דרושים » ניהול ביניים » Principal Security Researcher (Cortex - AgentiX)

Join our Security Autonomous SOC Team as a Principal AI Engineer to transform innovative AI/LLM research into impactful cybersecurity product features. You will leverage and augment our existing infrastructure, including BI systems and CI/CD pipelines, to design, develop, and deploy advanced LLM and Agentic capabilities. Your expertise in software development, AI engineering, and modern LLM technologies will directly drive the evolution of our security operations. By building robust, production-ready AI solutions, you will make a tangible difference in protecting our digital world against complex threats.
Key Responsibilities
Design and build Agentic security solutions to improve detection, response, and remediation capabilities.
Architect, implement, and optimize end-to-end LLM pipelines ensuring scalability from data ingestion to deployment.
Develop and deploy AI agents leveraging LLMs to automate complex security decision-making tasks.
Integrate LLM APIs and fine-tune models for specific cybersecurity use cases.
Transform promising AI and LLM research concepts into mature, robust, and scalable production-ready features.
Augment established BI data systems and CI/CD pipelines to support advanced AI development and experimentation.
Develop specialized tools and frameworks extending infrastructure to support AI-driven security research and remediation.
Collaborate with cross-functional teams to integrate AI innovations into customer-facing XDR, EDR, and SOAR platforms.

As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production.
What You'll Do
Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features.
Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats.
Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data.
Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds our company's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments.
Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter.
Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation.
Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build.

We are looking for a Security Researcher to join our research group as part of a growing team developing Autopilot, an innovative product for autonomous investigation and response.
As a core member of the team, you'll go beyond research: youll research, design, and develop investigation modules that allow Autopilot to autonomously detect, investigate, and respond to advanced threats at a massive scale.
Youll analyze everything from new malware behaviors to attacker techniques and process activity in enterprise-scale networks, using data collected from across millions of endpoints. Your work will span identifying attack patterns and uncovering statistical anomalies, as well as validating that the system responds effectively to real-world attacks and APT campaigns using production data.
Key Responsibilities
Research and implement new autonomous methods for investigating and responding to targeted attackers, using large-scale, diverse security datasets
Develop and design the graph-based algorithms that power autonomous investigation and decision-making capabilities
Design automated incident response by developing reusable logic that transforms raw security data and alerts into clear, actionable insights.
Leverage graph algorithms, AI techniques, and statistical methods to mimic and scale human security analyst workflows
Conduct deep, hands-on investigations into modern malware, APTs, and complex attack flows to inform detection and response logic
Stay up to date with attacker methodologies, tools, and techniques (TTPs), ensuring our product remains effective against evolving threats
Contribute to a collaborative, fast-paced research team, helping shape our research strategy, improve processes, and continuously enhance the product.

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

At Palo Alto Networks, we're not just building products - we're revolutionizing cybersecurity. As the Principal Product Manager for Cortex Platform, you'll lead our mission to secure the world's digital transformation. If you're ready to lead the charge in revolutionizing cloud security, we want to hear from you.
Why Cortex?
Market Leader - Join the fastest-growing cloud security platform, trusted by many customers worldwide
Innovative Culture - Work alongside some of the brightest minds in cybersecurity, constantly pushing boundaries
Massive Impact - Protect the world's most critical digital assets and shape the future of cloud security
Rapid Growth - Be part of a team that's scaling at an unprecedented rate, with abundant opportunities for career advancement
Your Impact
The Cortex Platform product group is responsible for developing core capabilities available to customers of the entire Cortex product portfolio, including XSIAM, XDR, AgentiX, and Cortex Cloud. We work directly with customers, and also collaborate with Internal teams to provide foundational capabilities for them to integrate with.
Our daily work involves tackling complex cybersecurity challenges to help customers secure their environments, all while providing a simple and intuitive user experience. We build products and features in areas such as Multi-tenant and MSSP offerings, Agentic workflows, Threat intelligence, Identity and Access Management (SBAC, RBAC etc), Case investigation, Search, Dashboarding, Reporting, Compliance and governance, Regional and Cloud Availability, Resilience, and more. We leverage AI in our development processes and integrate it directly into the products we create.
Key Responsibilities
Defining and owning the product vision, roadmap in alignment with the overall Cortex strategy for multiple cyber security platform areas including Analytics, Search & Reporting, Platform Availability, Health & Resiliency, Shared Experiences & workflows across our product portfolio
Conducting market research and competitive analysis to identify market trends and customer needs, gather customer feedback, understand customer pain points, define problem statements to propose and prioritize feature development.
Design and develop enterprise-grade features through close collaboration with partner product, research, engineering, and UX/UI design teams.
Work closely with product enablement, marketing and sales teams to evangelize the product internally and externally, and conduct product demos and presentations to internal stakeholders and customers.

Are you an innovative security researcher with a deep understanding of Linux systems and a passion for protecting modern environments? Do you want to lead the charge in securing enterprise networks against the latest threats?
We're looking for a skilled professional to join our team, focusing on the critical and rapidly evolving fields of Linux Security. You'll be a foundational member of a new and growing team dedicated to the blue ocean of detection, developing multiple new capabilities within the largest cybersecurity enterprise in the world.
This is a unique opportunity to apply your expertise and influence the future of threat prevention-helping us build cutting-edge security solutions from the ground up.
Key Responsibilitie
Play a pivotal role in shaping the future of our security solutions.
Enhance product effectiveness by designing advanced protection components and developing sophisticated detection rules.
Research Linux OS internals, virtualized environments, and malware behaviors to inform and strengthen our attack prevention mechanisms.
Apply advanced AI and big data approaches to investigate and analyze large-scale datasets across our client base.
Lead research on novel protection concepts and bring them to production-grade quality, serving as a subject matter expert.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs targeting Linux systems.
Conduct static and dynamic reverse engineering of Linux malware to uncover new techniques and develop mitigation strategies.
Collaborate closely with engineering, product management, and other research teams to translate research findings into production features.

Were looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team.

EDR protects the endpoint. our company protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business.

our company is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure - cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools cant see, our company provides Zero-Impact Breach Prevention, in runtime.

The Role

We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization.

You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team.



What You'll Do

Drive Groundbreaking Research

Own and drive our most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication.
Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats.
Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities.
Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it.
Be a Voice in the Community

Represent our company as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions.
Build and maintain our reputation as a research-driven company that advances the field - not just a vendor with a blog.
Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing.
Shape the Product

Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats.
Design and develop advanced detection algorithms that directly feed into our platform, closing the gap between research insight and customer protection.
Elevate the Team

Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to.
Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices.
Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities.
Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity.

We're looking for a talented AI Security Researcher to join our team and play a critical role in our company's foundational, risk-driven approach to cloud security. This role requires deep technical research into complex cloud- and AI-native environments to identify the most significant, unaddressed risks.
Responsibilities
Conduct deep technical research to discover and report novel risks and attack vectors specific to modern cloud- and AI-native architectures and systems.
Discover and articulate the highest unaddressed risk areas, working with Product and Engineering teams to translate research into product capabilities.
Define necessary foundational product capabilities by delivering both compelling proofs of risk (demonstrating impact) and technical POCs (showing how to solve it).
Work closely with Product and Engineering teams to ensure comprehensive risk coverage and support the investigation of new and complex product scope.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.

Responsibilities

Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.

Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.

Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.

Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.

Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.

Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.

Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.

Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do
Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.

Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.

Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.

Secure AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.

Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.

Investigate and respond to application security incidents, including root cause analysis and durable corrective action.

Contribute to secure development lifecycle and to compliance work.