דרושים » אבטחת מידע וסייבר » Senior Security Researcher - Web Threats

About GeoEdge GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. For over a decade, we've protected the integrity of the digital advertising ecosystem with real-time technology that empowers our partners to deliver clean, trustworthy user experiences. The Role Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our Head of Security & Research, you'll report directly to the CEO and own GeoEdge's malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts GeoEdge on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of GeoEdge for customers, partners, and the wider security community. What You'll Do Set the strategy and roadmap for GeoEdge's malvertising detection and security research Lead, mentor, and grow the security research team Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem Own detection quality: push for uncompromising precision, coverage, and speed Drive original research and publications, and represent GeoEdge at leading security conferences Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it Report to the CEO and management on research impact, threat landscape, and priorities

Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our VP Security & Research, you'll report directly to the CEO and own our malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts us on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of us for customers, partners, and the wider security community.

What You'll Do
Set the strategy and roadmap for our malvertising detection and security research.
Lead, mentor, and grow the security research team.
Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities.
Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem.
Own detection quality: push for uncompromising precision, coverage, and speed.
Drive original research and publications, and represent us at leading security conferences.
Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it.
Report to the CEO and management on research impact, threat landscape, and priorities.

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

We're looking for a Security Researcher to join our team at the intersection of security research, AI, and product. This isn't a traditional research role - you'll be deeply embedded in how the platform is built, working side by side with R&D, Product, and AI teams to make sure security expertise is baked into every layer of what we ship. You'll own detection and analytics research across cloud, identity, endpoint, and beyond, while actively shaping how AI capabilities are applied to solve real security problems at scale.


WHAT YOU WILL DO
Own the security brain of our AI agents, and make sure the platform acts like a true defender.
Take an AI-native approach to detection and analytics, using LLMs and AI-assisted workflows to do what rule-based approaches can't.
Be the security voice for R&D, Product and AI: review features, shape designs, and make sure the security logic holds up.
Research and build detections and behavioral analytics across cloud, identity, endpoint, network and application, with coverage that scales across customers.
Stay sharp on the threat landscape and quickly turn new techniques and attacker tooling into coverage.

Were looking for a top-notch Threat Detection Researcher to join our team and spread the power of our company. In this role, you will further develop the company Runtime Sensor as part of our threat research team.
Responsibilities
Develop detections and tools to protect customers from cloud threats.
Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
Hunt and analyze real-world attacks and emerging cloud and AI threats.
Collaborate closely with the R&D team to transform research insights into product features.
Work with customers in response to requests related to suspicious activity or potential incidents.
Create best practices and security policies based on research findings.
Deliver external-facing content (blog posts and talks at security conferences) based on security insights and novel research.

We are looking for a hands-on security researcher who combines an attacker mindset, fraud-domain curiosity, strong technical depth, and data analysis skills. You will investigate real-world fraud patterns, reproduce attacker techniques, analyze telemetry, enrich our data collection capabilities, discover new security signals, and work closely with product, data, and engineering teams to turn research insights into production-grade detection and prevention mechanisms.

This role is especially relevant for researchers with experience in browser technologies, mobile-native applications, or both. You may work on desktop and mobile browsers, browser APIs, browser automation, client-side signals, native mobile applications, Android/iOS behavior, mobile security, emulators, device signals, and mobile automation.

You will help expand our visibility into new signals and patterns that improve fraud detection, model performance, and customer protection.

If you are a talented researcher who enjoys solving complex problems, working with messy real-world data, and building practical defenses against modern fraud and abuse, we want you to join our team.



What youll do:

Research emerging fraud and abuse techniques across account takeover, bots, automation, phishing, social engineering, device spoofing, emulators, remote access tools, suspicious network infrastructure, and related attack vectors.
Identify, design, and validate new data collection opportunities, security signals, behavioral patterns, device indicators, browser indicators, and mobile app indicators.
Analyze real-world telemetry, customer-provided labels, behavioral signals, device signals, network indicators, and attack patterns to identify detection opportunities.
Reproduce attacker techniques in lab and production-like environments, generate telemetry, identify detection gaps, and translate findings into detection logic.
Design, validate, and tune detection and prevention mechanisms with attention to coverage, explainability, false positives, customer impact, and production stability.
Build research infrastructure, analysis workflows, and internal tools using Python.
Produce robust data features that can later be used by machine learning models, detection logic, rules, dashboards, and customer-facing insights.
Work with model training pipelines, evaluate model behavior, compare training and validation results, and help determine whether new features improve detection quality.
Collaborate closely with data science, engineering and product, teams to take ideas from research hypothesis through validation, implementation, monitoring, and production feedback.
Stay up to date with fraud trends, attacker tooling, automation frameworks, browser abuse techniques, mobile abuse techniques, malware behavior, phishing techniques, and underground ecosystem developments.
Communicate findings clearly to technical and non-technical stakeholders, including recommended actions, tradeoffs, expected impact, and model/detection quality considerations.

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the exposure management research group at the company is expanding. we are looking for an experienced offensive security researcher to join our newly formed aev team and lead the offensive side of our agentic exposure validation (aev) research.
about the group:
the exposure management research group is the research arm behind the company's exposure management platform. the platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. the group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. our work relies heavily on data science, Machine Learning, and agentic ai to operate at scale.
about the position:
exposure validation goes beyond identifying that a vulnerability exists. its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. in this position, you are responsible for bringing real offensive expertise into our aev capability, which runs on an agentic ai system that validates exposures across our customers' environments.
you conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. you also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
this is a research position with direct product impact. it combines practical red team work with shaping how an ai-driven platform conducts, reasons about, and reports offensive activity.
what you'll do:
design and run offensive research against external attack surfaces: web applications, apis, cloud-exposed services, identity, and edge infrastructure
turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
write and maintain the exploitation methodologies and attack hypotheses our agentic aev engine runs on
review agent runs and findings. separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

We're looking for a Threat Security Researcher to join our Threats team at the intersection of security research, AI, and product. You'll own detection research across runtime, cloud, network, identity, code, while actively shaping how AI capabilities are applied to solve real security problems at scale.
Conduct deep technical research into modern cloud environments and AI systems and discover novel attack techniques.
Lead product initiatives in the threats domain from inception to production. Collaborate closely with product, backend, and GTM, translating research into product capabilities.
Define and create complex detection logic over our vast telemetry, with a focus on coverage that scales across customer environments.
Identify gaps in detection coverage and evaluate detection quality. ensuring security logic is reliable and impactful.
Stay up to date with the evolving threat landscape (threat intelligence, campaigns) and incorporate into our product
Contribute to PR presence - technical research content, talks, open-source tooling.

interested in Cyber security and looking to work on real-world threats?
join the company's network security research team, where you'll help develop protections that keep organizations around the world safe from emerging attacks. our team researches new threats, analyzes network vulnerabilities, develops detection and prevention technologies, and delivers frequent security updates to customers worldwide.
this role combines hands-on security research, threat analysis, and product content development, offering the opportunity to work on a wide variety of technologies, attack techniques, and emerging trends-including the growing use of ai in Cyber security.
research, develop, and release network protections and security updates for the company's network security products.
reproduce and analyze malicious attacks and campaigns to better understand threats and design effective mitigations.
investigate network protocols and identify new detection opportunities.
hunt for emerging threats using the company's cloud-scale data and develop new analysis techniques.
explore how generative ai and llms can improve threat research, detection, and security analysis.
share research findings through technical blog posts and other internal and external publications.
collaborate closely with researchers and developers to bring new protections from research into production.