דרושים » הנדסה » Staff Windows Detection Engineer

We are seeking a highly skilled Software Engineer with a background in low-level programming and a deep understanding of Windows internals to join one of our Platform group. Platform group is in charge of some of our most complex low-level areas, such as Windows agents Anti-Tampering (self-protection from a malware attempting to harm the agent), network sensors, and other kernel-side features involving both research and development.
By joining this team you will collaborate with talented engineers who are leading a feature through the whole development lifecycle. Your work will have an impact on millions of endpoints in one of the mainstream areas of the EPP/EDR agent.
What will you do?
As a new member of our distributed development team, you will work in both user-mode & kernel-mode, and deal with a large variety of fields. You will have the chance to design, develop primarily in modern C++ (23), test and debug the most complicated real world problems (often unseen before). In order to successfully deal with this challenge, you will continuously enrich your knowledge and experience with Windows OS internals and the Endpoint Protection as well as Endpoint Detection & Response eco-system.
Our team designs and executes significant new features, as well as rewrites and reimplements the existing ones from scratch. You will also deal with extraordinary performance & optimization challenges, given the scale of our cybersecurity SW (handling hundreds of billions of events every day).
Your work will influence the security of tens of millions of Windows devices, that we protect at enterprise & government customers across the globe (incl. 5 of Fortune 10 and hundreds of Global 2000)

Shape the Future of Cybersecurity with Us Are you driven by deep curiosity, bold innovation, and the desire to transform cutting-edge AI research into real-world cybersecurity impact? Join Cynet, an established yet rapidly growing cybersecurity startup, where you’ll help build next-generation AI-powered security products from the ground up. You’ll be part of a small, elite, cross-disciplinary team working closely with security researchers, R&D engineers, data engineers, and product leaders.
Here, you’re not just joining a company, you’re stepping into a place where you can envision, build, and deploy foundational AI technologies that protect organizations worldwide. You will have the rare opportunity to drive innovation end-to-end, shape our future technology, and create AI systems that make a real difference in defending against modern cyber threats.
This is a role for someone who wants to put their soul into their craft, someone hungry to learn fast, experiment boldly, and turn ambitious ideas into production-ready AI solutions.

What will you do:

* Drive innovation by combining deep security research with modern AI techniques to build impactful, customer-facing security capabilities.
* Build and refine intelligent generative AI agents that drive automated cybersecurity reasoning, investigation workflows, and threat analysis.
* Extend and enhance our next-generation AI antivirus engine by designing new feature representations, building file parsers, and developing ML models end-to-end.
* Engineer and implement core parser and model components in C++ and Python to seamlessly integrate into the Cynet Endpoint Agent and platform infrastructure.
* Use Cynet’s ML experimentation pipelines to run experiments, optimize performance, and deliver production-ready detection models.
* Serve as the cybersecurity expert within the Data Science team, guiding threat modeling, malware understanding, and security-driven AI design decisions.

About Us:
Cynet is a leader in threat detection and response, designed to simplify security for organizations of all sizes. Our mission is to empower lean security teams and their partners with an AI-powered, unified platform that autonomously detects, protects, and responds to threats - backed by 24×7 security experts. With a Partner First mindset , we focus on helping customers and partners stay protected, operate confidently, and achieve their goals. Our vision is to give every organization true cybersecurity peace of mind, providing fast, accurate protection without the noise or complexity.

We are seeking a highly skilled and experienced Software Engineer with a strong background in low-level programming and a deep understanding of Windows internals to join our Platform group.
Platform group is in charge of some of our most complex low-level areas, such as Windows agents Anti-Tampering (self-protection from a malware attempting to harm the agent), network sensors, and other kernel-side features involving both research and development.
By joining this team you will collaborate with talented engineers who are leading a feature through the whole development lifecycle. Your work will have an impact on millions of endpoints in one of the mainstream areas of the EPP/EDR agent.
What will you do?
As a new member of our distributed development team, you will work in both user-mode & kernel-mode, and deal with a large variety of fields. You will have the chance to design, develop primarily in modern C++ (23), test and debug the most complicated real world problems (often unseen before). In order to successfully deal with this challenge, you will continuously enrich your knowledge and experience with Windows OS internals and the Endpoint Protection as well as Endpoint Detection & Response eco-system.
Our team designs and executes significant new features, as well as rewrites and reimplements the existing ones from scratch. You will also deal with extraordinary performance & optimization challenges, given the scale of our cybersecurity SW (handling hundreds of billions of events every day).
Your work will influence the security of tens of millions of Windows devices, that we protect at enterprise & government customers across the globe (incl. 5 of Fortune 10 and hundreds of Global 2000)

We are looking for a talented software engineer with experience in the linux security domain. People that can explore new technologies, design and develop from scratch innovative ideas and drive new detection capabilities and infrastructure at scale to our products.
What will you do?
The role includes end-to-end responsibility for new detection capabilities, starting from researching the landscape of new Linux/Containers related security technologies through designing detection strategies and algorithms and delivering them at scale. You will work on low-level Kernel hooks to complicated detection engines and pure system engineering challenges. Your deliveries will enhance the security of different Linux and cloud workloads platforms protected by our product, that serves thousands of users (from enterprise & public sector clients across the globe, incl. some of the largest companies globally).
What your role will look like:
Software Development (70-80% of time)
Conduct low level research and Design of new features
Peer code reviews; Participate in teams design reviews
Teamwork
Learn new technologies in the Linux and Cloud workloads security domains
Architect end-to-end security solutions for complex features with loose problem definition
Modeling and POC of solutions for complex problems
Support customers with issues and requests within the teams domain

Cynet is looking for an experienced Windows C++ Developer to join our award winning Windows EDR team!


What will you do:

* As a core member of the Windows development group, you will take part in designing and implementing drivers, services, and low-level components of Cynet’s EDR agent.
* You will work in a complex multithreaded environment, collaborate closely with security researchers, and develop innovative detection and protection capabilities across Windows OS internals.
* You will own features end-to-end from design and architecture, through hands-on implementation, performance tuning, and integration into our production environment.

About Us:
Cynet is a leader in threat detection and response, designed to simplify security for organizations of all sizes. Our mission is to empower lean security teams and their partners with an AI-powered, unified platform that autonomously detects, protects, and responds to threats - backed by 24×7 security experts. With a Partner First mindset , we focus on helping customers and partners stay protected, operate confidently, and achieve their goals. Our vision is to give every organization true cybersecurity peace of mind, providing fast, accurate protection without the noise or complexity.

The Team To stay ahead of the curve, its critical to know where the curve is, and how to anticipate the changes were facing. For the fastest-growing cybersecurity company, the curve is the evolution of cyberattacks and the products and services that dedicatedly address them. Our engineering team is at the core of our products - connected directly to the mission of preventing cyberattacks. They are constantly innovating - challenging the way we, and the industry, think about cybersecurity. These engineers arent shy about building products to solve problems no one has pursued before. They define the industry, instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment. Job Summary We are looking for a Linux Internals Software Engineer for our Tel Aviv R&D center. You will be part of a team that designs and develops the Linux internals components of our revolutionary endpoint security product for the Linux platform. More information about Cortex XDR product can be found here. Key Responsibilities Design and implement innovative capabilities for a market leading product, deployed on a range of platforms from bare-metal to the cloud Develop critical components in the Linux internals parts of the product, incl. user and kernel-mode OS-related infrastructures in both C and C++ Utilize cutting-edge Linux technologies for real-time event collection, anti-malware, anti-exploitation, network filtering and more Lead features in coordination with other development and QA teams Be part a team that values SW development best practices and high standards.

Your Career We are looking for a highly talented technical individual to join the Cortex XDR infrastructure team. The team is responsible for developing automation infrastructure and various cloud based tools and platforms that are used across the research, development and QA departments to ensure the functionality, stability and quality of the XDR product, alongside the efficiency of the infrastructure and process used to build, test and deploy on various clouds and distributions. We believe that the platforms & infrastructure that the team provides are a critical & crucial part of our department's progress to the modern future and one of our key growth factors. As a Platform engineer you will play a pivotal role in enhancing our development and automation experience by pushing forward modern automation approaches, eliminating manual efforts and introducing new development operations for continuous integration, scale & durability using advanced cloud services. Your expertise will be used in areas such as infrastructure development, cloud based automation, serverless infrastructure, automation as a service, providing technical guidance, and pushing infrastructure\configuration as a code and GitOps approach across the development departments. To succeed in this role, you should have a strong foundation in modern cloud based automation methodologies and a comprehensive understanding of industry best practices, especially in redundancy and scalability of large systems and the ability to control them via SCM based declarative configs. You should be familiar with modern public clouds approaches and serverless based architectures, including virtualization containers and container based orchestration including multiple Kubernetes based deployments. You should be comfortable engaging in complex technical discussions and advocating for optimal solutions in a fast-paced growing environment as part of our quest for continuous improvement. Your Impact Utilize modern technologies including serverless cloud services, Kubernetes, Terraform, among others, and use them all in an infrastructure/configuration as a code GItOps approach to manage everything via source code and continuous integration processes Design and implement (hands on) the next generation of platforms, automation frameworks, SDKs, and tools to be used across our entire R&D group, and be part of our infrastructure transition to the cloud Develop and maintain a cloud based test execution system, that supports parallel executions on multiple operating systems and multiple cloud providers and at a very large scale, and by so helping reduce the amount of effort required to perform automatic testing and manual testing, and reduce time to market Provide tools, systems and simulators for scaling up all lifecycle phases of our products and services including cross company and third party integrations and frameworks to be used in high scale Introduce progress and help revolutionize our operations and lay the foundation for innovation and growth.

we are looking for a Senior Malware Researcher.
As a Senior Malware Researcher, you will analyze and reverse engineer malware and tooling used by advanced threat actors, particularly those targeting governments and critical infrastructure.
You will apply deep expertise in binary and script analysis to uncover capabilities, configurations, and C2 infrastructure for threat actor attribution and mitigations.
Your work will power malware catalog, strengthen our understanding of threat actors technical capabilities, and directly support the development of next-generation AI-driven "artificial cyber researchers".
:Responsibilities
Perform in-depth static and dynamic analysis of malware, implants, loaders, and related tooling used by APTs and other sophisticated adversaries.
Reverse engineer binaries and scripts (e.g., PE, ELF, .NET, PowerShell, JavaScript/VBA) to determine capabilities, execution flow, persistence mechanisms, and evasion techniques.
Extract and document configuration data and C2 information, and map these to campaigns, infrastructure, and threat actors in collaboration with CTI researchers.
Develop and maintain detection and hunting artifacts such as YARA rules, VT LiveHunt queries, CAPA rules, and sandbox behavior signatures.
Work closely with CyberAI researchers on the development of next-generation artificial cyber researchers and AI-driven analysis capabilities.

we are an AI-first tech company in the automotive space with hubs across the US and Israel. Our mission is to constantly disrupt the industry by creating new, groundbreaking technologies to help dealers build stronger, more resilient businesses. Our work happens in the fast lane as we work to bring AI and data -driven solutions to a quickly evolving industry. Our team at our company is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal driven, and, at our core, we believe every voice has value and can impact our bottom line. We are looking for an AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You wont just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. This is a mid-level role reporting to the AppSec Architect and can be based out of our Tel-Aviv or Jerusalem offices.
What you will be responsible for:
Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents. Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams. Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines. Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often. Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents. Document: Draft requirement documents for security products and innovative technologies.
The top candidate will also have:

* Endless curiosity and passion for emerging technology
* Ability to handle prioritize and execute multiple tasks simultaneously.
* Ability to work collaboratively across multiple departments.
* Fluent in Hebrew & English - ability to lead meetings and present.
* Strong communication and collaboration skills.
Why you should join us:

* Family-friendly environment and flexible working hours.
* Our global team is made up of awesome forward thinking, innovative go-getters.
* Learning and growth opportunities within a fast-paced tech startup environment.
* Clear career advancement path for strong performers.
* We are committed to setting each other up for success. As a member of our team, you will work within an environment that encourages growth, initiative taking and continuous mutual feedback in order to reach your full potential.
* And of course, Cibus and lots of yummy treats in the kitchen:-)

We are looking for a passionate Software Engineer to join our Simulation development team. Our team is growing, and we are looking for hardworking and experienced engineers to take part in building advanced networking simulation solutions. You will be part of a team developing next generation Switch simulation, works closely with other SW R&D teams and SW Architects.

What you will be doing:

Design and develop advanced features simulating our world class Switches.

Develop solutions using advanced virtualization technology.

Write clean, efficient and maintainable code.

Collaborate with team members, SW R&D, Architects, Chip Design and FW.