSec with agentic tools and security layers, working directly with enterprise customers on hands-on engagements. On top of that defensive foundation, you'll layer AI-specific offensive capabilities: researching and executing attacks against AI/ML systems.
This is a unique opportunity to combine strong AppSec fundamentals with cutting-edge AI red teaming and agentic consulting, with a clear growth path as a researcher.
Roles and Responsibilities:
Conduct deep, engineering-level application security work: review architectures, assess code, and embed with development teams as a technical peer throughout the development lifecycle
Lead AI-focused security assessments and red team engagements for enterprise customers, identifying vulnerabilities in AI/ML systems, agentic workflows, and LLM-based applications
Enhance traditional AppSec processes with agentic tools and AI security layers
Research and develop novel attack techniques targeting AI/ML systems, including prompt injection, model manipulation, and agentic framework exploits
Translate offensive findings into actionable security recommendations for customers and internal teams
Stay at the forefront of AI security: continuously research emerging attack surfaces and contribute to the growing body of AI threat knowledge.

The Exposure Management Research Group at our company Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research.
About the group
The Exposure Management Research Group is the research arm behind our company's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale.
About the position
Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments.
You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity.
What you'll do
Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure
Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on
Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

Were looking for a highly skilled Junior Offensive Security Researcher to find new attack vectors, from initial exploitation to impact in the emerging world of Agentic AI, LLMs, and their surrounding ecosystem.

This role is ideal for researchers who are passionate about breaking new ground in the growing world of AI and impacting the future landscape of our products.

What Youll Do
Responsibilities:
Research emerging agentic technologies and uncover new exploits, attack vectors and risks. From initial exploitation to impact.
Build tooling, harnesses, and test frameworks to scale attack discovery and make research repeatable. And contribute to internal red team infrastructure.
Investigate the surrounding ecosystem, not just the model. This includes: plugins, connectors, MCP servers, orchestration frameworks, and different types of infrastructure. Mapping how weaknesses in one component can develop into full compromise.
Work with product and engineering to translate offensive findings into new defense capabilities.

As a Security Researcher , you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities.

This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work.

Specifically, you will:

Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems.
Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs.
Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection.
Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats.
Work closely with engineering and product teams to turn research into practical security capabilities.

we are looking for a Principal Security Researcher.
We're looking for a Principal Security Researcher, based in Israel, to bring deep offensive security expertise, autonomy, and a relentless attacker mindset to help drive lasting security improvements at scale.
What You'll Actually Be Doing:
Lead advanced penetration testing, red team operations, or security research against cloud infrastructure, applications, and services, uncovering vulnerabilities that matter most
Build custom tools, exploits, and attack techniques that simulate real-world adversaries and raise the bar for our offensive security tradecraft
Partner with product teams to translate offensive findings into remediation and stronger secure design practices
Mentor team members and present findings to technical and executive audiences, growing the team's overall offensive security capability
JR360843

We're looking for an experienced Security Researcher to join our R&D organization and work alongside a team of attack-oriented researchers. You'll conduct hands-on offensive security research across multiple domains including Windows internals, kernel-level security, cloud platforms, web technologies, and AI. Your work will directly shape the attack methodologies that power our automated platform, translating deep technical research into new offensive techniques and AI-driven decision-making capabilities.
Roles and Responsibilities:
Conduct hands-on offensive security research across AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across OS-level, domain, cloud-native, and external surfaces
Translate research outputs into production-grade attack functionalities within our automation ecosystem, working closely with product and engineering teams
Contribute to the integration of AI-driven decision-making into the platform's automated operations
Share knowledge, document findings, and contribute to a culture of continuous learning within the team.

We're looking for an Application Security Researcher to join us. In this critical role, you will assist us in validating our services and environments according to the highest security standards. Also, You will work closely with our R&D and Product teams, and solve complex security problems.
Responsibilities:
Continuously checking and improving security measures to protect our systems.
Reviewing system architecture, design, and code to find and fix security weaknesses before they become a problem.
Helping developers follow secure coding practices and learn how to prevent security risks.
Staying updated on new security threats and best practices to keep our security standards high.
Contributing to our security research blog.
Evaluating the security of AI and agentic systems, and applying AI-assisted tools to security research.