דרושים » אבטחת מידע וסייבר » Senior Security Researcher

This is a rare opportunity to work at the intersection of offensive security and AI - and to have your expertise shape a platform used at enterprise scale. Youll perform attacks on customer WEB applications, help the AI agent get smarter, and work alongside a tight-knit team building something genuinely new in the security space. Work closely with AI and engineering teams to continuously improve agent capabilities.

Responsibilites
Harness AI agent on customer applications, analyze the results, and validate vulnerabilities with clear exploitation evidence
Present findings and exploitation evidence clearly and transparently to customers and internal teams
Analyze where the system needs to improve, investigate cases where the AI missed, misclassified, or hallucinated vulnerabilities
Develop new attack strategies and offensive testing techniques for web and API targets, and translate real-world knowledge into improvements for the AI agent

We're looking for an experienced Application Security Researcher to help customers maximize the value of our AI-powered offensive security platform.

In this role, you'll work hands-on with customer environments, validate security findings, investigate complex application vulnerabilities, and help organizations understand, reproduce, and remediate the risks identified by our platform.

You'll collaborate closely with customers, Product, Engineering, AI Research, and Customer Success teams, providing valuable feedback that continuously improves the platform while serving as a trusted technical advisor throughout the customer journey, from complex deployments to production investigations.

This is an ideal role for someone with a strong offensive security background who enjoys combining technical research with customer interaction and wants to help shape the future of AI-driven application security.

Responsibilities
Validate vulnerabilities discovered by our AI platform and provide clear technical evidence of successful exploitation.
Perform hands-on testing of modern web applications and APIs to verify findings and identify additional attack paths.
Analyze complex application security issues, including authentication, authorization, business logic flaws, and API vulnerabilities.
Help customers understand security findings, reproduce vulnerabilities, assess risk, and implement remediation recommendations.
Investigate cases where the platform missed, misclassified, or incorrectly assessed vulnerabilities and provide actionable feedback to Product and Engineering teams.
Collaborate closely with AI Research and Engineering teams to improve detection accuracy, attack coverage, and platform capabilities.
Develop new attack methodologies and validation techniques for modern web applications.
Stay current on emerging application security trends, offensive techniques, and modern attack methodologies.
Support customers during complex deployments, integrations, and production troubleshooting, including BYOM deployments and connectivity to internal applications.

Were looking for a passionate Lead or Senior Offensive Security Engineer for our growing Offensive Security Automation team. This hands-on offensive security position requires a cyber security professional whose primary focus is to perform security assessments and vulnerability research using internal AI tools using frontier models, with a focus of designing and developing the AI automation and autonomous harnesses together with the team.

This is a role for someone who can perform offensive security testing at scale, combining deep security expertise with the judgment to direct and improve AI-driven tooling.

What You'll Actually Be Doing
Perform security assessments and vulnerability research across web applications, APIs, and cloud/hybrid infrastructure, using internal AI tools and frontier models to scale coverage and depth that you will develop.
Make sure our internal solution can perform exploitation, vulnerability chaining, business logic and authorization abuse, privilege escalation, and lateral movement, beyond what automated tooling alone can find.
Run end-to-end engagements: scoping, execution, reporting, and remediation guidance.
Discover systemic/architectural weaknesses, not just isolated bugs, and drive secure-by-default fixes.
Partner with engineering, security architecture, and detection & response teams to close root causes and validate control effectiveness.
Produce high-quality technical reports with clear exploitation paths and prioritized remediation.
Develop the automation and autonomous harnesses that direct frontier models to perform offensive security testing continuously and at scale.
Design agent-based workflows that reason over large data, plan for risk signals, business logic and execute multi-step offensive testing that will adapt based on results, recon, hypothesis ranking, chaining of bugs exploitation, AI-Driven assessments, and reporting.
Establish human-in-the-loop checkpoints so automation scales offensive coverage without sacrificing safety or precision.
Translate your own tradecraft into reusable, explainable automation that the team can run and build on.

join us, a cybersecurity startup building the next generation of vulnerability management and exposure management.
were looking for a senior ai researcher (cybersecurity) to join our founding team and build ai-powered product capabilities that enable unprecedented effectiveness in vulnerability and asset management.
in this role, youll work hands-on with large-scale security data (assets, vulnerabilities, exposure context) and design production-grade ai systems that turn messy, complex information into clear, actionable insights.
own the end-to-end ai lifecycle: from feature ideation and initial research, through data exploration and model development, to delivering reliable, production-grade capabilities. validate solutions in controlled testing and continuously monitor, evaluate, and improve performance in production.
if you love combining real security problems with applied data science and ai-driven problem solving, and want to have real impact in a rapidly evolving product, wed love to meet you.
#li-dnp.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.

Responsibilities

Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.

Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.

Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.

Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.

Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.

Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.

Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.

Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

We are looking for a highly skilled Senior Vulnerability Researcher to join our team. In this role, you will lead offensive research on our clients' assets, uncovering complex vulnerabilities and directly connecting your findings to our product to demonstrate actionable value. Beyond client-focused engagements, you will spearhead vulnerability research into cutting-edge technologies within the AI and Cloud domains. As a senior technical voice for the company, you will share your findings by writing technical blogs and representing us at industry security conferences.
Key Responsibilities:
Conduct deep-dive offensive research on client assets to identify and exploit vulnerabilities.
Bridge the gap between offensive findings and product value, demonstrating to clients how our solutions mitigate their specific risks.
Perform pioneering vulnerability research on emerging technologies, specifically focusing on Cloud infrastructure and Artificial Intelligence (AI) ecosystems.
Author high-quality technical blogs, whitepapers, and vulnerability reports.
Represent the company by speaking and participating in leading global security conferences.

We're looking for an AI Security Researcher with a strong AppSec foundation. At the core, this is a deeply technical application security role at an engineering level. You'll sit with development teams, get involved in their processes, understand how software is actually built, and bring a security perspective from the inside. You'll enhance traditional AppSec with agentic tools and security layers, working directly with enterprise customers on hands-on engagements. On top of that defensive foundation, you'll layer AI-specific offensive capabilities: researching and executing attacks against AI/ML systems.
This is a unique opportunity to combine strong AppSec fundamentals with cutting-edge AI red teaming and agentic consulting, with a clear growth path as a researcher.
Roles and Responsibilities:
Conduct deep, engineering-level application security work: review architectures, assess code, and embed with development teams as a technical peer throughout the development lifecycle
Lead AI-focused security assessments and red team engagements for enterprise customers, identifying vulnerabilities in AI/ML systems, agentic workflows, and LLM-based applications
Enhance traditional AppSec processes with agentic tools and AI security layers
Research and develop novel attack techniques targeting AI/ML systems, including prompt injection, model manipulation, and agentic framework exploits
Translate offensive findings into actionable security recommendations for customers and internal teams
Stay at the forefront of AI security: continuously research emerging attack surfaces and contribute to the growing body of AI threat knowledge.

About GeoEdge GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. For over a decade, we've protected the integrity of the digital advertising ecosystem with real-time technology that empowers our partners to deliver clean, trustworthy user experiences. The Role Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our Head of Security & Research, you'll report directly to the CEO and own GeoEdge's malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts GeoEdge on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of GeoEdge for customers, partners, and the wider security community. What You'll Do Set the strategy and roadmap for GeoEdge's malvertising detection and security research Lead, mentor, and grow the security research team Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem Own detection quality: push for uncompromising precision, coverage, and speed Drive original research and publications, and represent GeoEdge at leading security conferences Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it Report to the CEO and management on research impact, threat landscape, and priorities

The Exposure Management Research Group at our company Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research.
About the group
The Exposure Management Research Group is the research arm behind our company's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale.
About the position
Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments.
You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity.
What you'll do
Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure
Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on
Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.