דרושים » אבטחת מידע וסייבר » Application Security Researcher

משרות על המפה
 
בדיקת קורות חיים
VIP
הפוך ללקוח VIP
רגע, משהו חסר!
נשאר לך להשלים רק עוד פרט אחד:
 
שירות זה פתוח ללקוחות VIP בלבד
AllJObs VIP
כל החברות >
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
חברה חסויה
Location: Ramat Gan
Job Type: Full Time
We are seeking a highly motivated and technically proficient Senior Penetration Tester to join our security research division. This role is dedicated to performing advanced offensive security assessments against the biggest companies in the world
You need to be independent, attentive to details, organized, eager to learn new things, and like to research and solve problems
What youll do:
Lead and execute comprehensive, technically rigorous penetration tests targeting complex web applications, modern API architectures, and enterprise systems for organizations with significant global presence.
Engage in sophisticated Red Team projects, including the identification of undisclosed API endpoints, development of novel bypass techniques for established security controls, and lateral movement within target environments.
Contribute substantively to the design, development, and maintenance of proprietary internal security tools and automation frameworks to enhance the efficacy and efficiency of offensive operations.
Requirements:
Minimum of 3 years of proven, hands-on experience in application security analysis, with a heavy emphasis on complex API penetration testing and a mastery of the OWASP Top 10 landscape.
Proficiency in developing and automating tasks using at least one language like Python, JavaScript, or GoLang.
Strong experience with static and dynamic analysis of Android and iOS applications, including hands-on experience with techniques like detours, hooking, and runtime code manipulation
Deep, hands-on knowledge of the latest tactics, techniques, and procedures (TTPs) used in advanced penetration testing and network analysis.
Ability to author comprehensive and technically rigorous reports detailing identified vulnerabilities and research outcomes.
Hands-on experience with industry-standard reversing tools like JADX, Ghidra, or IDA Pro.
Nice to have:
OSCP, OSWE, eWPTXv2, CRTP, or other high-level offensive certifications.
Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.
This position is open to all candidates.
 
Hide
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8688616
סגור
שירות זה פתוח ללקוחות VIP בלבד
משרות דומות שיכולות לעניין אותך
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
 
משרה בלעדית
1 ימים
דרושים בהורייזן טכנולוגיות
סוג משרה: מספר סוגים
לארגון ממשלתי גדול ומוביל טכנולוגית בתל אביב. דרוש/ה חוקר/ת סייבר!
עבודה במודל היברידי! 
מומחה/ית סייבר מוביל/ה לביצוע מחקר ופיתוח מתקדם בתחומי נוזקות, חולשות, פורנזיקה, הנדסה לאחור ומבדקי חדירות למערכות מורכבות.
התפקיד כולל פיתוח כלי מחקר מתקדמים וניתוח מערכות ופרוטוקולי תקשורת בסביבות מורכבות ובסקייל רחב ( Big Data ).
דרישות:
נדרש ניסיון של 7 שנים ומעלה!
ניסיון מוכח במחקר ופיתוח מתקדם בתחום סייבר, עם דגש על סביבת ענן.
ידע וניסיון בזיהוי, איתור ומתן התרעה על תקיפות סייבר בסביבות ענן מורכבות.
יכולת לפתח וליישם תפיסות חקירה מתקדמות, כולל מימוש שרשרת התקיפה והסקת מסקנות מחקרים.
ניסיון בגיבוש דוחות מחקר והעשרת מידע טכנולוגי לצוותי חקירות ולארגונים.
הבנה מעמיקה בפרוטוקולים, מערכות ענן וכלי מחקר טכנולוגיים מתקדמים. המשרה מיועדת לנשים ולגברים כאחד.
 
עוד...
הגשת מועמדות
עדכון קורות החיים לפני שליחה
8585336
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
11/05/2026
חברה חסויה
Location: Ramat Gan
Job Type: Full Time
We are seeking a highly motivated and technically proficient Senior Penetration Tester to join our security research division. This role is dedicated to performing advanced offensive security assessments and developing evaluation mechanisms. You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems. What youll do:
* Lead and execute comprehensive, technically rigorous penetration tests targeting complex web applications, modern API architectures, and enterprise systems.
* Engage in sophisticated Red Team projects, development of elaborate automations, and evaluation strategies.
* Contribute substantively to the design, development, and maintenance of proprietary internal security tools and automation frameworks to enhance the efficiency of offensive operations.
 
About us:
We are a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact-whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, we provide end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection.
Requirements:
* Minimum of 5 years of proven, hands-on experience in application security analysis and Web penetration testing.
* Proficiency in developing and automating tasks using at least one language like Python andJavaScript.
* Strong experience with static and dynamic analysis of coding languages such as Python, JavaScript, JAVA.
* Deep, hands-on knowledge of the latest tactics, techniques, and procedures (TTPs) used in advanced penetration testing and network analysis.
* Ability to author comprehensive and technically rigorous reports detailing identified vulnerabilities and research outcomes.
Nice to have:
* OSWE, eWPTXv2, OWEE, OSWA or other high-level offensive certifications.
* Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.
* Experience in Agentic development.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8645047
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
12/05/2026
חברה חסויה
Location: Ramat Gan
Job Type: Full Time
Were looking for a highly skilled Application Security Researcher to join our Security Research group and help us push the boundaries of modern AppSec. This is a critical, hands-on role where youll work closely with engineers, researchers, and AI & data scientists to build the next generation of application security - including autonomous, agentic pentesting capabilities.
This is not a typical AppSec role. Youll be building, breaking, and redefining how offensive security works at scale.
What Youll Be Doing:
Design and build detection engines and decision-making logic for autonomous security systems
Develop new classes of automated attacks leveraging deep application and infrastructure context
Conduct advanced research on chaining vulnerabilities, logic flaws, and complex attack paths
Prototype, build, and ship security capabilities into production environments
Collaborate with Product, Engineering, and Data teams to shape next-gen security features
Analyze large-scale data to identify attack opportunities and improve detection accuracy
Actively contribute to research direction, ideation, and innovation within the team
Requirements:
4+ years of experience in Application Security, Penetration Testing, Red Teaming, or Secure Development
Strong knowledge of common vulnerabilities (OWASP Top 10, etc.) and remediation techniques
Experience with code-level analysis and modern development stacks
Strong programming skills and hands-on technical capabilities
Deep understanding of how systems break and how to exploit them
Ability to communicate complex technical concepts clearly
Team player who thrives in fast-paced, high-impact environments
Familiarity with DevSecOps practices or security automation tools
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8647310
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
Location: Ramat Gan
Job Type: Full Time
We are looking for an Android Security Research Team Leader to manage a team of super-talented malware researchers and reverse engineers. Our teams help top-level companies improve their security mechanisms using our insights on the latest malware trends, adversarial shifts, and new techniques. Combining intelligence, sophisticated forensics, and data science helps us catch the most relevant and up-to-date threats and threat actors.
What will you do?
Lead and mentor a team of security researchers across multiple projects
Own long-term malware and security research of a variety of Android frameworks, technologies, and domains
Detect large-scale malware campaigns and help bring their operations down
Review and enhance your team's research reports and code
Collaborate with other teams throughout the organization
This role is a management position with 40% hands-on technical work
Find the bad guys - take them down.
Requirements:
4+ years of experience in malware research, reverse engineering, vulnerability research, application security, or Android penetration testing
2-3 years of leadership experience, including a proven track record of mentoring security researchers and building high-performing, scalable teams in complex threat environments.
Positive, proactive mindset with the ability to operate in a fast-paced, multitasking environment
Creative and analytical thinker with strong problem-solving abilities
Excellent verbal and written communication skills in English
Hands-on experience with static analysis tools (e.g., IDA, Ghidra)
Hands-on experience with dynamic analysis and instrumentation tools (e.g., Frida, GDB, LLDB, x64dbg/x86dbg)
Proven ability to analyze compiled binaries and complex malware using both static and dynamic approaches
Nice to have:
Strong understanding of Android internals and mobile security mechanisms
Experience analyzing and classifying malware at scale
Familiarity with detection and classification frameworks (MITRE ATT&CK, YARA)
Experience applying AI/ML or Agentic AI techniques to reverse engineering, malware analysis, or security research workflows
B.Sc. in Computer Science, Electrical Engineering, or a related field.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8688635
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
10/05/2026
חברה חסויה
Location: Ramat Gan
Job Type: Full Time and Hybrid work
We are seeking a dynamic and experienced Threat Hunter to lead proactive cybersecurity efforts by uncovering hidden threats across our environment. In this role, you will drive hypothesis-based hunting, perform deep analysis and validation of security telemetry, investigate suspicious network activity, and continuously improve threat detection and response.
You will also assess CVE relevance and exploitability to prioritize real-world risk, and leverage threat intelligence feeds and enrichment pipelines to enhance hunting context, detection accuracy, and response effectiveness.
If you thrive in a fast-paced environment and are excited about pushing the boundaries of cybersecurity, we want to hear from you.
Responsibilities:
Apply data analytics to analyze security-related network data, uncover actionable threat intelligence, detect anomalies and malicious behavior, and automate findings into an enhanced detection system.
Leverage current cybersecurity knowledge to interpret and contextualize findings, enabling informed decision-making and proactive measures to strengthen overall cybersecurity defenses.
Work closely with Product and Engineering to translate threat intelligence into product strategy, prioritized features, and defensive enhancements.
Monitor and analyze the latest vulnerabilities, CVEs, exploits, and threat actor TTPs, with a focus on techniques relevant to microsegmentation, identity security, lateral movement, and internal reconnaissance.
Integrate external threat feeds and intelligence sources into our product - including normalization, enrichment, classification, and validation of feed relevance.
Contribute to detection logic, threat models, and internal tooling that turn intelligence into prevention and protection.
Provide on-the-fly support during customer incident response events and penetration testing exercises by leveraging expertise to promptly detect and block security threats.
Requirements:
2 Years of experience with threat hunting, or incident response, including analyzing data and extracting insights from it.
Knowledge of protocols, networking and computers communication - must.
Understanding of cybersecurity concepts, including common threats, vulnerabilities, attack vectors, and basic defensive measures -must.
Strong understanding of attacker behaviors and common internal network compromise TTPs.
Ability to quickly assess CVE relevance/exploitability and leverage threat intelligence feeds, enrichment pipelines, and classification systems to gauge real-world risk.
Familiarity with scripting languages (Python) and data analysis frameworks (Pandas, Jupyter).
High level of analytical and problem-solving skills with strong attention to details.
Reliability in execution of complicated and long tasks, Independent and self-learning skills.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8643586
סגור
שירות זה פתוח ללקוחות VIP בלבד