דרושים » אבטחת מידע וסייבר » cti outbound researcher

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
as a senior threat intelligence researcher, you will be responsible for tracking advanced adversaries and leveraging your deep technical expertise across attacker capabilities, infrastructure, and tactics. you will create and refine approaches to uncover and monitor active threat actors, as well as surface irregular and emerging behaviors in the broader threat landscape. the intelligence you generate will directly strengthen the company's understanding of threat actors and will inform proactive hunting, detection engineering, and defensive decision-making.
lead complex threat intelligence investigations through in-depth analysis of the global threat landscape, with a focus on advanced and state-linked actors.
define and prioritize threat research focus areas (actors, campaigns, sectors, techniques) aligned with the company's customers and product roadmap.
deliver actionable cyber threat intelligence and design and execute hunting campaigns using analytics, automation, and advanced ai capabilities.
curate and maintain structured knowledge on actors, campaigns, infrastructure, and ttps in the company's internal threat knowledge base.
work closely with cyberai researchers on the development of next-generation artificial cyber researchers and ai-driven analysis capabilities.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we are hiring a threat researcher who is passionate about turning raw threat data into clear intelligence and operational outcomes. youll play a major role in advancing our next-gen detection platform across threat actor attribution, adversary infrastructure analysis, external attack surface management (easm), and stix-based knowledge management.
investigate and analyze emerging threats and malicious techniques, and define technical requirements to mitigate them.
execute the detection research roadmap across threat actor attribution, adversary infrastructure analysis, easm insights, and stix-based knowledge management.
conduct in-depth infrastructure and campaign analysis, including domain/ip relationships, hosting patterns, and certificates.
design and shape ai-driven security agents by encoding expert threat actor and defender reasoning into agentic flows, prompts, decision logic, and investigative strategies.
work closely with developers and data scientists to produce ai detection models.
architect and build scalable solutions to evaluate platform security metrics.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we're looking for a Cyber security researcher to join the research team within our posture management group. our product is ai-driven, and this is a research role on the research team. youll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. a core part of the role is helping to build ai agents that emulate threat actors flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths.
5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar).
implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths
conduct network security assessments to identify weaknesses in customers network infrastructure and recommend mitigations to monitor and limit unauthorized access.
research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., active directory, network segmentation, identity infrastructure, exposed services).
build poc exploits/attack chains to validate risk hypotheses before they're modeled into the product. collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers.
produce clear technical documentation of research findings, attack paths, and proposed detection logic.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
as a senior malware researcher, you will analyze and reverse engineer malware and tooling used by advanced threat actors, particularly those targeting governments and critical infrastructure. you will apply deep expertise in binary and script analysis to uncover capabilities, configurations, and c2 infrastructure for threat actor attribution and mitigations.
your work will power the company's malware catalog, strengthen our understanding of threat actors technical capabilities, and directly support the development of next-generation ai-driven "artificial cyber researchers".
perform in-depth static and dynamic analysis of malware, implants, loaders, and related tooling used by apts and other sophisticated adversaries.
reverse engineer binaries and scripts (e.g., pe, elf,.net, powershell, JavaScript /vba) to determine capabilities, execution flow, persistence mechanisms, and evasion techniques.
extract and document configuration data and c2 information, and map these to campaigns, infrastructure, and threat actors in collaboration with cti researchers.
develop and maintain detection and hunting artifacts such as yara rules, vt livehunt queries, capa rules, and sandbox behavior signatures.
work closely with cyberai researchers on the development of next-generation artificial cyber researchers and ai-driven analysis capabilities.
7+ years of experience in Cyber security, with significant hands-on experience in malware research focused on apts and state-linked actors.
strong proficiency with re tools such as ida pro, ghidra, x64dbg/windbg, and common dynamic analysis/sandbox environments.
deep understanding of os internals (windows/ Linux / Android /mac), common persistence and execution techniques, and modern offensive tradecraft.
demonstrated experience extracting configs, c2 endpoints, and capabilities from both compiled and scripted malware.
strong investigative mindset, attention to detail, and ability to work with incomplete or obfuscated data.
experience researching or defending government or critical infrastructure organizations- advantage.
if you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, wed love to hear from you!

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the threat landscape operations team is a key part of the company research. it is responsible for conducting threat research and developing some of the company's major research assets.
the team focuses on analyzing and tracking cybercrime, developments in ai, hacktivist activity, and emerging adversary trends. its research supports strategic and operational intelligence, thought leadership, and the development of advanced security technologies.
working with us will give you access to unique data sources and visibility into some of the worlds most advanced cyberattacks. you will lead exciting research projects for public release, customers, and internal stakeholders.
we are looking for an experienced, proactive, and independent team member who can lead dynamic, in-depth research and shape the teams long-term vision.
major responsibilities
research and analyze cyber threat actors.
be the first to flag trends, new malware, threat actors and intelligence items that stand out in the crowd
execute the full intelligence research lifecycle:
monitoring and analyzing the digital underground - including the darknet, the deepweb, and other open and restricted sources
gather & flag intelligence that stands out.
assess, validate, and refine raw information into high-confidence insights
produce clear, well-structured written research and threat assessments
build, maintain, and continuously evaluate a diverse set of reliable intelligence sources
identify long-term trends, relationships, and shifts in adversary behavior
conduct deep intelligence collection operations and collect proprietary intelligence
collaborate with other researchers and internal stakeholders to contextualize findings and improve threat coverage
maintain high analytical and research standards, including sourcing, attribution, and methodological rigor

we are looking for a Threat Intelligence Researcher to join its Threat Intelligence Group and support the companys Cyber Threat Intelligence Exposure Management (CTIEM) services, Incident Response engagement and proactive services. In this position, you will identify, investigate, and monitor external cyber threats and organizational exposures across the open web, dark web, social media platforms, and other intelligence sources. You will help organizations understand and reduce their external attack surface, detect brand abuse and malicious activity targeting their assets, and develop innovative intelligence-driven monitoring capabilities leveraging automation and AI technologies.
The successful candidate should be a creative, highly motivated, and independent researcher with strong analytical skills, a deep understanding of attacker methodologies, and a passion for solving complex intelligence challenges. As part of the role, you will engage with clients, support operational teams, and contribute to the development of cutting-edge CTIEM capabilities.
Main Responsibilities:
Conduct proactive monitoring and investigations across the open web, dark web, forums, marketplaces, messaging platforms, and social media channels to identify threats targeting client organizations.
Analyze organizational exposure across external attack surfaces, including internet-facing assets, leaked information, exposed services, and emerging risks.
Investigate and identify brand abuse activities, impersonation attempts, phishing campaigns, fraudulent domains, and other malicious activities targeting clients.
Detect and assess data exposures and information leaks through a variety of intelligence sources, commercial platforms, and proprietary tools.
Utilize Attack Surface Management (ASM) platforms and related technologies to identify, prioritize, and assess external security exposures.
Develop and enhance intelligence collection, detection, and monitoring capabilities through automation and AI-driven solutions, primarily using Python.
Produce comprehensive intelligence reports, exposure assessments, and actionable recommendations for clients and internal stakeholders.
Engage directly with clients to present findings, explain risks, and support remediation efforts.
Collaborate closely with Incident Response teams to support ongoing investigations.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we are on an expedition to find you, someone who is passionate about creating intuitive, out-of-this-world security research. you'll help us harness the power of the company's trillions of security signals to rapidly diagnose and alert the latest attacker behaviors, drive critical context-rich signals, construct new tools and automations to support customers, identify threats, and detect advanced attacker techniques.
analyze various network devices, configurations and security products
implement methods and algorithms to discover network topology, relationships between devices and potential lateral movement paths
conduct network security assessments to identify weaknesses in customers network infrastructure, and recommend mitigations to monitor and limit unauthorized access
develop research tools and frameworks to perform automatic analysis of network devices and security products
research and analyze network-related cybersecurity threats and trends
work closely with other internal engineering and ai teams to integrate new capabilities into our platform and guide cross-product architectural decisions
act as a security subject matter expert for multidisciplinary teams

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the company research (cpr) is looking for a threat researcher to join its threat intelligence analysis (tia) team. the team is responsible of discovering, analyzing and tracking advanced threat actors and campaigns, with a strong focus on high-end cybercrime and state-sponsored activities. you will join a team of motivated, independent & highly technical individuals and contribute the effort to protect the company customers and empower the company brand.
identify, understand and monitor advanced campaigns using publicly available sources as well as internal telemetry.
analyze malware and other hacking tools utilized by threat actors in active campaigns and intrusions.
create technical research content for public and private intelligence reports.
help build protections and detections based on deep understanding of advanced threat actors tactics techniques and procedures (ttps).
collaborate with other security teams to assist threat intelligence and research tasks.

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the exposure management research group at the company is expanding. we are looking for an experienced offensive security researcher to join our newly formed aev team and lead the offensive side of our agentic exposure validation (aev) research.
about the group:
the exposure management research group is the research arm behind the company's exposure management platform. the platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. the group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. our work relies heavily on data science, Machine Learning, and agentic ai to operate at scale.
about the position:
exposure validation goes beyond identifying that a vulnerability exists. its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. in this position, you are responsible for bringing real offensive expertise into our aev capability, which runs on an agentic ai system that validates exposures across our customers' environments.
you conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. you also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
this is a research position with direct product impact. it combines practical red team work with shaping how an ai-driven platform conducts, reasons about, and reports offensive activity.
what you'll do:
design and run offensive research against external attack surfaces: web applications, apis, cloud-exposed services, identity, and edge infrastructure
turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
write and maintain the exploitation methodologies and attack hypotheses our agentic aev engine runs on
review agent runs and findings. separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.