דרושים » אבטחת מידע וסייבר » cloud detection engineer, cloud (hybrid, isr)

as a global leader in cybersecurity, the company protects the people, processes and technologies that drive modern organizations. since 2011, our mission hasnt changed - were here to stop breaches, and weve redefined modern security with the worlds most advanced ai-native platform. we work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. our customers span all industries, and they count on the company to keep their businesses running, their communities safe and their lives moving forward. we're proud to work for a mission-driven company leveraging ai to transform the way we work. team members drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible ai adoption, experimentation, and innovation. we use an ai-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. were always looking to add talented team members to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. ready to join a mission that matters? the future of cybersecurity starts with you.
about the role:
the company is looking for a senior cloud software engineer to join our growing product development team. this team of engineers focuses on security related development on endpoint, cloud, and back-end with a particular focus on data security. we're looking for smart people who want to be challenged and take ownership of what they build, working in an environment where quality is a top priority.
youll be joining our data security product group, whose mission is to build a unified data security platform that enables our customers to protect their most important asset, their data. you will work on a team that builds solutions to protect data on endpoints, cloud and saas and allows our customers to manage and secure their data in an ever connected ai world.
you'll do:
design and build highly scalable and resilient distributed systems
design and build cloud based systems to help our customers to monitor and protect their most sensitive data.
obsess about learning, and champion the newest technologies with others, raising the technical iq of the team.
work with technologies like apache kafka, cassandra, elasticsearch, redis and more
work on cross-team platform-level initiatives and projects
understand the software architectures of the team deliverables; actively participate in design discussions.
take ownership and be accountable for deliverables, both individually and when leading a team.
troubleshoot deep technical issues and implement solutions
mentor other developers on cloud and backend technologies
constantly look to improve our architecture, knowledge models, User Experience, performance and stability
deliver and accept feedback with grace and courtesy.

as a global leader in cybersecurity, the company protects the people, processes and technologies that drive modern organizations. since 2011, our mission hasnt changed - were here to stop breaches, and weve redefined modern security with the worlds most advanced ai-native platform. we work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. our customers span all industries, and they count on the company to keep their businesses running, their communities safe and their lives moving forward. we're proud to work for a mission-driven company leveraging ai to transform the way we work. team members drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible ai adoption, experimentation, and innovation. we use an ai-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. were always looking to add talented team members to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. ready to join a mission that matters? the future of cybersecurity starts with you.
about the team:
you'll be joining the data protection team in our data security product group, whose
mission is to build a unified data security system which enables customers to identify and investigate insider threats, identify access to and movement of sensitive data, and ensure regulatory compliance by mitigating data loss risk.
about the role:
our flagship product is a two-component security product. one component is a sensor: a driver installed on client machines that observes system activity and recognizes malicious behavior, then provides on-box prevention capability and remote telemetry to the cloud. the sensor processes thousands of events per second to provide deep visibility into operations on the endpoint, and performs rich correlation and computation to identify malicious events and blocks malicious activity.
the cloud component aggregates sensor telemetry for each customers network, correlates malicious behavior across multiple machines, and presents our customers operations teams with a prioritized summary of the threats detected in their environments.
this is a macos Developer role in the engineering team that delivers data protection-focused functionality in the sensor (lightweight agent) on macos. engineers in the team own the design and development of core features on the platform. data protection-focused functionality centers around file interfaces, including related endpoint security system extension interfaces. the team operates under the agile development principles and ships frequently.
what you'll do:
design and develop data protection-focused system extensions and associated services for deployment on macos systems
own features from design to delivery
collaborate with multi-functional team in various physical locations
troubleshoot issues with the product as reported from customers responsively
other projects as assigned

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

If you are an innovator at heart and passionate about redefining how organizations secure modern environments end-to-end, we're looking for you.
We're looking for a Manager to lead a security research team for detection and response across cloud environments.
This is an opportunity to lead an exceptional group of researchers working on a startup-level product within the largest security company, helping revolutionize how organizations protect their Kubernetes and hybrid cloud environments.
Key Responsibilities
Manage a team of security researchers conducting research on attacks against cloud data , Kubernetes and containers.
Lead, mentor, and grow a team of talented security researchers focused on defending organizations as they transition from on-premises data centers to modern cloud and Kubernetes infrastructure.
Drive the strategy and execution of research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks targeting hybrid and cloud-native environments.
Define and prioritize detection use cases, relevant datasets, and innovative analytic approaches combining runtime visibility and posture management across diverse platforms.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs to ensure our detection capabilities stay ahead of evolving threats in both legacy and cloud contexts.
Oversee simulation of real-world attacks and deep behavioral analysis to inform and validate detection content.
Foster collaboration across engineering, product management, and go-to-market teams to deliver impactful security solutions.
Represent the team and share insights with the security community through blogs, conference talks, and publications.

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the exposure management research group at the company is expanding. we are looking for an experienced offensive security researcher to join our newly formed aev team and lead the offensive side of our agentic exposure validation (aev) research.
about the group:
the exposure management research group is the research arm behind the company's exposure management platform. the platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. the group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. our work relies heavily on data science, Machine Learning, and agentic ai to operate at scale.
about the position:
exposure validation goes beyond identifying that a vulnerability exists. its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. in this position, you are responsible for bringing real offensive expertise into our aev capability, which runs on an agentic ai system that validates exposures across our customers' environments.
you conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. you also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
this is a research position with direct product impact. it combines practical red team work with shaping how an ai-driven platform conducts, reasons about, and reports offensive activity.
what you'll do:
design and run offensive research against external attack surfaces: web applications, apis, cloud-exposed services, identity, and edge infrastructure
turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
write and maintain the exploitation methodologies and attack hypotheses our agentic aev engine runs on
review agent runs and findings. separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we are on the lookout for a driven and experienced hands-on engineering team leader to lead a group of engineers building the company's sensor.
this team owns the entire endpoint agent, which is the backbone of the company's collection capabilities from windows and Linux endpoints.
as a hands-on leader, youll guide a talented team of engineers in designing and evolving the agent that enables our fully ai-driven platform to identify and respond to Real-Time advanced persistent threats.
lead a team responsible for the endpoint product on windows and Linux systems.
mentor engineers, grow the team, and foster a culture of technical excellence and innovation.
design and code production-grade C ++ to create robust and high-performance software applications.
collaborate with backend, frontend, research and other teams within the company to deliver state-of-the-art solutions for challenging problems.
define and drive the technical roadmap, ensuring scalability, Developer productivity, and rapid iteration.
participate in code reviews with an emphasis on design and code quality, ensuring the team adheres to best practices and guidelines.
5+ years of experience in endpoint development in the cybersecurity field.
2+ years leading and mentoring engineers.
fluent in C ++ (11 or later).
deep understanding of operating system concepts.
excellent debugging skills.
capable of conducting code reviews with a focus on design and quality, enforcing high-standard codebase.
problem-solving abilities.
analytical thinking.
if you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, wed love to hear from you!

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we're looking for a Cyber security researcher to join the research team within our posture management group. our product is ai-driven, and this is a research role on the research team. youll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. a core part of the role is helping to build ai agents that emulate threat actors flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths.
5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar).
implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths
conduct network security assessments to identify weaknesses in customers network infrastructure and recommend mitigations to monitor and limit unauthorized access.
research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., active directory, network segmentation, identity infrastructure, exposed services).
build poc exploits/attack chains to validate risk hypotheses before they're modeled into the product. collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers.
produce clear technical documentation of research findings, attack paths, and proposed detection logic.

Were looking for a top-notch Threat Detection Researcher to join our team and spread the power of our company. In this role, you will further develop the company Runtime Sensor as part of our threat research team.
Responsibilities
Develop detections and tools to protect customers from cloud threats.
Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
Hunt and analyze real-world attacks and emerging cloud and AI threats.
Collaborate closely with the R&D team to transform research insights into product features.
Work with customers in response to requests related to suspicious activity or potential incidents.
Create best practices and security policies based on research findings.
Deliver external-facing content (blog posts and talks at security conferences) based on security insights and novel research.

We are looking for a talented Cloud Security Researcher to join our team in Israel. In this role, you will focus on hands-on research of cloud security risks, analyze misconfigurations, and translate findings into impactful product capabilities.

You will work closely with Research, Engineering, and Product teams to ensure that your research directly contributes to securing cloud environments at scale. This is a highly technical role suited for someone who enjoys deep diving into cloud systems, understanding how things work, and helping build solutions that prevent it.

Responsibilities
Conduct cloud security research focusing on misconfigurations, IAM risks, and cloud attacks.
Investigate real-world attack vectors and security gaps in cloud environments.
Design and prototype preventative security mechanisms and controls.
Translate research insights into product features, policies, and detection capabilities.
Work with Solution Engineering and occasionally customers to understand real-world use cases and validate findings.
Analyze complex cloud architectures and identify scalable security improvements.
Take ownership of research tasks from exploration to delivery.
Contribute to internal knowledge sharing and cloud security best practices.