דרושים » אבטחת מידע וסייבר » Principal / Sr. Principal Security Research - Advanced Cyber Research (Cortex)

We are seeking a Senior / Principal Security Researcher to join our high-caliber Security ML Team. Our team solves complex security challenges using disruptive technologies, AI/ML algorithms, and massive datasets to design and develop groundbreaking security solutions that transition directly from research into production-grade protection.
In this role, you will serve as the core security domain expert within a multidisciplinary team, providing essential security-side expertise to assist in the development of ML models, deeplearning models, and Small Language Models (SLMs). By translating complex malware behaviors and static file attributes into actionable logic, your research will directly shape the algorithms that protect millions of endpoints worldwide. If you are looking to autonomously drive high-impact research initiatives from inception to production and use data-informed critical thinking to influence advanced security modeling, we want to hear from you.
Key Responsibilities
The Bridge to the AI Ecosystem: Serve as the core security domain expert within a multidisciplinary team, translating complex malware behaviors and static file attributes into actionable features, labels, or heuristics-fueling AI algorithms and automated, data-driven security logic.
Telemetry & Sensor Optimization:Analyze raw endpoint telemetry (such as memory buffers, hook outputs, and IPC artifacts) to evaluate algorithm effectiveness and work with AI researchers to tweak or implement new models..
Deconstruct File Behavior: Look past the "black box" of machine learning by digging into executable formats (PE, ELF, Mach-O) and scripts to identify malicious behavior(e.g., packing, anomalous imports, obfuscation).
Drive Intelligent Protections:Take a security hypothesis, validate it via data analysis, and build Python-based proof-of-concepts that scale into production-grade detections-spanning machine learning classifiers to AI-informed automated rule generation.
Shape the Pipeline: Influence data pipeline strategies and model design by ensuring our datasets and automated logic accurately capture the ground truth of modern threat landscapes.

Are you an innovative security researcher with a deep understanding of Linux systems and a passion for protecting modern environments? Do you want to lead the charge in securing enterprise networks against the latest threats?
We're looking for a skilled professional to join our team, focusing on the critical and rapidly evolving fields of Linux Security. You'll be a foundational member of a new and growing team dedicated to the blue ocean of detection, developing multiple new capabilities within the largest cybersecurity enterprise in the world.
This is a unique opportunity to apply your expertise and influence the future of threat prevention-helping us build cutting-edge security solutions from the ground up.
Key Responsibilitie
Play a pivotal role in shaping the future of our security solutions.
Enhance product effectiveness by designing advanced protection components and developing sophisticated detection rules.
Research Linux OS internals, virtualized environments, and malware behaviors to inform and strengthen our attack prevention mechanisms.
Apply advanced AI and big data approaches to investigate and analyze large-scale datasets across our client base.
Lead research on novel protection concepts and bring them to production-grade quality, serving as a subject matter expert.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs targeting Linux systems.
Conduct static and dynamic reverse engineering of Linux malware to uncover new techniques and develop mitigation strategies.
Collaborate closely with engineering, product management, and other research teams to translate research findings into production features.

Join our Security Autonomous SOC Team as a Principal AI Engineer to transform innovative AI/LLM research into impactful cybersecurity product features. You will leverage and augment our existing infrastructure, including BI systems and CI/CD pipelines, to design, develop, and deploy advanced LLM and Agentic capabilities. Your expertise in software development, AI engineering, and modern LLM technologies will directly drive the evolution of our security operations. By building robust, production-ready AI solutions, you will make a tangible difference in protecting our digital world against complex threats.
Key Responsibilities
Design and build Agentic security solutions to improve detection, response, and remediation capabilities.
Architect, implement, and optimize end-to-end LLM pipelines ensuring scalability from data ingestion to deployment.
Develop and deploy AI agents leveraging LLMs to automate complex security decision-making tasks.
Integrate LLM APIs and fine-tune models for specific cybersecurity use cases.
Transform promising AI and LLM research concepts into mature, robust, and scalable production-ready features.
Augment established BI data systems and CI/CD pipelines to support advanced AI development and experimentation.
Develop specialized tools and frameworks extending infrastructure to support AI-driven security research and remediation.
Collaborate with cross-functional teams to integrate AI innovations into customer-facing XDR, EDR, and SOAR platforms.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.

Responsibilities

Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.

Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.

Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.

Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.

Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.

Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.

Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.

Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

About GeoEdge GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. For over a decade, we've protected the integrity of the digital advertising ecosystem with real-time technology that empowers our partners to deliver clean, trustworthy user experiences. The Role Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our Head of Security & Research, you'll report directly to the CEO and own GeoEdge's malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts GeoEdge on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of GeoEdge for customers, partners, and the wider security community. What You'll Do Set the strategy and roadmap for GeoEdge's malvertising detection and security research Lead, mentor, and grow the security research team Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem Own detection quality: push for uncompromising precision, coverage, and speed Drive original research and publications, and represent GeoEdge at leading security conferences Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it Report to the CEO and management on research impact, threat landscape, and priorities

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

As a Principal Security Researcher , you will act as an architect for the Autonomous SOC, focusing directly on Cortex AgentiX. You will design and build intelligent, automated investigation and remediation agents that empower thousands of customers to secure their environments at scale.
We are looking for a practitioner who combines deep hands-on expertise investigating threats and protecting organizations with a pragmatic approach to solving complex security challenges.
Key Responsibilities
Develop in-product specialized agents to accelerate detection, respond to real-time threats, prioritize, and mitigate risks.
Establish guardrails, continuous evaluation metrics, and deterministic controls for agentic AI, ensuring complex multi-step plans execute reliably.
Drive the complete product development lifecycle, encompassing definition, design, implementation, and testing phases.
Partner cross-functionally with product management, engineering, and research teams.

We are looking for a Security Researcher to join our research group as part of a growing team developing Autopilot, an innovative product for autonomous investigation and response.
As a core member of the team, you'll go beyond research: youll research, design, and develop investigation modules that allow Autopilot to autonomously detect, investigate, and respond to advanced threats at a massive scale.
Youll analyze everything from new malware behaviors to attacker techniques and process activity in enterprise-scale networks, using data collected from across millions of endpoints. Your work will span identifying attack patterns and uncovering statistical anomalies, as well as validating that the system responds effectively to real-world attacks and APT campaigns using production data.
Key Responsibilities
Research and implement new autonomous methods for investigating and responding to targeted attackers, using large-scale, diverse security datasets
Develop and design the graph-based algorithms that power autonomous investigation and decision-making capabilities
Design automated incident response by developing reusable logic that transforms raw security data and alerts into clear, actionable insights.
Leverage graph algorithms, AI techniques, and statistical methods to mimic and scale human security analyst workflows
Conduct deep, hands-on investigations into modern malware, APTs, and complex attack flows to inform detection and response logic
Stay up to date with attacker methodologies, tools, and techniques (TTPs), ensuring our product remains effective against evolving threats
Contribute to a collaborative, fast-paced research team, helping shape our research strategy, improve processes, and continuously enhance the product.

We're looking for a Threat Security Researcher to join our Threats team at the intersection of security research, AI, and product. You'll own detection research across runtime, cloud, network, identity, code, while actively shaping how AI capabilities are applied to solve real security problems at scale.
Conduct deep technical research into modern cloud environments and AI systems and discover novel attack techniques.
Lead product initiatives in the threats domain from inception to production. Collaborate closely with product, backend, and GTM, translating research into product capabilities.
Define and create complex detection logic over our vast telemetry, with a focus on coverage that scales across customer environments.
Identify gaps in detection coverage and evaluate detection quality. ensuring security logic is reliable and impactful.
Stay up to date with the evolving threat landscape (threat intelligence, campaigns) and incorporate into our product
Contribute to PR presence - technical research content, talks, open-source tooling.

As an innovator at heart, you will lead the Email Security Research team and shape the future of AI-driven email protection. You will define the technical vision, drive the research roadmap, and lead a team developing advanced detection capabilities. Working closely with Engineering, Product, Threat Intelligence, and AI teams, you will build cutting-edge security solutions that protect customers against evolving email threats while fostering innovation and technical excellence.
Key Responsibilities
Lead, mentor, and grow a team of Email Security researchers and analysts.
Define and execute the Email Security research, detection, and analytics roadmap.
Drive innovation in AI and LLM-powered email security.
Lead the design of advanced detections for phishing, Business Email Compromise (BEC), malware, account takeover, and emerging email threats.
Improve detection efficacy through behavioral analytics, threat research, and large-scale data analysis.
Collaborate with Engineering, Product, Threat Intelligence, and cross-functional teams to deliver scalable security capabilities.
Promote technical excellence through design reviews, coaching, and knowledge sharing.
Represent the team internally and externally through technical presentations, blogs, white papers, and industry conferences.
Foster a culture of innovation, collaboration, and continuous learning.