Threat Researcher

Minimum qualifications

• 5+ years of hands-on experience in security research, red-teaming, penetration testing, incident response, or vulnerability research.
• Strong understanding of network and application security, including core networking protocols (TCP/IP, DNS, TLS), web technologies, modern APIs, and real-world application- and network-layer exploitation techniques (e.g., OWASP API Security Top 10).
• Strong scripting and automation skills (using Python, Bash, or equivalent).
• Hands-on experience developing, customizing, using, or conducting research supporting vulnerability scanners (DAST / SAST / Network / Host scanners), writing detection rules, or building automated vulnerability and exploitability validation tools.
• Strong sense of ownership and the ability to independently lead projects from research to delivery.
• Strong writing and presentation skills in both English and Hebrew.

Preferred qualifications

• Experience with developing or researching cloud environments (AWS, Azure, or GCP).
• Familiarity with security aspects of Kubernetes, containers, and/or CI/CD.
• Familiarity with AI-assisted development tools such as Claude Code or similar.
• Familiar with network and application scanning tools (Burp Suite, nmap, Metasploit, Nuclei, or similar).
• Published security research, exploits/PoCs, or contributed to open-source security tooling.

About the job

As a Threat Researcher in Exposure & Risk Detection, you will drive research projects end-to-end to identify emerging threats, CVEs, and misconfigurations, assessing their real-world exploitability and customer impact. In this role, you will investigate cloud services, frameworks, and commonly deployed technologies to uncover new attack surfaces, and build automations to validate, benchmark, and monitor AI-driven detection capabilities at scale. You will collaborate closely with Product and R&D teams to transform research findings and attack methodologies into impactful product capabilities, directly shaping how our customers stay secure.

Check out some of our recent research:

• The Red Agent POV: How it Reasoned its Way to SSRF
• Under the Radar: Exploring Spring Boot Actuator Misconfigurations
• Beyond CVEs: The Exploitation of Everyday Misconfigurations
• React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

Responsibilities

• Research emerging threats, CVEs, and misconfigurations to assess real-world exploitability and customer impact.
• Design, build, and test detection rules and scanning logic for exposed and vulnerable assets.
• Build automations to validate, benchmark, and monitor AI-driven detection capabilities at scale.
• Investigate cloud services, frameworks, and commonly deployed technologies to uncover new attack surfaces.
• Analyze large-scale scan results to identify and prioritize meaningful risks.
  
• Drive research projects end-to-end, from initial idea to production-ready detection.
  
• Collaborate closely with Product and R&D teams to transform research findings and attack methodologies into impactful product capabilities.