דרושים » אבטחת מידע וסייבר » offensive security researcher

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the exposure management research group at the company is expanding. we are looking for an experienced offensive security researcher to join our newly formed aev team and lead the offensive side of our agentic exposure validation (aev) research.
about the group:
the exposure management research group is the research arm behind the company's exposure management platform. the platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. the group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. our work relies heavily on data science, Machine Learning, and agentic ai to operate at scale.
about the position:
exposure validation goes beyond identifying that a vulnerability exists. its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. in this position, you are responsible for bringing real offensive expertise into our aev capability, which runs on an agentic ai system that validates exposures across our customers' environments.
you conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. you also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
this is a research position with direct product impact. it combines practical red team work with shaping how an ai-driven platform conducts, reasons about, and reports offensive activity.
what you'll do:
design and run offensive research against external attack surfaces: web applications, apis, cloud-exposed services, identity, and edge infrastructure
turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
write and maintain the exploitation methodologies and attack hypotheses our agentic aev engine runs on
review agent runs and findings. separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.