דרושים » אבטחת מידע וסייבר » security researcher- posture

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we are hiring a threat researcher who is passionate about turning raw threat data into clear intelligence and operational outcomes. youll play a major role in advancing our next-gen detection platform across threat actor attribution, adversary infrastructure analysis, external attack surface management (easm), and stix-based knowledge management.
investigate and analyze emerging threats and malicious techniques, and define technical requirements to mitigate them.
execute the detection research roadmap across threat actor attribution, adversary infrastructure analysis, easm insights, and stix-based knowledge management.
conduct in-depth infrastructure and campaign analysis, including domain/ip relationships, hosting patterns, and certificates.
design and shape ai-driven security agents by encoding expert threat actor and defender reasoning into agentic flows, prompts, decision logic, and investigative strategies.
work closely with developers and data scientists to produce ai detection models.
architect and build scalable solutions to evaluate platform security metrics.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
we are on an expedition to find you, someone who is passionate about creating intuitive, out-of-this-world security research. you'll help us harness the power of the company's trillions of security signals to rapidly diagnose and alert the latest attacker behaviors, drive critical context-rich signals, construct new tools and automations to support customers, identify threats, and detect advanced attacker techniques.
analyze various network devices, configurations and security products
implement methods and algorithms to discover network topology, relationships between devices and potential lateral movement paths
conduct network security assessments to identify weaknesses in customers network infrastructure, and recommend mitigations to monitor and limit unauthorized access
develop research tools and frameworks to perform automatic analysis of network devices and security products
research and analyze network-related cybersecurity threats and trends
work closely with other internal engineering and ai teams to integrate new capabilities into our platform and guide cross-product architectural decisions
act as a security subject matter expert for multidisciplinary teams

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
as a senior threat intelligence researcher, you will be responsible for tracking advanced adversaries and leveraging your deep technical expertise across attacker capabilities, infrastructure, and tactics. you will create and refine approaches to uncover and monitor active threat actors, as well as surface irregular and emerging behaviors in the broader threat landscape. the intelligence you generate will directly strengthen the company's understanding of threat actors and will inform proactive hunting, detection engineering, and defensive decision-making.
lead complex threat intelligence investigations through in-depth analysis of the global threat landscape, with a focus on advanced and state-linked actors.
define and prioritize threat research focus areas (actors, campaigns, sectors, techniques) aligned with the company's customers and product roadmap.
deliver actionable cyber threat intelligence and design and execute hunting campaigns using analytics, automation, and advanced ai capabilities.
curate and maintain structured knowledge on actors, campaigns, infrastructure, and ttps in the company's internal threat knowledge base.
work closely with cyberai researchers on the development of next-generation artificial cyber researchers and ai-driven analysis capabilities.

every nation has data. few can protect it. fewer still can act on it.
the company is the sovereign ai and national cyber-defense company for governments.
we help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
this is more than a job. it's a role at the company, where you'll work at a global scale alongside some of the best ai researchers, cyber operators, and government experts in the world.
we defend nations against the most advanced threats in the world with a national security suite that offers ai-native resilience against apts with visibility, insights and mediation across posture, cti, and detection & response, all fully sovereign.
as a senior malware researcher, you will analyze and reverse engineer malware and tooling used by advanced threat actors, particularly those targeting governments and critical infrastructure. you will apply deep expertise in binary and script analysis to uncover capabilities, configurations, and c2 infrastructure for threat actor attribution and mitigations.
your work will power the company's malware catalog, strengthen our understanding of threat actors technical capabilities, and directly support the development of next-generation ai-driven "artificial cyber researchers".
perform in-depth static and dynamic analysis of malware, implants, loaders, and related tooling used by apts and other sophisticated adversaries.
reverse engineer binaries and scripts (e.g., pe, elf,.net, powershell, JavaScript /vba) to determine capabilities, execution flow, persistence mechanisms, and evasion techniques.
extract and document configuration data and c2 information, and map these to campaigns, infrastructure, and threat actors in collaboration with cti researchers.
develop and maintain detection and hunting artifacts such as yara rules, vt livehunt queries, capa rules, and sandbox behavior signatures.
work closely with cyberai researchers on the development of next-generation artificial cyber researchers and ai-driven analysis capabilities.
7+ years of experience in Cyber security, with significant hands-on experience in malware research focused on apts and state-linked actors.
strong proficiency with re tools such as ida pro, ghidra, x64dbg/windbg, and common dynamic analysis/sandbox environments.
deep understanding of os internals (windows/ Linux / Android /mac), common persistence and execution techniques, and modern offensive tradecraft.
demonstrated experience extracting configs, c2 endpoints, and capabilities from both compiled and scripted malware.
strong investigative mindset, attention to detail, and ability to work with incomplete or obfuscated data.
experience researching or defending government or critical infrastructure organizations- advantage.
if you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, wed love to hear from you!

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the exposure management research group at the company is expanding. we are looking for an experienced offensive security researcher to join our newly formed aev team and lead the offensive side of our agentic exposure validation (aev) research.
about the group:
the exposure management research group is the research arm behind the company's exposure management platform. the platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. the group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. our work relies heavily on data science, Machine Learning, and agentic ai to operate at scale.
about the position:
exposure validation goes beyond identifying that a vulnerability exists. its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. in this position, you are responsible for bringing real offensive expertise into our aev capability, which runs on an agentic ai system that validates exposures across our customers' environments.
you conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. you also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
this is a research position with direct product impact. it combines practical red team work with shaping how an ai-driven platform conducts, reasons about, and reports offensive activity.
what you'll do:
design and run offensive research against external attack surfaces: web applications, apis, cloud-exposed services, identity, and edge infrastructure
turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
write and maintain the exploitation methodologies and attack hypotheses our agentic aev engine runs on
review agent runs and findings. separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

We're looking for a Threat Detection Researcher to join the Threat Research team and spread the power of our company. In this role, you will further develop the Cloud-native Threat Detection domain.
Check out some of our recent research:
Detecting Malicious OAuth Applications
Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild
our company Discovers Cloud Email Abuse Campaign
Responsibilities
Drive the full lifecycle of security detections - from threat research and data analysis to building and shipping detection logic directly into production.
Design behavioral baselines for complex cloud environments using diverse signals, and develop high-fidelity detections based on those baselines.
Expand our company's detection engine with novel and high-impact telemetry sources, pushing the boundaries of what can be detected in modern cloud environments.
Conduct deep technical research into complex cloud services to uncover novel attack vectors.
Investigate real-world attacks across cloud environments, identity providers (IDPs), and infrastructure-as-a-service (IaaS) platforms.
Hunt and analyze emerging threats and active campaigns targeting the cloud ecosystem.

We are looking for a Lead Security Researcher - AI Threat Intelligence. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by us, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified.
This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums.
Responsibilities:
Lead threat intelligence research focused on AI-related threats, threat actors, attack techniques, and emerging cybersecurity trends
Analyze internal and external security data to identify attack patterns, campaigns, and actionable intelligence
Explore large-scale datasets using SQL and other data analysis methods to generate research insights
Build tools, workflows, and agentic systems to automate research, investigation, and intelligence production
Research how attackers use AI and how AI can improve threat detection, investigation, and response
Publish high-quality research, including blogs, reports, threat intelligence summaries, and customer-facing insights
Present research at cybersecurity conferences, webinars, company events, and customer-facing sessions
Collaborate with product, data, engineering, and research teams to improve detections and product intelligence
Independently lead research initiatives from idea and data exploration to publication and presentation.
Travel internationally for company events and cybersecurity conferences at least six times per year.

We're looking for a Threat Security Researcher to join our Threats team at the intersection of security research, AI, and product. You'll own detection research across runtime, cloud, network, identity, code, while actively shaping how AI capabilities are applied to solve real security problems at scale.
Conduct deep technical research into modern cloud environments and AI systems and discover novel attack techniques.
Lead product initiatives in the threats domain from inception to production. Collaborate closely with product, backend, and GTM, translating research into product capabilities.
Define and create complex detection logic over our vast telemetry, with a focus on coverage that scales across customer environments.
Identify gaps in detection coverage and evaluate detection quality. ensuring security logic is reliable and impactful.
Stay up to date with the evolving threat landscape (threat intelligence, campaigns) and incorporate into our product
Contribute to PR presence - technical research content, talks, open-source tooling.

at the company, what you do matters. every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and ai-driven threats, securing their ai transformation.
our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and ai systems, stopping attacks before they happen.
this is where innovation meets real-world impact. youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
were proud to be recognized by time, newsweek, and forbes for excellence and workplace culture.
what really sets the company apart is the opportunity to grow, contribute, and help companies navigate their ai transformation securely.
if youre excited to work at the forefront of ai-driven security on a global scale, this is the place to do it.
the company research (cpr) is looking for a threat researcher to join its threat intelligence analysis (tia) team. the team is responsible of discovering, analyzing and tracking advanced threat actors and campaigns, with a strong focus on high-end cybercrime and state-sponsored activities. you will join a team of motivated, independent & highly technical individuals and contribute the effort to protect the company customers and empower the company brand.
identify, understand and monitor advanced campaigns using publicly available sources as well as internal telemetry.
analyze malware and other hacking tools utilized by threat actors in active campaigns and intrusions.
create technical research content for public and private intelligence reports.
help build protections and detections based on deep understanding of advanced threat actors tactics techniques and procedures (ttps).
collaborate with other security teams to assist threat intelligence and research tasks.