לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 489 משרות

We're looking for a Security Engineer - our company Product to spread the power of our company. The ideal candidate will have experience performing security reviews, vulnerability management, and detection and response operations in cloud-native environments. Youll get to collaborate with our software development and DevOps teams to secure our companys products, CI/CD infrastructure, and production infrastructure. Youll also have the opportunity to influence our product roadmap by utilizing our company-for-our company to assess, monitor, and harden our environments.
Responsibilities
Lead threat modeling and security design reviews with R&D and Product teams - identifying and mitigating architecture risks early in the development lifecycle.
Drive vulnerability management and remediation - actively writing IaC (Terraform), submitting code PRs, and developing security automations (Python/Go) to resolve risks.
Extend cloud detection and response capabilities - authoring detection rules, monitoring cloud environments, and investigating live security incidents across our production infrastructure
Act as "Customer Zero" by leveraging our company to protect our company- dogfooding new product features in our massive multi-cloud environment and directly shaping the product roadmap.
Partner with our DevOps and our company Federal teams - hardening CI/CD pipelines, container/Kubernetes infrastructure, and extending security controls to FedRAMP environments.
Enable engineering teams to deliver secure-by-design cloud and AI solutions without slowing down development velocity.

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

Were looking for a top-notch Threat Detection Researcher to join our team and spread the power of our company. In this role, you will further develop the company Runtime Sensor as part of our threat research team.
Responsibilities
Develop detections and tools to protect customers from cloud threats.
Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
Hunt and analyze real-world attacks and emerging cloud and AI threats.
Collaborate closely with the R&D team to transform research insights into product features.
Work with customers in response to requests related to suspicious activity or potential incidents.
Create best practices and security policies based on research findings.
Deliver external-facing content (blog posts and talks at security conferences) based on security insights and novel research.

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Googles Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation.
Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. Were honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At our company, youll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun!

our company's WAF Copilot takes a freshly disclosed CVE and produces a validated, provider-specific WAF rule - researching the vulnerability, deriving the attack surface, composing the rule, then attacking its own output with an independent bypass judge and a false-positive prober before a human is offered a deploy.
As WAF Security Specialist you are the ground truth the Copilot is measured against - the person who can look at a generated rule and say this blocks the PoC but not the four obvious variants, this will trip on legitimate multipart uploads, this is 340 WCUs of nothing because the managed ruleset already catches it, this can't be anchored tightly enough to live in a global Web ACL.
You'll be shipping rules for real customers - and you'll do it through our AI harness, and help optimize it.
In practice that means driving the harness on live work: feeding it a vulnerability, judging what comes back, tightening the match, and validating it against real exploit traffic until it's something you'd put your name on.
Sometimes you'll write the expression yourself - the CVE with no public PoC, the emerging threat you have to reason out of a patch diff, the customer who needs coverage this afternoon. Most of the time you'll be applying expert judgment at every step of a generated rule's life, which is a different and harder skill than authoring from a blank page.
Because you'll be the harness's heaviest user, you'll also be the reason it gets better. You'll see exactly where it breaks down - the research step that missed the real sink, the composer that over-broadened, the judge that passed a rule it shouldn't have - and turn that into validations, analyses, and evals that go back into the agent. You'll work side by side with the Copilot & AI team so the agent stops making the mistake, instead of you catching it again next month. That feedback loop is the core of this role.
All of it rests on knowing where WAFs actually break: normalization and encoding evasion, parameter pollution, body-inspection size limits, oversize-content handling, rule precedence, and the gap between "the rule matched in staging" and "the rule holds against a motivated attacker." An AI can propose a rule. Knowing whether to trust it is the job.
What You'll Do
Create - Produce production WAF rules across providers for high-impact CVEs and customer findings - driving the Copilot harness on most of them, writing the expression yourself on the hard ones (no public PoC, exploitable path reasoned out of a patch diff, urgent customer coverage). Your rules ship, and they set the bar generated rules are measured against.
**Optimize -**Tighten generated rules for real production constraints: WCU and rule-capacity budgets, latency, provider expression limits, and the anchoring required for a rule that fires against all traffic behind a shared Web ACL - not just the vulnerable app.
Validate - Own the adversarial pass. Build exploit variants the PoC doesn't cover, hunt bypasses in our own rules, and run the false-positive side seriously - verifying against how the legitimate client actually behaves on the wire, not against an assumption.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.

Responsibilities

Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.

Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.

Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.

Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.

Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.

Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.

Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.

Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

We're looking for an experienced Security Researcher to join our core team and deep dive into CVEs, conducting cutting-edge vulnerability research that directly powers our company's revolutionary approach to eliminating container vulnerabilities at the source.
Responsibilities:
Conduct deep-dive research into CVEs and vulnerabilities, analyzing root causes and attack vectors to inform our AI-powered prevention platform
Perform reverse engineering analysis using tools like IDA Pro, Ghidra, or similar platforms to understand complex security vulnerabilities and exploitation techniques
Research and analyze complex low-level system mechanisms including kernel vulnerabilities, network security issues, and operating system weaknesses
Think outside the box, challenge existing assumptions, and create innovative approaches to vulnerability research and prevention
Work in a unique environment where your research insights are rapidly implemented into our product, creating direct real-world impact from your vulnerability research
Contribute to our company's technical knowledge base and help establish new methodologies for proactive vulnerability identification and mitigation.

We are seeking a Head of Research to build and lead our research group reporting to the Co-founder and CTO. You'll set the research agenda for how AI agents, spanning coding agents, SaaS AI platforms, cloud, and endpoints, can be abused, and you'll turn that research into the detections and runtime protections that define our product. You'll build the team, the threat intelligence function, and the processes that keep us ahead of a threat landscape that changes weekly. This is a hands-on leadership role. You'll still go deep on platforms and attack paths while scaling research into a core differentiator of the company. You will help define the field of Agentic Security and be one of its leading voices.

Responsibilities

Lead and grow the research team: Hire, mentor, and manage AI security researchers. Build a culture of rigor, speed, and ownership.

Own the research direction: Proactively identify emerging agentic threats and platforms, prioritize research projects, and set a roadmap aligned with product and customer needs.

Build threat intelligence processes: Establish how we collects, triages, and operationalizes threat intelligence on agentic attacks. This includes in-the-wild abuse, malicious MCP servers, skills and extensions, and new techniques from the research community.

Drive research into product: Partner closely with engineering and product so findings become production detections, runtime policies, and governance capabilities. Own the coverage and quality of our detection logic.

Define detection strategy: Set standards for detection logic across environments, including coverage models, efficacy measurement, and false positive and false negative management at enterprise scale.

Stay hands-on: Lead deep dives into platform architectures, monitoring and enforcement boundaries, and end-to-end PoCs for the most critical attack paths.

Represent us externally: Publish research, advisories, and vulnerability disclosures. Speak at leading security conferences and build our reputation as the authority on agentic security.

Support customers and the field: Provide research expertise for customer engagements, incident investigations, and strategic accounts.

We're looking for an experienced Application Security Researcher to help customers maximize the value of our AI-powered offensive security platform.

In this role, you'll work hands-on with customer environments, validate security findings, investigate complex application vulnerabilities, and help organizations understand, reproduce, and remediate the risks identified by our platform.

You'll collaborate closely with customers, Product, Engineering, AI Research, and Customer Success teams, providing valuable feedback that continuously improves the platform while serving as a trusted technical advisor throughout the customer journey, from complex deployments to production investigations.

This is an ideal role for someone with a strong offensive security background who enjoys combining technical research with customer interaction and wants to help shape the future of AI-driven application security.

Responsibilities
Validate vulnerabilities discovered by our AI platform and provide clear technical evidence of successful exploitation.
Perform hands-on testing of modern web applications and APIs to verify findings and identify additional attack paths.
Analyze complex application security issues, including authentication, authorization, business logic flaws, and API vulnerabilities.
Help customers understand security findings, reproduce vulnerabilities, assess risk, and implement remediation recommendations.
Investigate cases where the platform missed, misclassified, or incorrectly assessed vulnerabilities and provide actionable feedback to Product and Engineering teams.
Collaborate closely with AI Research and Engineering teams to improve detection accuracy, attack coverage, and platform capabilities.
Develop new attack methodologies and validation techniques for modern web applications.
Stay current on emerging application security trends, offensive techniques, and modern attack methodologies.
Support customers during complex deployments, integrations, and production troubleshooting, including BYOM deployments and connectivity to internal applications.

Our mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and IOS apps - with no SDKs, no coding, and no disruption to engineering cycles.
Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, our AI Agents help mobile brands detect, investigate, and respond to threats faster than ever - recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally.
An Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics.
About the Role We are looking for a talented, passionate Offensive Researcher to join our innovative research team. If youre eager to explore cutting-edge mobile security techniques and help safeguard the mobile app ecosystem, this is the role for you! As a key player in our security team, you'll design and execute sophisticated attack simulations on the platform. Your work will touch on diverse attack vectors, including file systems, networks, jailbreaks, memory injections, and more.

we are looking for a Principal Security Researcher.
We're looking for a Principal Security Researcher, based in Israel, to bring deep offensive security expertise, autonomy, and a relentless attacker mindset to help drive lasting security improvements at scale.
What You'll Actually Be Doing:
Lead advanced penetration testing, red team operations, or security research against cloud infrastructure, applications, and services, uncovering vulnerabilities that matter most
Build custom tools, exploits, and attack techniques that simulate real-world adversaries and raise the bar for our offensive security tradecraft
Partner with product teams to translate offensive findings into remediation and stronger secure design practices
Mentor team members and present findings to technical and executive audiences, growing the team's overall offensive security capability
JR360843

The Threat Intelligence Analyst will conduct research both independently and in collaboration with other team and department members to detect cybersecurity threats and produce analytical reports and other intelligence deliverables.

The successful candidate possesses an intelligence or research background, experience in cybersecurity-related roles, and excellent written and verbal communication skills in English.

Responsibilities:

Monitor the threat landscape to identify new trends, intelligence sources, threat actors, attack tools, and techniques, providing unique perspectives from both KELA and outsourced sources.
Conduct Open-Source, Deep, and Dark Web research, including collecting, analyzing, cross-referencing, and interpreting data from multiple sources.
Produce threat intelligence reports, in-depth research, and presentations.
Present your research in webinars and client-facing events.

we are looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across EMEA. This is a senior management role within Incident Response department and an integral part of the companys global IR service delivery organization.
The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership. Following a substantial and successful tenure in the position, the IRM will have opportunities for continued professional growth and advancement across a variety of roles within .
Main Responsibilities:
Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats.
Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IRM outside the scope of the project.
Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within .
Lead client-facing communication throughout investigations and work closely with clients IT, security, legal, and executive teams, as well as relevant external stakeholders.
Serve as a trusted advisor to clients during high-pressure and business-critical situations.
Collaborate with global teams to ensure consistent, high-quality incident response delivery across regions.
Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional services.
Contribute to broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities.
Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities.

we are looking for a Threat Intelligence Researcher to join its Threat Intelligence Group and support the companys Cyber Threat Intelligence Exposure Management (CTIEM) services, Incident Response engagement and proactive services. In this position, you will identify, investigate, and monitor external cyber threats and organizational exposures across the open web, dark web, social media platforms, and other intelligence sources. You will help organizations understand and reduce their external attack surface, detect brand abuse and malicious activity targeting their assets, and develop innovative intelligence-driven monitoring capabilities leveraging automation and AI technologies.
The successful candidate should be a creative, highly motivated, and independent researcher with strong analytical skills, a deep understanding of attacker methodologies, and a passion for solving complex intelligence challenges. As part of the role, you will engage with clients, support operational teams, and contribute to the development of cutting-edge CTIEM capabilities.
Main Responsibilities:
Conduct proactive monitoring and investigations across the open web, dark web, forums, marketplaces, messaging platforms, and social media channels to identify threats targeting client organizations.
Analyze organizational exposure across external attack surfaces, including internet-facing assets, leaked information, exposed services, and emerging risks.
Investigate and identify brand abuse activities, impersonation attempts, phishing campaigns, fraudulent domains, and other malicious activities targeting clients.
Detect and assess data exposures and information leaks through a variety of intelligence sources, commercial platforms, and proprietary tools.
Utilize Attack Surface Management (ASM) platforms and related technologies to identify, prioritize, and assess external security exposures.
Develop and enhance intelligence collection, detection, and monitoring capabilities through automation and AI-driven solutions, primarily using Python.
Produce comprehensive intelligence reports, exposure assessments, and actionable recommendations for clients and internal stakeholders.
Engage directly with clients to present findings, explain risks, and support remediation efforts.
Collaborate closely with Incident Response teams to support ongoing investigations.