לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 489 משרות

Required Principal AI Security Engineer
Job Description
Role
This is a hands-on architecture role: deep research, secure systems design, and prototyping, applied across product lines with minimal direction and broad latitude to set the technical agenda. You will set platform-wide direction for securing the AI development lifecycle, define the security architecture, agents, and models operating within it, and represent our AI security point of view externally. You'll be a technical authority other engineers and other teams look to on emerging AI-specific threats, working in close partnership with the AI security research team - drawing on their findings and feeding real-world attack surfaces back into their agenda.
What you'll do:
Own the security strategy and architecture for our Agentic AI ecosystem, LLMs, and models across product lines
Lead threat modeling for the most complex and novel GenAI/agentic surfaces: cross-agent autonomy, multi-agent tool orchestration, and emerging attack classes not yet standardised in the industry
Set the architectural standard for securing model/RAG/data pipelines platform-wide, including access-control and data-boundary models that other teams are expected to build against
Define what "secure-by-design" means for agentic systems, and drive adoption across engineering orgs
Represent our AI security posture externally (standards bodies, industry publications, conferences) and internally to executive stakeholders
Mentor and technically guide engineers on AI-specific security work

We seek a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is our awareness, response, and investigation capability for post-release vulnerabilities in our-developed products and service offerings.
This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform-vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events.
This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them-and will use that fluency to lead fixes to completion under incident pressure. You will help shape how we respond to product security vulnerabilities at scale and the technical rigour of the entire response capability.
The coverage provided by this role is:
Sunday: 10:00 - 18:00 UTC.
Monday: 08:00 - 16:00 UTC.
Tuesday: 08:00 - 16:00 UTC.
Wednesday: 08:00 - 16:00 UTC.
Thursday: 08:00 - 16:00 UTC.
Due to the nature of incident response and the needs of the business, coverage may change. Additional coverage outside of stated hours may be required in response to significant incidents.
Key Responsibilities:
Lead Through Significant Security Events:
Demonstrate technical and organisational leadership during these events-bringing structure and clear decision-making under pressure.
Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events.
Reduce Exposure Window:
Drive coordinated response across affected releases, balancing risk and remediation feasibility.
Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organisational boundaries.
Verify fix completeness and guard against incomplete mitigations before release.
Drive the CVE & Coordinated Disclosure Process:
Collaborate with external security partners, vendors, and researchers on coordinated disclosures, aligning timelines and messaging across parties.
Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication.
Represent PSIRT's technical position in multi-party coordinated disclosures and researcher engagements.

As a Security Researcher , you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities.

This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work.

Specifically, you will:

Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems.
Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs.
Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection.
Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats.
Work closely with engineering and product teams to turn research into practical security capabilities.

We seek a Staff Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities:
Triage and Resolve Bug Bounty Reports:
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication:
Act as our primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards:
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.
Lead Advanced Security Work Beyond Triage:
Conduct variant hunts to find related instances of reported vulnerabilities before they are discovered externally.
Perform original platform security research to surface issues ahead of external researchers.

we are looking for a Lead Endpoint Researcher.
What You'll Do
Research AI coding agent runtimes, reverse-engineer how tools such as Claude Code, Cursor, Copilot CLI, Codex, and emerging agents execute commands, access files, spawn processes, and interact with the operating system.
Design agent sandboxing architectures that safely constrain filesystem access, networking, process execution, credentials, and other sensitive endpoint capabilities.
Explore and implement OS-native isolation mechanisms across macOS, Windows, and Linux, including containers, namespaces, sandbox profiles, virtualization, restricted processes, and permission models.
Build endpoint "harnesses" that allow TokenShift to intercept, control, observe, and modify agent execution flows.
Design infrastructure for deploying and running local LLMs across heterogeneous endpoint fleets, accounting for operating system, CPU architecture, GPU availability, memory constraints, and hardware acceleration.
Evaluate local inference runtimes and model formats such as llama.cpp, MLX, ONNX Runtime, Ollama, vLLM-compatible runtimes, and emerging alternatives.
Develop mechanisms for model discovery, installation, versioning, updates, health monitoring, and lifecycle management across large numbers of developer machines.
Research hardware-aware model selection and routing, deciding which models can run effectively on Apple Silicon, NVIDIA GPUs, Windows workstations, Linux machines, CPU-only environments, and other endpoint configurations.
Build benchmarks that measure model latency, throughput, memory consumption, startup time, resource contention, and developer experience on real endpoint hardware.
Investigate security boundaries between local models, cloud-hosted models, agents, MCP servers, shells, and enterprise resources.
Collaborate with the core CLI and platform teams to take endpoint research from prototype through production.
Track the rapidly evolving AI agent, sandboxing, and local inference ecosystems and proactively identify technologies should support.

we are seeking an experienced Malware Research Team Leader to lead a team of malware researchers, combining hands-on research with people leadership. This role presents an opportunity to lead an established team, strengthening its skills through ongoing training and guidance while ensuring high-quality deliverables.
The position balances managerial responsibilities with hands-on technical work (approximately 50% each). The ideal candidate demonstrates a positive, proactive attitude and excels as a reliable team player.
Key Responsibilities:
Mentor and manage a team of malware researchers, including recruitment
Conduct short, focused malware research under tight timelines
Detect and document emerging malware trends
Evaluate and enhance team accuracy and performance
Regularly share knowledge with team members and collaborate across teams and departments
Continuously improve malware analysis and review processes
Develop automation processes for malware identification at scale.

We're looking for an AI researcher to take an integral part in research into how these models behave, how they should be evaluated, and how they can be deployed and used more efficiently across real engineering workloads.
This is a deeply technical research role with direct product impact.
You'll study frontier and open-source models, develop evaluation frameworks, investigate inference and model optimization techniques, explore local deployment strategies, and help answer questions such as:
Which model should handle a particular task?
How much capability do we lose when we quantize it?
Can a smaller local model replace a frontier API for a specific workload?
How should models be routed across latency, cost, privacy, and quality constraints?
How do we measure whether one model is actually better than another for agentic software engineering?
Your work will directly shape model strategy and the intelligence behind our AI infrastructure products.

we are seeking to hire a Technical Fraud Threat Analyst to join the Fraud team. In this role, you will research, evaluate, and analyze fraud detection mechanisms, abuse vectors, and platform vulnerabilities across a wide range of online services.
You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations, and identify emerging fraud tactics and behavioral vulnerabilities. In addition to research and analysis, you will leverage technical tools and infrastructure to support investigations, simulate real-world abuse scenarios, and enable scalable fraud research. Your work will culminate in actionable intelligence and mitigation recommendations for clients.
Key Responsibilities:
Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the dark web).
Design and execute fraud research methodologies, including technical validation of abuse scenarios.
Build, maintain, and operate research environments and technical tooling that support fraud investigations and red team activities.
Analyze large datasets, telemetry, and technical artifacts to uncover patterns and deliver actionable insights.
Develop or leverage automation to improve research workflows and increase operational efficiency.
Monitor third-party websites and channels for malicious activities and fraud risks.
Prepare detailed reports with findings, insights, and actionable recommendations.

we are hiring Intermediate Malware Researchers to analyze and review malware applications. Candidates should have a background in cybersecurity and software development.
The role includes training in malware analysis and detection and provides exposure to various malware threats and techniques. Researchers will combine technical and intelligence findings to reach accurate verdicts and assist in the bulk removal of malicious applications. The position requires adaptability and proactive identification of emerging malware trends.
We are seeking candidates who are willing to learn, can perform effectively under pressure, and maintain high professional standards.

we are seeking to hire a Fraud Threat Analyst to join the Fraud team. In this role, you will be responsible for researching, evaluating, and analyzing fraud detection mechanisms and vulnerabilities across various platforms and solutions.
You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations to identify fraud risks, and monitor online platforms to detect malicious activities. You will also focus on uncovering fraud tactics, behavioral vulnerabilities, and process bypasses while delivering actionable mitigation recommendations to clients.
Key Responsibilities:
Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the darknet).
Analyze large datasets to uncover patterns and deliver actionable insights.
Monitor third-party websites and channels for malicious activities and fraud risks.
Prepare detailed reports with findings, insights, and actionable recommendations.

we are seeking an experienced Researcher to join our team dedicated to Android malware research. This role presents an exciting opportunity to conduct comprehensive malware analysis, detect emerging threats, and contribute to our understanding of the Android threat landscape.
The ideal candidate demonstrates a positive, proactive attitude and excels as a reliable team player with strong technical skills in Android malware analysis.
Key Responsibilities:
Conduct in-depth Android malware research and reverse engineering
Detect and document emerging Android malware trends and attack vectors
Analyze Android applications for malicious behavior
Write detection rules and develop automation processes for Android malware identification
Collaborate with team members and share knowledge across departments
Perform static and dynamic analysis of Android malware samples
Document findings and contribute to threat intelligence reports.

Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our VP Security & Research, you'll report directly to the CEO and own our malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts us on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of us for customers, partners, and the wider security community.

What You'll Do
Set the strategy and roadmap for our malvertising detection and security research.
Lead, mentor, and grow the security research team.
Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities.
Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem.
Own detection quality: push for uncompromising precision, coverage, and speed.
Drive original research and publications, and represent us at leading security conferences.
Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it.
Report to the CEO and management on research impact, threat landscape, and priorities.

We are looking for an Information Security and Cyber Specialist with hands-on experience in information security systems to join the company’s Information Security team. The role includes responsibility for the operation and management of security systems, the investigation of information security incidents, and advanced technological areas within the Information Security Department.

Responsibilities:

* Monitoring, operation, and maintenance of information security systems.
* Handling and analyzing information security incidents at the Tier 2 level.
* Conducting initial and advanced investigations of cyber incidents.
* Working with IT and DevOps teams and external vendors.
* Writing procedures and technical documentation.
* Assisting with regulatory controls, risk assessments, and audits.
* In-depth knowledge of Microsoft 365 and Azure Security systems.
* Experience in managing and implementing EDR/XDR and SIEM systems and endpoint protection solutions.
* In-depth understanding of networking and Windows and Linux operating systems.
* Experience working with firewalls, VPN, NAC, and network security solutions.
* Ability to work independently, learn quickly, and maintain a system-wide perspective.

we are a leading trust, safety, and security company. Just like 'Alice' herself, we go down the rabbit hole into the emerging world of AI and focus on safeguarding these technologies. In a world where AI has fundamentally changed the nature of risk, our company offers coverage across the entire AI lifecycle. We're currently on the ground floor of an exciting new initiative: building an "Elite Collective" of the world's premier OSINT/WEBINT experts-high-stakes, project-based work for the "best of the best" researchers in the industry. Work is on-demand and project-dependent, scaling up and down based on the needs of the client. This is not a high-volume, repetitive role; it is an opportunity to be tapped for specific, high-impact interventions when your unique expertise is required. The most sophisticated technology challenges in the world are waiting down the rabbit hole. We're looking for the sharpest minds to help us secure the frontier. The invitation is open: Come join us at the tea party. About the Position As one of our company's OSINT/WEBINT Researchers, you'll conduct in-depth open-source and web intelligence research to identify, analyze, and assess a wide range of online threats and harmful activities across platforms. Your work directly supports the safety of some of the world's largest digital platforms. We are seeking researchers with expertise in one or more of the following domains:
* Child Safety - Detecting and analyzing child sexual abuse material (CSAM) and grooming indicators
* Hate Speech & Extremism - Tracking radicalization trends, hate groups, and violent ideologies
* Counterterrorism - Identifying terrorist propaganda and networks
* Organized Crime - Investigating illicit trade, fraud, and trafficking operations
* Platform Integrity & Manipulation - Uncovering coordinated inauthentic behavior, influence operations, and misinformation campaigns Key Responsibilities
* Conduct end-to-end intelligence research projects across multiple abuse areas (hate speech, violent extremism, child safety, platform manipulation, organized crime, fraud, and disinformation)
* Collect, analyze, and contextualize data from a variety of open and closed sources, including social media platforms, chat applications, gaming platforms, forums, and AI tools
* Apply OSINT/WEBINT methodologies (search, dorking, verification, network mapping, and trend analysis) to identify indicators of online threats and harmful behavior
* Prepare concise analytical reports and datasets, summarizing key findings, insights, and emerging risks
* Stay up to date on global online threat trends and evolving tactics across different platforms
* Collaborate with internal and external stakeholders (e.g., Delivery, Product, and Policy teams) to ensure timely and high-quality outputs
About us:
we are a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, we provide end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. we are widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!