לוח משרות דרושים, לחיפוש זה נמצאו 33,106 משרות

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

As member of the DV CAD team, you have the opportunity to impact our engineers who develop next generation of our products!
You will be responsible for developing software solutions used by thousands of DV engineers globally. You will be supporting design process of all chip families we make (iPhone, iPad, Mac, our Watch and more), and your work will help streamline this complex process. This role combines DV knowledge alongside modern software engineering practices. Your work will be very diverse, and you will have broad impact contributing to the success of us.


You will develop and drive software development of multiple tools across the DV space, including cloud-native services, GUI, LLM harness, CI/CD. Your work will span from software development and architecture to collaborating with DV engineers, working with EDA vendors, and supporting critical project milestones.

Responsibilities
Developing and maintaining LLM harness for agentic DV workflows, and being responsible for benchmarking and improving accuracy of agentic workflows.
Building and managing cloud-native services running on k8s, including CI/CD, containerization, alerting, databases, GUI and monitoring.
Communication with DV stakeholders and working to understand user requirements.
Writing and maintaining Python scripts used as part of design simulation flows.
Supporting multiple projects simultaneously.

Were looking for a top-notch Threat Detection Researcher to join our team and spread the power of our company. In this role, you will further develop the company Runtime Sensor as part of our threat research team.
Responsibilities
Develop detections and tools to protect customers from cloud threats.
Investigate attacks on cloud environments and malware targeting cloud and AI workloads.
Hunt and analyze real-world attacks and emerging cloud and AI threats.
Collaborate closely with the R&D team to transform research insights into product features.
Work with customers in response to requests related to suspicious activity or potential incidents.
Create best practices and security policies based on research findings.
Deliver external-facing content (blog posts and talks at security conferences) based on security insights and novel research.

Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Googles Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation.
Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. Were honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At our company, youll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun!

What you'll do
In this role, youll write low-level code that hooks deep into runtimes and OS internals (via eBPF) to capture runtime data with near-zero overhead. Basically, youre creating the eyes and ears inside applications, so we can detect intrusions as they happen.
Youll be pushing the envelope of what eBPF and kernel tech can do: tracing syscalls, monitoring network flows, and intercepting anything attackers might exploit. Your work will help determine exploitability and flag compromises instantly - even for zero-day attacks that nobody has seen before.
This is a high-impact, experimental role: part engineer, part hacker - optimizing for performance and reliability while youre bending the rules of the OS. If you love digging into assembly, performance tuning, and building tools that peer into the guts of running software, come join us. Youll have the freedom to innovate at the lowest levels of the stack (and we promise, no boring corporate kernel modules here - only the fun stuff!).

Our software team is growing, and we are looking for an SRE-DevOps Engineer to be entrusted with designing, building, and maintaining the infrastructure and automation frameworks that power our development ecosystem.

Your role will encompass end-to-end CI/CD pipeline ownership, cloud and on-premise infrastructure management, and ensuring the reliability, scalability, and security of our systems. You will be the backbone that enables our engineering teams to ship fast and confidently. We value agility, so staying updated and adaptable to our evolving tech stack is inherent to the role.

Responsibilities
Design, build, and maintain CI/CD pipelines to streamline development, testing, and deployment workflows.
Automate infrastructure provisioning, configuration management, and scaling operations.
Collaborate closely with development and data teams to understand and support their infrastructure needs.
Monitor system health, reliability, and performance, and drive incident response and resolution.
Enforce security best practices across infrastructure, access management, and deployments.
Manage and optimize containerized workloads and orchestration platforms.
Maintain and improve observability frameworks including logging, monitoring, and alerting.
Evaluate and integrate new tools and technologies to continuously improve the development infrastructure.

our company's Pipeline team builds the event-driven data foundation behind the company's Application Detection & Response platform. We transform massive application telemetry into real-time security value, powering detections, correlations, and automated insights across the product.
What you'll do
Design and scale event-driven streaming systems using Kafka and Temporal to enable real-time security analysis and decision making.
Build rule-based and data-driven pipelines that turn application signals into actionable detections.
Collaborate with product, integrations, and detection teams to create new data flows that unlock innovative security capabilities.
Lead improvements in scalability, reliability, and observability to keep the pipeline ahead of growth and complexity.

we are looking for a Senior Full Stack Engineer with a backend-oriented mindset to join our growing R&D team.
In this role, youll be responsible for connecting our companys high-scale data infrastructure with our customer-facing portal-turning complex, runtime telemetry into fast, intuitive, and intelligent user experiences. Youll work closely with product, design, and Data pipeline and security engineers to build data pipelines, APIs, and integrations that make our companys platform both powerful and delightful to use.
This is a hands-on role at the intersection of backend systems, high scale data engineering, and user experience, shaping how massive volumes of runtime data flow through our companys data-driven platform.
Youll Be Great For This Role If You Love To:
Design and implement efficient data pipelines and backend integrations that connect our high-scale data to the user-facing portal.
Build and optimize APIs, data services, and caching layers to ensure fast and reliable data access.
Use data modeling, denormalization, and performance optimization to handle complex queries and large datasets effectively.
Collaborate closely with frontend engineers, product managers, and designers to ensure data flows seamlessly into intuitive UI components.
Contribute to the architecture and scalability of our companys hybrid cloud-native platform.
Write clean, testable, production-ready code in Python, Node.js, TypeScript, and React, while keeping performance and maintainability top of mind.
Stay close to users and product feedback loops - helping translate technical insights into better experiences.
Own end-to-end delivery, from backend design through deployment using CI/CD, Temporal, and Kubernetes.

we are looking for a Senior Backend Engineer with a strong passion for AI and intelligent systems to join our growing R&D team.
In this role, youll be building the backend foundation that powers our AI-enhanced security analytics, autonomous detection, and real-time decisioning systems. Youll work closely with AI engineers, product, and security experts to bring agentic intelligence into our companys runtime platform - transforming how modern apps defend themselves.
Youll architect and implement services that scale to massive volumes of runtime data, integrate large language models (LLMs), and support RAG-based workflows for contextual understanding and response.
Youll Be Great For This Role If You Love To:
Design and build scalable, resilient backend services that power our companys AI-driven runtime security platform.
Integrate LLMs and agentic AI components into production environments to enable autonomous detection and remediation capabilities.
Design evaluation frameworks for measuring model performance and reliability in real-world conditions.
Develop Retrieval-Augmented Generation (RAG) pipelines tailored to application security data.
Own backend architecture decisions - from data modeling to performance optimization - across Node.js, Python, and cloud-native environments.
Contribute to our infrastructure, leveraging CI/CD, Kubernetes, Docker, and modern observability practices.
Mentor peers and help shape our companys AI engineering culture.

We are looking for a highly organized and detail-oriented Intern to join our Operation & Maintenance our team.
This is a full time back office intern position focused on computer-based work, supporting the daily operations of the team, including CRM and service request management, scheduling and coordination of field activities, documentation, reporting, and administrative support for our Energy Storage System projects.
The role requires strong organizational skills, ownership, and the ability to manage multiple tasks and interfaces simultaneously while ensuring smooth operational flow behind the scenes.

Responsibilities:
1. Back Office and Administrative Support
Providing administrative support to the service team, including coordination, follow-up on open tasks, documentation, reports, and maintaining accurate records according to internal procedure.
2. Issue Routing and Follow
Identifying system alerts, routing them to the relevant internal expert, and following up to ensure issues are handled and closed in a timely manner. You do not fix technical problems; you manage the flow.
3. Scheduling & Coordination:
Managing calendars, maintenance activities, deadlines, and internal scheduling to ensure tasks are completed on time and properly coordinated.
4. Data & System Monitoring
Collecting and reviewing operational data from Energy Storage System plants, monitoring system performance, and identifying irregularities to ensure accurate documentation and follow-up.

We're looking for a Product Manager to own our company's Runtime Domain - the engine that powers vulnerability intelligence, attack detection, sensor capabilities, and our application DNA (appDNA) model. This is the technical core of the product, where security research, runtime telemetry, and product judgment meet.
At our company, product management is an engineering discipline. You'll be expected to go deep on the technology, hold your ground in technical debate, and ship - not just write specs.
This role reports to the Senior Director of Product.
What you'll do
Own the roadmap for detection, vulnerability intelligence, and sensor capabilities. Decide what we build, kill, and punt.
Partner with security research daily - turn raw findings, new CVE classes, and exploitation patterns into shippable product.
Write specs engineers respect. Argue about data models and detection quality, not pixels.
Run design partnerships with enterprise security teams. Sit with them, watch them work, come back with conviction.
Run discovery sessions with customers to maximize the value from the company platform.
Use AI tooling as a force multiplier in your own workflow - prototyping, evals, internal agents. Not as a feature you slap on.

our company already runs agents in production. Our WAF Copilot takes a freshly disclosed CVE and turns it into a validated, provider-specific WAF rule - a state-driven agent graph that researches the vulnerability, maps the attack surface, composes the rule, then attacks its own output with an independent bypass judge and a false-positive prober before a human is ever offered a deploy. When a weakness survives, the system downgrades its own recommendation and records what it could not prove.
That last part is the thesis of this role.
An agent that touches production security must prove it works and declare what it couldn't prove. The security industry is about to be flooded with agentic claims nobody can verify. We intend to be the company that made verification legible - and that starts with holding our own agents to a standard we're willing to publish.
We're looking for an AI Tech Lead to own that standard across three surfaces:
The platform - Today each agent flow is close to a bespoke implementation. You'll turn our hard-won patterns into shared components, conventions, and infrastructure so the next agent is a week of work rather than a quarter - with evaluation, observability, and cost control built in rather than bolted on.
Enablement - our company's advantage compounds only if the whole company is AI-fluent, not just R&D. You'll raise that fluency everywhere - engineering, research, product, GTM - through tooling, patterns, and teaching.
The voice - You'll publish the methodology: how we benchmark agentic security output, how we model residual risk, what we learned failing. This is a category-defining position and we want it argued in public.
This is a hands-on lead role with no direct reports. Your authority comes from the quality of what you build and how clearly you explain it.
What You'll Do
Define and build our company's agent framework - shared components, orchestration patterns, tool interfaces, and conventions that make "how do I build an agent here" a five-minute answer.
Make evaluation a gate, not an afterthought: trajectory testing, golden datasets, offline replay, and per-dimension scoring that runs in CI. Land the release benchmark so promote / hold / rollback is a number, not a vibe.
Own agent observability end to end - the execution graph, tool invocations, intermediate reasoning, latency per step, and quality drift - including the external Temporal-orchestrated flows that are hardest to introspect today.
Own the economics: provider abstraction, model routing by task complexity, small-model substitution where it holds, cost attribution per flow. Thousands of CVEs through a labeling agent is a budget line, not a detail.
Drive latency and determinism in our production agent flows - tighter loops, early stopping, deterministic state machines over prose-in-prompt orchestration.
Raise the company's AI fluency. Build the internal tooling, skills, and playbooks that let every team - not just R&D - work AI-natively, and teach the judgment for when not to.
Partner with security research, product, and engineering leadership so agent capability and product roadmap actually converge.

our company's WAF Copilot takes a freshly disclosed CVE and produces a validated, provider-specific WAF rule - researching the vulnerability, deriving the attack surface, composing the rule, then attacking its own output with an independent bypass judge and a false-positive prober before a human is offered a deploy.
As WAF Security Specialist you are the ground truth the Copilot is measured against - the person who can look at a generated rule and say this blocks the PoC but not the four obvious variants, this will trip on legitimate multipart uploads, this is 340 WCUs of nothing because the managed ruleset already catches it, this can't be anchored tightly enough to live in a global Web ACL.
You'll be shipping rules for real customers - and you'll do it through our AI harness, and help optimize it.
In practice that means driving the harness on live work: feeding it a vulnerability, judging what comes back, tightening the match, and validating it against real exploit traffic until it's something you'd put your name on.
Sometimes you'll write the expression yourself - the CVE with no public PoC, the emerging threat you have to reason out of a patch diff, the customer who needs coverage this afternoon. Most of the time you'll be applying expert judgment at every step of a generated rule's life, which is a different and harder skill than authoring from a blank page.
Because you'll be the harness's heaviest user, you'll also be the reason it gets better. You'll see exactly where it breaks down - the research step that missed the real sink, the composer that over-broadened, the judge that passed a rule it shouldn't have - and turn that into validations, analyses, and evals that go back into the agent. You'll work side by side with the Copilot & AI team so the agent stops making the mistake, instead of you catching it again next month. That feedback loop is the core of this role.
All of it rests on knowing where WAFs actually break: normalization and encoding evasion, parameter pollution, body-inspection size limits, oversize-content handling, rule precedence, and the gap between "the rule matched in staging" and "the rule holds against a motivated attacker." An AI can propose a rule. Knowing whether to trust it is the job.
What You'll Do
Create - Produce production WAF rules across providers for high-impact CVEs and customer findings - driving the Copilot harness on most of them, writing the expression yourself on the hard ones (no public PoC, exploitable path reasoned out of a patch diff, urgent customer coverage). Your rules ship, and they set the bar generated rules are measured against.
**Optimize -**Tighten generated rules for real production constraints: WCU and rule-capacity budgets, latency, provider expression limits, and the anchoring required for a rule that fires against all traffic behind a shared Web ACL - not just the vulnerable app.
Validate - Own the adversarial pass. Build exploit variants the PoC doesn't cover, hunt bypasses in our own rules, and run the false-positive side seriously - verifying against how the legitimate client actually behaves on the wire, not against an assumption.

We are looking for a Senior Full-Stack Engineer to build reliable, high-impact product experiences from browser to backend. You will own meaningful product areas, turn ambiguous customer problems into pragmatic technical solutions, and help set a high bar for quality, speed, and engineering judgment.


What youll do
Design, build, test, deploy, and operate end-to-end product capabilities.
Build polished frontend experiences with React and TypeScript.
Develop scalable backend services and APIs with Node.js and TypeScript.
Partner closely with Product and Design to shape solutions before implementation.
Make sound architecture decisions across application boundaries, APIs, data models, security, performance, and observability.
Use AI-assisted engineering tools thoughtfully to improve development speed and quality, while rigorously validating their output.
Build AI-enabled or agentic product capabilities where they create clear customer value.
Raise the engineering bar through code reviews, pairing, documentation, and mentorship.

You'll own and evolve the infrastructure and reliability of our production platform - a distributed, data-heavy system running on AWS and Kubernetes. You'll work closely with engineering to keep our services fast, reliable, and observable as we scale, while continuously improving our automation, deployment, and operational processes.
This role is a fit for someone responsible and hands-on, who wants to contribute to the team effort, take ownership, and keep learning and expanding their capabilities.
What You'll Do
Design, build, and operate scalable, resilient infrastructure on AWS and Kubernetes.
Own reliability: define SLOs/SLIs, improve observability, and drive down toil through automation.
Manage and tune our core data and workflow systems - ClickHouse, PostgreSQL, Kafka, and Temporal - for performance and reliability at scale.
Build and maintain CI/CD and GitOps workflows using ArgoCD and GitHub.
Manage infrastructure as code with Terraform.
Lead incident response, run postmortems, and drive systemic improvements.
Establish and improve engineering and operational processes suited to a company operating at scale.
Partner with development teams to make the right reliability, cost, and scalability tradeoffs.