ΠΎΠ±Π½ΠΎΠ²Π»Π΅Π½ΠΎ 7 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄
Application Security Researcher (AI)
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
Π’Π΅ΠΊΡΡ:
TL;DR
Application Security Researcher (AI): Validating cloud networking and security services and environments through application security research, penetration testing, and architecture, design, and code reviews with an accent on AI and agentic systems, secure coding, and vulnerability discovery. Focus on evaluating AI security, bypassing enterprise security controls, finding weaknesses in open-source and third-party software, and mitigating risks across AWS, microservices, Docker, and Kubernetes.
Location: Tel Aviv District, Israel
Company
builds a cloud-delivered platform that converges enterprise networking and security into a centralized SASE service.
What you will do
- Validate services and environments against high security standards and continuously improve security controls.
- Review system architecture, designs, and code to identify and remediate security weaknesses.
- Support developers with secure coding practices and security risk prevention.
- Research emerging threats, security best practices, and contribute to the security research blog.
- Evaluate the security of AI and agentic systems and apply AI-assisted tools to security research.
- Collaborate with R&D and Product teams to solve complex security problems.
Requirements
- At least 3 years of experience in application security or vulnerability research.
- Hands-on penetration testing experience across web, mobile, infrastructure, and thick client applications.
- Experience bypassing RBI, EDR, and DLP security controls.
- Programming skills, preferably in Java, Go, or C.
- Ability to identify and fix security flaws in open-source libraries and third-party software, with knowledge of supply chain attacks.
- Understanding of network security, encryption protocols, microservices, Docker, Kubernetes, AI security risks, and testing approaches.
Nice to have
- Experience with AWS cloud attacks and mitigations.
- Experience using SAST and DAST tools.
- Agile team experience and cross-functional collaboration.
- OSCP, CRTP, OSWE, or similar security certifications.
- Security project leadership, security blogging, CVE research, bug bounty, or a BSc in Computer Science.
Culture & Benefits
- Work closely with R&D and Product teams.
- Operate in a fast-paced environment focused on cloud networking and security.
- Share security knowledge through research and technical writing.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β