B

BeyondTrust

PAM, vulnerability, and endpoint security solutions

Software Development Engineer - Applied Research

Full-TimeUpdated on 10/15/2026
No salary listed
Mid
Tel Aviv-Yafo, Israel
Hybrid
CybersecuritySecurity Engineering & Architecture

About the job

Requirements
  • At least 3 years of experience writing clean, maintainable backend code, ideally in Python or Go.
  • A solid grasp of identity and access management mechanics in AWS, Azure/Entra, or GCP, including policies, roles, and authorization flow.
  • Experience building analytical logic or heuristics from structured data, logs, or permission models.
  • A methodical approach to complex debugging and a strong interest in security.
  • Strong technical communication with engineering and product colleagues.
  • Understanding of software development best practices, including appropriate testing paradigms, effective peer code reviews, and resilient architectures.
Responsibilities
  • Build and optimize detection logic for over-permissioned identities, excessive entitlements, and least-privilege gaps.
  • Study how service accounts, identity and access management roles, workload identities, and API tokens use permissions, and identify where behavior diverges from what was granted.
  • Programmatically model effective permissions across AWS IAM, Azure RBAC and Entra ID, or GCP IAM.
  • Write heuristics and statistical routines to flag risky permission patterns.
  • Turn known attack paths, such as privilege escalation and credential misuse, into automated detection coverage.
  • Prototype models and work with product engineering to scale them into production.

About the company

BeyondTrust provides cybersecurity software for organizations. Its products include Privileged Access Management (PAM), which controls and monitors access to critical systems; Vulnerability Management, which finds and helps remediate security weaknesses; and Endpoint Protection, which secures devices from threats. The offerings are delivered as software and managed services, and the company works with large enterprises, government agencies, and partners to provide an integrated security platform. Its goal is to reduce cyber risk by preventing unauthorized access, detecting and fixing weaknesses, and protecting endpoints for safer IT operations.

Company Size

1,001-5,000

Company Stage

Acquired

Total Funding

$12.1M

Headquarters

Johns Creek, Georgia

Founded

1985

Get referred to BeyondTrust

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Black Hat 2026 launch made PathfinderAI, AI Agent Security, and NHI Governance available early.
  • September 2026 CrowdStrike partnership expands distribution and reinforces BeyondTrust inside security operations centers.
  • April 2024 Entitle acquisition and 2026 Pathfinder expansion deepen identity governance and access management.

What critics are saying

  • CVE-2026-1731 hit CISA KEV, exposing unpatched Remote Support and PRA customers.
  • July 2026 patches fixed four vulnerabilities, while nearly 2,000 self-hosted instances stayed exposed.
  • Patent suit SynchroFi v. BeyondTrust began March 2026, adding legal distraction and defense costs.

What makes BeyondTrust unique

  • BeyondTrust's Pathfinder unifies privilege, identity, and non-human governance across one platform.
  • CrowdStrike Falcon integrations embed privilege context directly into SOC workflows, deepening platform relevance.
  • NHI Governance extends PAM into AI agents, service accounts, API keys, and workload identities.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Flexible Work Hours

Hybrid Work Options

Growth & Insights and Company News

Headcount

6 month growth

17%

1 year growth

17%

2 year growth

21%
iTWire
Oct 9th, 2026
Forcepoint and BeyondTrust Connect identity risk to data exposure, letting customers revoke risky access with precision.

Forcepoint and BeyondTrust Connect identity risk to data exposure, letting customers revoke risky access with precision. COMPANY NEWS: New integration pairs Forcepoint's AI-native data discovery and classification with BeyondTrust's identity risk detections, revealing the sensitive data behind each risk and revoking one identity's access while the business keeps running * Connect identity and data risk and act. When BeyondTrust detects a compromised user, a service account with too much access or an AI agent behaving oddly, Forcepoint shows the data at stake, allowing customers to revoke that identity's access. * Prioritise the exposures that matter. BeyondTrust maps the inherited entitlements and shadow paths behind each identity's access. Forcepoint ranks those identities by the value of the data they can touch, putting the riskiest exposure first. * Keep everyone else working. Customers remove a targeted identity's access instead of locking down whole systems. AUSTIN and ATLANTA - Oct. 8, 2026 - Global AI data security leader Forcepoint and BeyondTrust, the global leader in privilege-centric identity security protecting Paths to Privilege(TM), today announced the new integration of Forcepoint's AI-native data discovery and classification with BeyondTrust Identity Security Insights(R). The integration is available now and debuts today at BeyondTrust's Go Beyond Chicago customer conference. When BeyondTrust detects risk across a human, machine or AI identity based on behaviour, privilege or compromised credentials, Forcepoint pinpoints the sensitive information that identity can reach and where exposure is greatest as risk changes. Customers can then use Forcepoint controls to immediately cut off that identity's access to the specific records involved, without affecting anyone else's access or work. "With AI agents now doing real work inside the business, blocking autonomous tools isn't an option, and neither is guessing," said Bakshi Kohli, Chief Technology Officer of Forcepoint. "When BeyondTrust tells us an identity looks risky, we already know what data it can get to. Teams can take that one identity's access away and nothing more. That's the precision agentic enterprises ask for today." Security teams often get an identity alert in one console and have to open another to understand the full risk. The flagged identity could be a forgotten test login or an account that can read the customer database, and telling the two apart means checking both systems by hand, one alert at a time. Every minute of manual review is another minute an overprivileged identity or AI agent keeps acting. Turning Identity Alerts into AI Data Security Action Customers now get the data context behind each identity risk, along with the controls to act on it. BeyondTrust Identity Security Insights(R) surfaces risky identities based on behavior, privilege, compromised credentials and relationships among them. Forcepoint Data Security Posture Management (DSPM), part of the company's AI data security solutions, maps that risk to the confidential information within its permissions and provides controls to restrict that access. Compromised identities. A stolen identity is only as dangerous as the access it provides and the data that access puts in reach. When BeyondTrust detects a compromised identity or entitlement, the True Privilege(TM) graph maps the real blast radius: every path that identity can take to privilege, not just the permissions on paper. Forcepoint shows which sensitive records sit at the end of those paths, from personal data to financial records and trade secrets, and lets teams block that credential's access. Service accounts and AI agents with too much access. Machine and AI identities outnumber human users 144-to-1, according to 2026 research from the Cloud Security Alliance, and many carry permissions that haven't been reviewed since they were granted. If BeyondTrust detects risky behavior or excessive privilege associated with a service account or AI agent, teams can use Forcepoint to revoke its access to the sensitive data at risk in one step. The account keeps doing the rest of its job. Too many alerts, too little context. Instead of cross-checking two consoles, customers work from one Forcepoint dashboard that ranks each risky identity by the value of accessible data and shows why that identity was deemed risky. With a clear line of sight from identity and privilege risk to sensitive data, teams investigate faster, focus on critical vulnerabilities and remove or restrict access with targeted precision. "The strongest technology alliances bring together complementary capabilities to solve problems neither side should have to solve in isolation," said David Manks, Vice President of Global Strategic Alliances at BeyondTrust. "Forcepoint's understanding of sensitive data and BeyondTrust's identity and privilege intelligence provide two critical dimensions of risk. Bringing them together helps customers see where risky access creates meaningful exposure and take precise action to protect what matters." Availability The Forcepoint DSPM integration with BeyondTrust Identity Security Insights is available now for customers running both solutions. Customers can get started through their Forcepoint account team. Forcepoint joins BeyondTrust at Go Beyond Chicago on Oct. 8. For more information, visit https://www.forcepoint.com/partners/beyondtrust or https://www.beyondtrust.com/partners/directory/forcepoint.

Yahoo Finance
Oct 8th, 2026
Forcepoint and BeyondTrust link identity risk to data exposure for precision access control

Forcepoint and BeyondTrust have integrated their security platforms to connect identity risk detection with data exposure analysis. The partnership combines BeyondTrust's identity risk detection capabilities with Forcepoint's AI-native data discovery and classification system. When BeyondTrust identifies a compromised user, overprivileged service account, or suspicious AI agent, Forcepoint reveals which sensitive data that identity can access. Customers can then revoke that specific identity's access without affecting other users or disrupting business operations. The integration addresses a growing security challenge: machine and AI identities now outnumber human users 144-to-1, according to 2026 Cloud Security Alliance research. Many carry excessive permissions that haven't been reviewed. The solution provides a unified dashboard ranking risky identities by the value of accessible data. It's now available to customers running both platforms. The integration was unveiled at BeyondTrust's Go Beyond Chicago conference on 8 October.

TechDay
Oct 6th, 2026
BeyondTrust names Brendon Thwaites to lead APAC partners.

BeyondTrust names Brendon Thwaites to lead APAC partners. Tue, 6th Oct 2026 (Today) BeyondTrust has appointed Brendon Thwaites as Director, Partner Ecosystems, APAC, based in Sydney. He will lead execution of the company's partner strategy across Asia Pacific, helping partners build and expand BeyondTrust practices through engagement, enablement, services opportunities, joint go-to-market activity and co-selling. The appointment gives the cyber security company dedicated leadership for its partner ecosystem in the region as it adapts programmes and support to local market conditions. The role is intended to address differing customer requirements, partner models and commercial opportunities across APAC. Thwaites joins with three decades of IT industry experience spanning field sales, strategic partnerships, alliances, pre-sales and engineering. Most recently, he was Founder and Principal Consultant at ZeroQ Consulting, where he advised cyber security vendors on market development across Asia Pacific. Before that, he was Field Channel & Alliances Director at HashiCorp, where he helped shift a previously direct sales organisation to an indirect partner ecosystem across six Asia-Pacific markets. Earlier, he held channel and alliance leadership roles at Bitglass, Palo Alto Networks and F5, with responsibilities across Asia Pacific and Japan. His background reflects a career focused on partner-led routes to market for technology suppliers pursuing regional growth. BeyondTrust's partner network includes sales partners, service partners, cloud marketplaces and more than 100 technology alliance partners. Through its PartnerTrust programme, it offers training, certification, co-selling support, technical resources and services enablement for partners building identity security practices. The appointment comes as cyber security vendors place greater emphasis on indirect sales models and service-led delivery in Asia Pacific. For many suppliers, the region's mix of mature and developing markets requires local adaptation in partner recruitment, support and commercial structures. Tim Stone, Vice President, Partner Ecosystems, at BeyondTrust, said Thwaites was well suited to that regional brief. "Brendon brings a strong track record of building partner businesses that deliver real outcomes for customers and create growth for partners," Stone said. "He understands that a successful ecosystem is about much more than programmes. It's about bringing together the right capabilities, relationships and execution around what customers need. I'm delighted to welcome Brendon to BeyondTrust as we continue to strengthen our partner ecosystem across our APAC region." His role will cover both the structure of partner engagement and broader commercial coordination. He will work to make it easier for partners to build with BeyondTrust while aligning support with the needs of individual markets. That includes clearer engagement paths for resellers and other partners, stronger enablement, and a closer link between services opportunities and sales activity. It also points to a more formal regional approach to joint go-to-market planning and co-selling. Regional focus Asia Pacific remains a fragmented market for technology suppliers, with route-to-market strategies often differing widely between countries. Cyber security vendors in particular rely on distributors, resellers, systems integrators and service providers to reach enterprise and public sector customers across the region. For companies expanding partner-led models, senior regional appointments can signal an effort to standardise how programmes are applied while still allowing for local differences. Thwaites will be responsible for adapting support and programmes to the needs of individual markets rather than applying a single model across the region. BeyondTrust describes its business as privilege-centric identity security, focused on controlling and securing access rights across human, machine and artificial intelligence identities. The company says it serves more than 20,000 customers, including 75 of the Fortune 100. Thwaites said his immediate focus would be the company's channel and alliances operation in APAC. "I'm looking forward to elevating BeyondTrust's APAC channel and alliances organisation and developing programmes designed to help partners deliver industry-leading cyber resilience with solutions that help organisations discover, prioritise, govern, and protect privileged access wherever it exists," Thwaites said. "Over the next few months, I'll be working to reinforce BeyondTrust's partner-centric direction, delivering clearer engagement paths, stronger enablement, and more coordinated co-selling designed to accelerate mutual growth."

Rysha Media
Oct 6th, 2026
BeyondTrust appoints Lindsey Claypool as SVP of Global Channels and alliances.

BeyondTrust appoints Lindsey Claypool as SVP of Global Channels and alliances. 2 minutes read BeyondTrust has promoted Lindsey Claypool to Senior Vice President of Global Channels & Alliances, expanding her responsibilities to include the company's worldwide partner strategy. Claypool's appointment comes as BeyondTrust works to develop a more unified approach to its partner ecosystem across regions, programmes and go-to-market activities. The company said the strategy is intended to simplify partner engagement and establish more consistent support and routes to market. "The role of the partner is evolving," said Claypool. "Customers are navigating more identities, more interconnected technologies, and more ways for privilege to create risk across a security landscape that is becoming increasingly difficult to manage. They need partners to serve as strategic advisors, service creators, and innovators, translating technology into practical solutions and lasting security outcomes." In her new role, Claypool will oversee BeyondTrust's global partner strategy, including channel programmes, technology alliances and go-to-market priorities. The company said the approach will focus on creating clearer roles for partners throughout the customer lifecycle, from customer acquisition and implementation to expansion and ongoing services. Focus on Partner Operations BeyondTrust said its updated partner model will focus on establishing more consistent routes to market and reducing complexity in how partners work with the company. The changes are expected to include clearer use cases and engagement points, along with closer alignment between partner support, rewards and go-to-market activities. "Growth compounds when partners win, and every point of friction we remove for a partner is value returned to the customer," said Claypool. "Our goal is to create an ecosystem that is easy to understand, engage with, and grow with. One that gives partners clear ways to build with BeyondTrust, aligned support and rewards, and well-defined roles across the customer lifecycle." The leadership change comes as BeyondTrust holds a series of partner and customer events across several markets. Following Partner Summit and Go Beyond London in September, the company is holding Go Beyond Chicago and Partner Summit - Chicago from October 6 to 8, followed by partner events in Sydney and Singapore later in October. The events are focused on the company's identity security strategy, partner enablement and the development of partner-led services. Claypool's Channel Experience Claypool joined BeyondTrust four years ago to lead its Americas channel organisation. During her tenure, she worked on the company's regional partner strategy, partner-led sales initiatives and alignment between channel activities and broader go-to-market operations. Before joining BeyondTrust, Claypool held partner and channel leadership positions at Ingram Micro, F5, Xirrus and Riverbed. "Our partner ecosystem is central to how BeyondTrust will scale its impact and help more organizations secure every identity across every privilege," said Janine Seebeck, Chief Executive Officer at BeyondTrust. "Customers benefit when we combine our technology and expertise with partners that understand their industries, environments, and business priorities. Lindsey has demonstrated an ability to turn that principle into a repeatable growth model, and she has the full support of our leadership team as she brings that vision to our global ecosystem." BeyondTrust's partner network includes sales and service partners, cloud marketplaces and more than 100 technology alliance partners. Through its PartnerTrust programme, the company provides training, certification, co-selling support, technical resources and services enablement.

Ignition Technology
Sep 24th, 2026
You can't secure what you can't see: identity security lessons from BeyondTrust Partner Summit 2026.

You can't secure what you can't see: identity security lessons from BeyondTrust Partner Summit 2026. Posted by Ignition Technology September 24, 2026 Earlier this month, BeyondTrust hosted its Partner Summit London 2026 bringing together partners from across the channel to examine the trends reshaping identity security and explore how organisations can adapt to an increasingly complex digital landscape. A clear theme emerged throughout the event: identity has become the foundation of modern cybersecurity. As AI adoption accelerates and non-human identities proliferate, organisations must rethink how they establish visibility, manage privilege and maintain trust across increasingly interconnected environments. Identity has changed. Identity is no longer about just human identities, it's about machine identities, service accounts and AI agents. Identity is becoming a much broader attack surface, with 100 machine identities and AI agents now existing for every human identity. During the summit, BeyondTrust CEO Janine Seebeck highlighted that "only 19% of organisations have implemented security controls for AI agents." This statistic demonstrates that the vast majority of organisations remain exposed to risks posed by unmanaged and unaccounted-for non-human identities. It's no longer about who is privileged, it's about who could become privileged Attackers don't care where an attack starts. They only care about the path to privilege. Reading a list of privileged accounts only tells you where that privilege currently exists. Organisations should be looking ahead to where privilege can be reached from. At the summit, one example demonstrated how 200 contact-centre employees could potentially reach Domain Admin through misconfigured trust paths. It wasn't simply about employees who were privileged, as they weren't. It was about a chain of relationships that could potentially create a path to privilege. You can't protect what you can't see When it comes to protecting your organisation, you must have full oversight to understand everything that needs protecting. The go-to-market framework to help protect identities is Visibility | Intelligence | Protection. Customers can enter this framework at different areas of the cycle and be brought into the wider platform over time. The first step is understanding what identities exist, what access they have and where privilege sits. From there, organisations can identity what matters most, uncover hidden risk and understand potential paths to privilege. This evidence-led approach was a key theme throughout the summit. Rather than starting with a product, organisations can start by understanding the risks that are already present in their environment. The opportunity As identity environments become more complex, organisations need the expertise to understand and act on identity risk. This presents an opportunity for security partners to take a more advisory role, helping organisations assess their identity environments, hidden privilege and understand risks crated by AI agents and non-human identities. Want to find out more about how identity security is changing? Discover BeyondTrust's approach to identity security here.