דרושים » אבטחת מידע וסייבר » Vulnerability Researcher

we are seeking a Senior Security Researcher to join our highly technical product research team working at the core of our security products.
This is a rare opportunity to join an elite security research team and do work that directly shapes our AI and Cloud products. Your research will span cloud infrastructure, AI systems, emerging platforms, and modern architectures.
You will perform novel security research, inform product direction, and contribute to our company's thought leadership in cloud and AI security.
We are looking for an exceptional security researcher who thrives on variety and can quickly develop expertise in new areas.
Your Role:
Drive research direction across multiple domains including cloud security, AI security, and emerging threat landscapes.
Perform novel security research to uncover new attack vectors, and adversary techniques across cloud and AI systems.
Translate research findings into actionable product capabilities, detection logic, and risk prioritization guidance.
Stay current with evolving threats across cloud platforms and AIecosystems, identifying where our company should invest next.
Write and speak about security research to strengthen our company's voice in cloud and AI security.
Collaborate with product and engineering teams to translate research into shipped capabilities.

We are a fast growing cybersecurity startup redefining how organizations defend themselves. As attackers leverage AI for high speed strikes, we provide defenders with the same capabilities. Our platform creates an AI driven Autonomous Attacker that thinks like a hacker, generating end to end attack chains across Web, Cloud, and AI applications to prioritize mitigation where it matters. Founded a year and a half ago, weve moved at lightning speed raising a Seed from CyberStarts and a Series A from Lightspeed. With offices in Tel Aviv and New York, we maintain a high transparency, low ego environment where exceptional individuals have the autonomy to make a massive impact on a category defining product.
We are looking for a talented Security Researcher to join our team. As the brain behind our AI, you will stay ahead of the hacker community, analyze sophisticated threats, and teach our platform how to think and act like an attacker to revolutionize the penetration testing landscape
What Youll Do
Conduct deep research to uncover vulnerabilities, analyze exploits, and develop novel attack techniques.
Investigate emerging threats and build complex, automated "kill chains" across Web, Cloud, and AI applications.
Perform detailed technical analysis, including reverse engineering, protocol analysis, and exploit development.
Work side-by-side with the engineering team to turn research findings into scalable, automated AI code.
Publish research findings and contribute to the global cybersecurity community.

we are looking for a Security Researcher.
As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production.
What You'll Do:
Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features.
Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats.
Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data.
Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments.
Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter.
Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation.
Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build.

We're looking for an AI Security Researcher to join us and uncover emerging AI threats, derive detection logic, discover new attack vectors, conduct red teaming, and identify insider threats and misconfigurations.
What You'll Do:
Deep-dive into AI usage risks, including threat detection for chat platforms and AI agents.
Research emerging agent threats and LLM attacks, such as jailbreaks and prompt injection.
Conduct red teaming and large-scale experiments on AI agents, including quantitative experimentation and advanced result analysis.
Assess internal and externally-facing AI agents for security posture and risk exposure.
Evaluate and attack real-time defenses and runtime protections for AI applications.
Conduct research across cloud, web, and API security to uncover novel threats and attack vectors relevant to AI systems.
Partner with product and engineering teams to turn research findings into detection logic, guardrails, or product features.
Stay current on and contribute to industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS) - potentially contributing back to the community.
Publish blog posts, give talks, and represent research at conferences.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.
Responsibilities:
Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.
Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.
Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.
Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.
Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.
Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.
Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.
Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

Were looking for a highly skilled Junior Offensive Security Researcher to find new attack vectors, from initial exploitation to impact in the emerging world of Agentic AI, LLMs, and their surrounding ecosystem.

This role is ideal for researchers who are passionate about breaking new ground in the growing world of AI and impacting the future landscape of our products.

What Youll Do:

Responsibilities:
Research emerging agentic technologies and uncover new exploits, attack vectors and risks. From initial exploitation to impact.
Build tooling, harnesses, and test frameworks to scale attack discovery and make research repeatable. And contribute to internal red team infrastructure.
Investigate the surrounding ecosystem, not just the model. This includes: plugins, connectors, MCP servers, orchestration frameworks, and different types of infrastructure. Mapping how weaknesses in one component can develop into full compromise.
Work with product and engineering to translate offensive findings into new defense capabilities.

We're looking for a multi-disciplinary security researcher to play a vital role in researching, planning, implementing, and maintaining security solutions for organizational adoption and usage of software in general, and AI-native software in particular, in collaboration with all product development departments.
What You'll Do
Investigating how software in general, and AI-powered tools (coding assistants, agents, LLM-integrated IDEs, etc.) are used inside organizations, and where they introduce risk: data leakage, prompt injection, supply chain exposure, malicious extensions, and so on.
Building a data-driven picture of real-world usage and adoption to prioritize what we protect against, using telemetry, surveys, and external research.
Designing detection and prevention approaches for these risks, and working with engineering, product, and data teams to ship them in our product.
Auditing implementations against the threat models you develop and iterate.

We are looking for an exceptional Senior Product Manager to join our AI Security group and play a key role in shaping the future of AI Security As a Product Manager, you will drive product strategy, define innovative security capabilities, and work closely with engineering, security researchers, and customers to build solutions that help organizations securely embrace the AI era.

Responsibilities:
Identify emerging challenges, opportunities, and customer requirements related to AI Security, AI applications, AI agents, and data protection.
Define and drive product strategy for AI Security initiatives across platform.
Break down strategic product goals into actionable plans and lead execution across engineering, research, design, and go-to-market teams.
Define product requirements and oversee the implementation of new AI Security capabilities and services.
Conduct market research, competitive analysis, and customer discovery to understand evolving AI Security threats, trends, and customer needs.
Work closely with customers, partners, and internal stakeholders to validate problems, prioritize opportunities, and shape product direction.
Analyze product performance, user behavior, and customer feedback to continuously improve product effectiveness and business impact.
Collaborate closely with world-class engineering and security teams to bring innovative AI Security solutions to market.
Drive cross-functional initiatives involving Product, R&D, Security Research, Sales, Marketing, and executive leadership.

Were looking for a highly motivated and versatile Security Researcher who thrives on exploring cutting-edge technologies, analyzing security trends, and building innovative solutions to safeguard our customers. You are a natural problem solver, a fast learner, and passionate about staying ahead of the curve in cybersecurity.
About the role
Evaluating Security Threats and Vulnerabilities
Evaluate and analyze emerging threats, vulnerabilities, and attack vectors to identify risks to applications and systems.
Work with users, partners, colleagues, and experts to understand security challenges, technology trends, competition, and industry developments.
Articulate security risk hypotheses and construct compelling cases for mitigation strategies.
Conducting Technological and Security Research
Analyze, research, and deep-dive into security technologies, tools, and products, both existing and emerging, to understand their potential impact.
Identify innovative ways to utilize these technologies to strengthen security measures and protect against user threats.
Developing Security Tools and Prototypes
Rapidly build prototypes, proof-of-concepts (POCs), and tools to test security hypotheses, demonstrate feasibility, and evaluate solutions.
Collaborate on creating internal tools for detecting vulnerabilities and improving application security posture.
Collaborating with R&D
Partner with product owners, engineers, and function leaders to integrate security measures and ensure alignment with company goals.
Lead multi-disciplinary teams and joint task forces to address critical security challenges and implement innovative solutions.
Communicating Security Insights
Clearly articulate security visions, risks, and mitigation strategies to stakeholders and leadership.
Evangelize security initiatives and share findings through internal documentation, external blogs, webinars, and industry conferences.

Everyone is racing to build on AI. Far fewer people are pulling it apart to see how it breaks. That's our work, and we get there before attackers do.
This role is part of our company's AI Security pillar. We research the AI systems the whole industry is rushing to adopt: the agents and frameworks heading into production, and the runtimes and infrastructure beneath them. The work is deep and hands-on. You'll find novel vulnerabilities, build them into full exploit chains, and follow research from a first lead to a working proof of concept.
We're growing the team, and we're looking for a Security Researcher who's at their best with a hard problem and no obvious way in.
Why you'll want to be here
We care about the work, and we care about each other. You'll get room to go deep, people worth learning from, and an early, hands-on look at the security of the tech everyone is betting on. If you've been waiting for a place to do the most interesting research of your career, let's talk.
Key Responsibilities
Research the security of AI systems end to end, from the agents and frameworks they're built on to the runtimes and infrastructure that run them
Take apart complex software and find where it breaks
Turn a vulnerability into a full, working exploit, not just a proof that the bug exists
Understand the defenses modern systems lean on, and how to get past them
Share what you find, through coordinated disclosure and conference talks.