Назад
Company hidden
3 дня назад

Senior Security Researcher (Cloud Security)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Israel
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Researcher (Cloud Security): Defining vulnerability management across a cloud security platform with an accent on exploitability, risk context, remediation, and AI-driven analysis. Focus on researching vulnerabilities across cloud workloads, services, and code, mapping findings to effective fixes, and shaping product capabilities for remediation at scale.

Location: Onsite in Tel Aviv, Israel

Company

hirify.global is an exposure management and cybersecurity company whose solutions help organizations understand and reduce cyber risk.

What you will do

  • Define vulnerability management across hirify.global's cloud security platform, including the signals and data needed to validate exploitability and guide remediation.
  • Research how security context affects real-world risk, prioritization, and remediation across cloud environments and code.
  • Lead remediation research by mapping cloud and code vulnerabilities to fixes and advancing AI-supported remediation workflows.
  • Collaborate with engineering and product teams to build capabilities that connect detection with resolution.
  • Publish and present research through technical blogs, reports, and leading industry conferences.

Requirements

  • 5+ years of hands-on experience in security research.
  • Experience with vulnerability management, including triage, prioritization, remediation, and evaluating the gap between CVSS and actual impact.
  • Strong technical background in AWS, Azure, and GCP, including how vulnerabilities manifest across workloads, services, and code.
  • Familiarity with application security tooling.
  • Curiosity, self-direction, and comfort working in ambiguous, fast-evolving problem spaces.
  • Strong written and verbal communication skills, with the ability to clearly explain complex technical findings.

Nice to have

  • Experience with exploit research, full-chain attack analysis, or CVE-to-fix resolution across complex dependency chains.
  • Experience using AI and agentic workflows for security research and analysis.
  • Background in application security, secure code review, or supply chain security.
  • Hands-on experience with SBOM tooling, container scanning, or software composition analysis pipelines.
  • Published research, conference talks, or technical blog posts.
  • Experience working with product teams and delivering customer value through a product.

Culture & Benefits

  • Collaborative environment focused on building and innovating cybersecurity solutions.
  • Culture centered on belonging, respect, excellence, and shared results.
  • Support and resources for technically meaningful work.
  • Equal employment opportunity and reasonable accommodation support during the recruiting process.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →