W
Senior Threat Researcher
Not specifiedFull-timeThreat IntelligenceCybersecurityEnterprise Software
Lead end-to-end security research focused on emerging threats, CVEs, misconfigurations, attack surfaces, and the real-world exploitability of cloud and application technologies. Build production-ready detection capabilities and automations for AI-driven security products.
Responsibilities
- Research emerging threats, CVEs, and misconfigurations to assess exploitability and customer impact.
- Design, build, and test detection rules and scanning logic for exposed and vulnerable assets.
- Develop automations to validate, benchmark, and monitor AI-driven detection capabilities at scale.
- Investigate cloud services, frameworks, and widely deployed technologies to identify attack surfaces.
- Analyze large-scale scan results and prioritize meaningful risks.
- Lead research projects from initial concept through production-ready detection.
- Collaborate with product and R&D teams to turn research findings and attack methodologies into product capabilities.
Requirements
- At least 5 years of hands-on experience in security research, red teaming, penetration testing, incident response, or vulnerability research.
- Strong understanding of network and application security, including TCP/IP, DNS, TLS, web technologies, modern APIs, and application- and network-layer exploitation.
- Strong scripting and automation skills with Python, Bash, or equivalent.
- Hands-on experience with vulnerability scanners, detection rules, or automated vulnerability and exploitability validation tools.
- Ability to independently own and lead projects from research through delivery.
- Strong written and presentation skills in English and Hebrew.
- Legal authorization to work in Israel without visa sponsorship.
Nice to have
- Experience researching AWS, Azure, or GCP environments.
- Familiarity with Kubernetes, containers, and CI/CD security.
- Experience with AI-assisted development tools.
- Familiarity with Burp Suite, nmap, Metasploit, Nuclei, or similar tools.
- Published security research, exploits or proofs of concept, or contributions to open-source security tooling.