Staff Security Researcher (Cloud & Kubernetes)

TL;DR

Staff Security Researcher (Cloud & Kubernetes): Developing detection and response capabilities for hybrid cloud and Kubernetes environments with an accent on uncovering novel attack techniques and behavioral analysis. Focus on simulating real-world attacks, prioritizing detection use cases, and staying ahead of evolving APT campaigns.

Location: Onsite in Tel Aviv, Israel. No immigration sponsorship provided.

Company

A global leader in cybersecurity dedicated to protecting the digital way of life through cutting-edge technology and AI-driven innovation.

What you will do

• Drive research initiatives to uncover novel techniques for detecting and responding to sophisticated attacks in hybrid and cloud-native environments.
• Define and prioritize detection use cases, datasets, and analytic approaches combining runtime visibility and posture management.
• Monitor and analyze attacker methodologies, APT campaigns, and TTPs to ensure detection capabilities remain effective.
• Simulate real-world attacks and perform deep behavioral analysis to validate detection content.
• Collaborate with engineering, product management, and go-to-market teams to deliver impactful security solutions.
• Contribute to the security community through blogs, conference talks, and professional publications.

Requirements

• 5+ years of experience in security research with a track record of impactful projects.
• Deep expertise in cloud-native security, specifically Kubernetes, containers, major cloud providers (AWS, Azure, GCP, OCI), or Linux internals.
• Experience with detection and response products such as XDR, EDR, or cloud workload protection platforms.
• Proficiency in hands-on coding and scripting, particularly in Python.
• Excellent communication skills for articulating complex research findings.
• Must have valid work authorization for Israel; the company will not sponsor work visas for this position.

Nice to have

• Experience working with large-scale data pipelines and analytics (e.g., GCP BigQuery, Dataflow).
• Familiarity with Kubernetes threat modeling frameworks, such as MITRE ATT&CK for Containers.

Culture & Benefits

• Emphasis on in-person collaboration with most teams working from the office full-time, offering flexibility when needed.
• Dynamic environment acting as a startup-level product within a large-scale security corporation.
• Culture based on values of Disruption, Collaboration, Execution, Integrity, and Inclusion.
• Commitment to diversity and equal opportunity employment.