דרושים » אבטחת מידע וסייבר » sr. threat researcher- detection

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
as a senior threat intelligence researcher, you will be responsible for tracking advanced adversaries and leveraging your deep technical expertise across attacker capabilities, infrastructure, and tactics. you will create and refine approaches to uncover and monitor active threat actors, as well as surface irregular and emerging behaviors in the broader threat landscape. the intelligence you generate will directly strengthen the company's understanding of threat actors and will inform proactive hunting, detection engineering, and defensive decision-making.
lead complex threat intelligence investigations through in-depth analysis of the global threat landscape, with a focus on advanced and state-linked actors.
define and prioritize threat research focus areas (actors, campaigns, sectors, techniques) aligned with the company's customers and product roadmap.
deliver actionable cyber threat intelligence and design and execute hunting campaigns using analytics, automation, and advanced ai capabilities.
curate and maintain structured knowledge on actors, campaigns, infrastructure, and ttps in the company's internal threat knowledge base.
work closely with cyberai researchers on the development of next-generation artificial cyber researchers and ai-driven analysis capabilities.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
as a senior malware researcher, you will analyze and reverse engineer malware and tooling used by advanced threat actors, particularly those targeting governments and critical infrastructure. you will apply deep expertise in binary and script analysis to uncover capabilities, configurations, and c2 infrastructure for threat actor attribution and mitigations.
your work will power the company's malware catalog, strengthen our understanding of threat actors technical capabilities, and directly support the development of next-generation ai-driven "artificial cyber researchers".
perform in-depth static and dynamic analysis of malware, implants, loaders, and related tooling used by apts and other sophisticated adversaries.
reverse engineer binaries and scripts (e.g., pe, elf,.net, powershell, JavaScript /vba) to determine capabilities, execution flow, persistence mechanisms, and evasion techniques.
extract and document configuration data and c2 information, and map these to campaigns, infrastructure, and threat actors in collaboration with cti researchers.
develop and maintain detection and hunting artifacts such as yara rules, vt livehunt queries, capa rules, and sandbox behavior signatures.
work closely with cyberai researchers on the development of next-generation artificial cyber researchers and ai-driven analysis capabilities.
7+ years of experience in Cyber security, with significant hands-on experience in malware research focused on apts and state-linked actors.
strong proficiency with re tools such as ida pro, ghidra, x64dbg/windbg, and common dynamic analysis/sandbox environments.
deep understanding of os internals (windows/ Linux / Android /mac), common persistence and execution techniques, and modern offensive tradecraft.
demonstrated experience extracting configs, c2 endpoints, and capabilities from both compiled and scripted malware.
strong investigative mindset, attention to detail, and ability to work with incomplete or obfuscated data.
experience researching or defending government or critical infrastructure organizations- advantage.
if you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, wed love to hear from you!

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we're looking for a Cyber security researcher to join the research team within our posture management group. our product is ai-driven, and this is a research role on the research team. youll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. a core part of the role is helping to build ai agents that emulate threat actors flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths.
5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar).
implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths
conduct network security assessments to identify weaknesses in customers network infrastructure and recommend mitigations to monitor and limit unauthorized access.
research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., active directory, network segmentation, identity infrastructure, exposed services).
build poc exploits/attack chains to validate risk hypotheses before they're modeled into the product. collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers.
produce clear technical documentation of research findings, attack paths, and proposed detection logic.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we are on an expedition to find you, someone who is passionate about creating intuitive, out-of-this-world security research. you'll help us harness the power of the company's trillions of security signals to rapidly diagnose and alert the latest attacker behaviors, drive critical context-rich signals, construct new tools and automations to support customers, identify threats, and detect advanced attacker techniques.
analyze various network devices, configurations and security products
implement methods and algorithms to discover network topology, relationships between devices and potential lateral movement paths
conduct network security assessments to identify weaknesses in customers network infrastructure, and recommend mitigations to monitor and limit unauthorized access
develop research tools and frameworks to perform automatic analysis of network devices and security products
research and analyze network-related cybersecurity threats and trends
work closely with other internal engineering and ai teams to integrate new capabilities into our platform and guide cross-product architectural decisions
act as a security subject matter expert for multidisciplinary teams

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

We are seeking a visionary and highly technical Principal / Sr. Principal Security Researcher to join our security research team. In this role, you will be at the forefront of innovating automated defense systems to rapidly protect platform customers against advanced cyber threats at an unprecedented scale. This position offers a unique opportunity to blend deep traditional cybersecurity expertise - including OS internals, reverse engineering, and advanced detection engineering with cutting-edge AI technologies like LLMs, SLMs, and agentic workflows.
You will spearhead the creation of innovative prevention solutions, leveraging massive streams of agent telemetry to design AI-driven logic that neutralizes threats before they execute. As a key technical leader, you will partner closely with top-tier data scientists and product engineers to translate cutting-edge security research into production-grade capabilities, ensuring we stay ahead of the evolving threat landscape.
Key Responsibilities
Develop Automated Defense Systems:Create, engineer, and deploy automated solutions for the prevention and detection of advanced cyber threats, analyzing complex data to rapidly protect platform customers at scale.
Innovate with AI:Partner closely with data scientists to leverage LLMs, SLMs & deeplearning techniques to fuel these advanced prevention solutions and automated defense capabilities.
Enhance Palo Alto Networks Agentix:Research, develop, and continuously improve the Agentix solution. Drive the development of next-generation security content by designing and implementing specialized AI agents to automate security operations and workflows.
Drive Security Innovations:Spearhead new research initiatives from the ground up. Act as the primary driver across key stakeholders, leading top-tier data scientists and engineers to ensure the successful delivery of enterprise-grade security capabilities.

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the threat landscape operations team is a key part of the company research. it is responsible for conducting threat research and developing some of the company's major research assets.
the team focuses on analyzing and tracking cybercrime, developments in ai, hacktivist activity, and emerging adversary trends. its research supports strategic and operational intelligence, thought leadership, and the development of advanced security technologies.
working with us will give you access to unique data sources and visibility into some of the worlds most advanced cyberattacks. you will lead exciting research projects for public release, customers, and internal stakeholders.
we are looking for an experienced, proactive, and independent team member who can lead dynamic, in-depth research and shape the teams long-term vision.
major responsibilities
research and analyze cyber threat actors.
be the first to flag trends, new malware, threat actors and intelligence items that stand out in the crowd
execute the full intelligence research lifecycle:
monitoring and analyzing the digital underground - including the darknet, the deepweb, and other open and restricted sources
gather & flag intelligence that stands out.
assess, validate, and refine raw information into high-confidence insights
produce clear, well-structured written research and threat assessments
build, maintain, and continuously evaluate a diverse set of reliable intelligence sources
identify long-term trends, relationships, and shifts in adversary behavior
conduct deep intelligence collection operations and collect proprietary intelligence
collaborate with other researchers and internal stakeholders to contextualize findings and improve threat coverage
maintain high analytical and research standards, including sourcing, attribution, and methodological rigor

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the company research (cpr) is looking for a threat researcher to join its threat intelligence analysis (tia) team. the team is responsible of discovering, analyzing and tracking advanced threat actors and campaigns, with a strong focus on high-end cybercrime and state-sponsored activities. you will join a team of motivated, independent & highly technical individuals and contribute the effort to protect the company customers and empower the company brand.
identify, understand and monitor advanced campaigns using publicly available sources as well as internal telemetry.
analyze malware and other hacking tools utilized by threat actors in active campaigns and intrusions.
create technical research content for public and private intelligence reports.
help build protections and detections based on deep understanding of advanced threat actors tactics techniques and procedures (ttps).
collaborate with other security teams to assist threat intelligence and research tasks.

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.