Vulnerability Researcher

Location: Tel Aviv, Israel; on-site

Company

hirify.global is building an AI-native Identity Operating System for enterprise identity and access management, combining AI connectors, a live identity graph, and AI agents for identity lifecycle governance.

What you will do

• Research flawed assumptions, implementation gaps, novel vulnerability classes, and exploitation techniques in modern systems.
• Reverse-engineer systems, protocols, and architectures to understand their implementation-level behavior.
• Develop hypotheses into working proof-of-concept exploits that demonstrate real-world risk.
• Own research threads end-to-end, from exploration and experimentation through responsible disclosure or publication.
• Connect relevant findings to hirify.global’s understanding of identity attack surfaces across human and non-human identities.
• Advance the security community through original research, CVEs, disclosures, and technical thought leadership.

Requirements

• 6+ years of hands-on experience in vulnerability research, reverse engineering, or offensive security.
• Proven ability to find non-trivial flaws and understand the underlying systems, protocols, and architectures.
• First-principles approach focused on actual system behavior rather than documentation or intended design.
• Ability to identify overlooked assumptions, untested edge cases, and implementation failure modes.
• Strong hands-on expertise turning research and theories into working exploit chains and proof-of-concept demonstrations.
• Track record of significant original discoveries, such as published CVEs, novel vulnerability classes, or new exploitation techniques.

Nice to have

• Original research presented at Black Hat, DEF CON, OffensiveCon, Hexacon, or a comparable security conference.
• Significant CVEs rated High or Critical by CVSS.

Culture & Benefits

• Freedom to pursue research directions wherever the evidence leads.
• Access to tools and resources supporting deep technical investigation.
• Opportunities to publish research and build technical authority in the security community.
• Research can contribute directly to hirify.global’s platform or stand as independent original discovery.