לוח משרות דרושים מומחה אבטחת מידע / סייבר

we are looking for a Cyber Security Engineer
As a Cyber Security Engineer , youll play a key role in protecting our global platform and ensuring the resilience of our systems against emerging threats. Youll be responsible for investigating and responding to security incidents, analyzing malware, and conducting threat hunting activities across cloud environments.
Youll collaborate closely with the Infosec team, engineers, and cross-functional stakeholders to detect, contain, and mitigate threats, while continuously improving our security posture.
As part of a strong, experienced team, youll contribute to design, shape and implement information security solutions, mentor others in best practices, and drive automation initiatives to streamline detection and response.
Responsibilities:
Develop and maintain automation scripts in Python to enhance SOC efficiency and incident response workflows.
Perform initial triage and assessment of security incidents, identifying threats and recommending mitigation strategies.
Conduct static and dynamic analysis to uncover malicious behaviours, code, and techniques.
Apply forensic methodologies to extract, analyze, and interpret digital evidence to support investigations and attribution.
Investigate and mitigate cloud-based threats, with a focus on AWS environments.
Collaborate with cross-functional teams to strengthen overall organizational security and ensure best practices.

Were seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen detection capabilities. In this role, youll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. Its a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses.

Responsibilities

Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies.
Conduct research on cloud, web, and API security to uncover new threats and attack vectors.
Develop, refine, and design world-class detection logic and rules to enhance runtime protection.
Perform threat-hunting activities across large data sources to identify emerging attack patterns
Drive full-cycle research: from hypothesis and experimentation to production validation.
Collaborate with engineering and product teams to deliver actionable insights.

Were looking for an Application Security Researcher with strong penetration testing skills and a solid development or research background to join our Security Research team. This is a critical role where youll work closely with developers and researchers to build application security platform.

Responsibilities
What Youll Be Doing

Be a key member of OX research team building our vulnerability management platform, focusing on vulnerability exploitation analysis
Evaluate open source intelligence feeds and vulnerability knowledge base
Develop unique detection engines to enhance dynamic application security testing (DAST) solution
Take active part of the ideation process and prototyping of new features and product offerings

Were looking for an experienced and curious Cloud Security Researcher to join our Security Research team and help us push the boundaries of what cloud security can achieve. This is a high-impact role where youll explore new attack surfaces, uncover blind spots, and help shape cloud capabilities and research strategy.

Responsibilities
What Youll Be Doing

Lead deep-dive research projects into cloud environments, services, and misconfigurations
Identify and explore security gaps across major cloud providers (AWS, GCP, Azure)
Collaborate with Product and Engineering teams to turn research into productized features
Conduct offensive simulations to validate risks and their business impact
Communicate findings internally and externally through reports, whitepapers, or talks
Take active part of the ideation process and prototyping of new features and product offerings

We're looking for an experienced Principal Threat Researcher to join our Threat Hunting team. Reporting to the Senior Manager, Threat Research, you'll be responsible for:

Leading end-to-end research POCs: formulating hypotheses, designing methodologies, implementing experiments, analyzing results, and translating findings into production-ready capabilities and customer outcomes
Researching and developing methodologies for identifying, assessing, and mitigating threats and risks across diverse data sources
Partnering with data scientists and ML engineers to shape model features, training data strategies, and evaluation frameworks derived from real-world signals
Providing actionable recommendations to improve data quality, policies, detections, controls, and response strategies across Zscalers security offerings
Presenting research findings clearly and meaningfully to technical and non-technical stakeholders; influencing roadmap decisions with evidence-based insights

We are seeking a security researcher, who enjoys unraveling the mysteries and unique patterns of corporate computing environments and attackers techniques in enormous scale of signals and security mechanisms, to join our Israeli research team and help provide our customers with tools to improve their security posture.
The job includes performing both low level and high-level research of attackers techniques, security mechanism and controls and data analysis over various types of telemetries.
We value diversity and welcome candidates with different experiences and perspectives. If you are a team player who loves creating products for and with customers, come join us and be part of building a better world.
Responsibilities:
Analyze and research security controls, attackers techniques and anomalous patterns
Explore massive amounts of data to come up with new security posture insights, which can then be translated into security findings for our customers
Work together with the different engineering teams to develop the code to support the research findings
Collaborate with multiple product teams to design sensors, implement discovery & detection logics and validate their effectiveness using a data-driven approach
Collaborate with other teams across and come up with innovative ideas which should be part of future versions of the produc

We are looking for a Senior Security Researcher - Red Team.
As a Senior Security Researcher, you will lead proactive vulnerability research, developing novel proofs-of-concept and exploit chains that emulate real-world attackers.
You will discover vulnerabilities across AI systems, validate exploitability, and work closely with engineering and product teams to drive remediation. The vulnerabilities you will find will impact hundreds of millions of users!
Responsibilities:
Become a founding member of the AIAL group as part of Red Team. Help shape the team culture and practices.
Research and discover zero-day vulnerabilities in AI applications, models, and AI service ecosystems. Work closely with Red Team operators and engineering teams to address findings and strengthen resilience of AI-driven systems.
Analyze a wide array of data sources to identify potential security weaknesses and breach points within AI infrastructure.
Develop tools and techniques to scale and accelerate adversary emulation and vulnerability discovery.
Advocate for security change across the company through building partnerships and clearly communicating impact of risks.

We are looking for a Senior Security Technical Program Management - Threat protection research.
As a Technical Program Manager for Security Threat Research, you will own the strategy, planning, and execution of global threat research programs in the area of attack response automation, with a strong emphasis on quality, operational excellence, and AI-driven innovation to enhance the protection value to cusotmers.
Were looking for an experienced professional with proven program management expertise and solid technical security knowledge, who can bring clarity, structure and a proactive approach to complex, cross-functional environments.
Youll collaborate closely with threat researchers, data scientists, product managers, and engineering teams across Defender XDR and related security and AI technologies to deliver programs that advance threat response automation and strengthen protection for customers worldwide.
Responsibilities:
Drive the creation and execution of threat response quality programs and processes, incorporating insights and AI across global research and product teams.
Develop and maintain program plans, timelines, OKRs, and KPIs to ensure high-quality and timely delivery.
Act as a technical and strategic advisor, collaborating across teams to share knowledge, influence decisions, and shape future directions.
Provide guidance and coaching that promote an inclusive culture and a growth mindset across teams.

The CSO Office is seeking an Application Security Engineer. In this role, you will contribute to driving security across the SDLC at scale, empowering developers, and enabling secure development through automation, process, and tooling. Youll work as part of a team of security engineers focused on SSDLC automation, vulnerability management, and proactive engagement with R&D.

This is a hands-on technical role that combines architecture, coding, and collaboration, working closely with Product, Engineering, DevOps, and Security stakeholders.

As an Application Security Engineer you will...
Assist in the development of internal security tools and AI agents.
Support the design and implementation of SSDLC practices and automated security controls across the CI/CD pipeline.
Contribute to building and operating scalable vulnerability management frameworks across cloud-native services and SaaS products.
Integrate security into Agile and DevOps processes, including threat modeling, SAST, DAST, and SCA.
Develop Internal application security Tools and Automations.
Partner with development and DevOps teams to embed security early and often.
Contribute to secure code reviews and assist with remediation strategies.
Track, triage, and report vulnerabilities across product lines.
Support the adoption of secure development best practices.