T
Security Researcher
·Israel
Not specifiedFull-timeSecurity EngineeringSoftware DevelopmentCybersecurity
Seeking a hands-on Security Researcher to investigate fraud and abuse techniques, analyze telemetry, and design detection mechanisms for a cutting-edge SaaS platform. The role involves reproducing attacker methods, discovering new security signals, and collaborating with product, data, and engineering teams to turn research into production-grade protections.
Responsibilities
- Research emerging fraud and abuse techniques including account takeover, bots, automation, phishing, device spoofing, and emulators.
- Identify, design, and validate new data collection opportunities and security signals across browsers, mobile apps, and network indicators.
- Analyze real-world telemetry, behavioral signals, and attack patterns to identify detection opportunities.
- Reproduce attacker techniques in lab environments, generate telemetry, and translate findings into detection logic.
- Design, validate, and tune detection mechanisms with attention to coverage, explainability, and false positives.
- Build research infrastructure, analysis workflows, and internal tools using Python.
- Produce robust data features for machine learning models, detection rules, and dashboards.
- Collaborate with data science, engineering, and product teams from hypothesis through production feedback.
- Stay current with fraud trends, attacker tooling, and underground ecosystem developments.
- Communicate findings and recommended actions to technical and non-technical stakeholders.
Requirements
- At least 3 years of experience in security research, fraud research, detection engineering, or a similar hands-on technical role.
- Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or equivalent experience.
- Strong hands-on experience with desktop/mobile browsers, browser APIs, automation, fingerprinting, or client-side web security.
- Or strong experience with native mobile applications (Android/iOS), mobile OS behavior, device signals, emulators, or mobile security.
- Strong understanding of web/mobile technologies, APIs, and modern attack techniques.
- Strong Python skills for building research tools, automation, and data analysis workflows.
- Experience analyzing messy real-world data, validating hypotheses, and drawing practical conclusions.
- Familiarity with machine learning training/validation concepts and model evaluation.
- Ability to produce structured, reliable data features for models.
- Attacker mindset with ability to design reliable, scalable defenses.
- Excellent communication and collaboration skills.