דרושים Competitive Researcher ב-Cyberark

As a Competitive Researcher, your role will be to know CyberArk’s products and be the leading expert on the other competing products in the market. The role involves in-depth technological research of the features and properties of competing products, comparing them to CyberArk products, and identifying the advantages of CyberArk products. In addition, you will be responsible for managing the research budget and lead the procurement of external products.
You will collaborate with various teams within CyberArk to provide insights and recommendations based on your research. Your findings will play a crucial role in shaping the future direction of CyberArk's product development and marketing strategies.
The role is technological, interesting, educational, and has a significant impact on the company and its products and sales.
Everything in accordance with legal and ethical compliance guidelines.

• Manage the budget of the competitive research lab services, including leading the procurement of external products.
• Design, build and maintain diverse research environments that are up to date and fully working.
• Conduct technological research on competing products in the cyber defense world.
• Stay up to date with the latest trends and developments in the cybersecurity industry.

• Collaborate with various teams within CyberArk to provide insights and recommendations based on your research, including presenting insights to executive leadership.

What You Need to Succeed

• Previous experience in competitive \ technological \ cyber research or similar fields.
• Manage the research budget and lead the procurement of external products and services.
• Be able to manage the IT aspect of software products, including network installation, configuration and deployments.
• Strong technical knowledge in a wide range of technologies, such as AWS, Azure, VMware, SSO, MFA, browsers, endpoint management, etc.
• Excellent written and verbal English communication skills.
• Highly motivated to succeed with a proactive approach, who is eager to make a significant impact on the company.

How You’ll Stand Out

• Proven experience in managing budget and procurement processes.
• Proven experience in competitive intelligence research in the Cyber Security or Identity fields.

As a Malware Researcher, you will fight the bad guys by researching the most up-to-date malware and exploits to understand the evolving attack surface and report your finding.

• Publishing your finding to the research community
• Improving CyberArk innovation and R&D products
• Helping the Opensource community by posting and updating new tools

• 3+ years’ experience in malware research.
• Mastery of reverse engineering tools and practices.
• Understanding the malware landscape - threat actors, types of malwares
• Previous publications of research articles.
• Development skills (Python, C/C++)

As a Senior PT Researcher in CyberArk Labs, you will be the go-to-guy to find traditional and creative ways to break all kinds of products.

• Be part of CyberArk Labs, and elite unit of security researchers.
• Perform advanced and top-class penetration testing research projects on CYBR products.
• Make sure CYBR products are in a secure state by leading vulnerability research projects focused internally on the company products.
• Present findings and work closely with software architects and development teams to ensure products are developed according to the best security standards.
• Be a security research expert and stay up to date with new vulnerability research techniques that are being developed and published worldwide.
• Through the year, include research work, and aim to discover innovative and creative security findings in CYBR products.

What you need to succeed:

• At least 5 years of experience in hands-on security research
• Hands-on experience in penetration testing cloud, web, and mobile applications.
• Experience with code security review - the ability to read code and identify security issues.
• Experience with open source and commercial PT tools for scanning and detecting weaknesses.
• Deep understanding of security principles and demonstrated experience in writing relevant scripts and code.
• Ability to work in a dynamic, fast-moving, and growing environment.
• Good self-learner and out-of-the-box thinker.
• Fluent in English and Hebrew.

How will you stand out from the crowd:

• Offensive Security Certifications such as OSCP, AWAE, OSCE.
• Bachelor's degree in computer science or related field.
• IDF service in an elite technology unit.
• Examples of thought leadership activities in the security space (e.g. blog posts or conference talks).
• Demonstrated security research activities (e.g. participation in bug bounties or getting credit for reporting CVEs).

What will you do:

- Digital Forensics and Incident Response (DFIR):

• Perform digital forensics analysis on various types of evidence, such as disk, memory, network, and cloud artifacts (AWS – advantage).
• Support incident response efforts by providing technical expertise, containment, eradication, and recovery guidance.
• Maintain and operate forensic tools and platforms, ensuring they are up-to-date and reliable.
• Document and report on forensic findings and recommendations, following the established procedures and standards.

- Threat Hunting:

• Proactively hunt for malicious activity and indicators of compromise across CyberArk's network, endpoints, and cloud environments using various data sources and analytical techniques.
• Develop and refine custom threat-hunting hypotheses, queries, and dashboards based on the latest threat intelligence and trends.
• Collaborate with the SOC team to validate, escalate, and respond to identified threats.

- Research and Development:

• Research emerging threats, attack vectors, threat actors, ATPs, security technologies and CyberArk products and share insights and best practices with the team and the broader security community.
• Develop and improve tools, scripts, correlation alerts and automation to enhance the SOC team's DFIR and threat-hunting capabilities.

What you need to succeed:

• Proven (3+ years) experience in digital forensics and incident response, preferably in a tech company or a security consulting firm.
• Hands-on experience with industry standard forensic tools and platforms.
• Hands-on experience with threat hunting tools, query languages and platforms, such as ELK, Splunk, QRadar, KQL, SQL etc.
• Strong knowledge of network protocols, operating systems, malware analysis, and cloud security.
• Ability to automate tasks using a scripting language such as Python & JS.

• Excellent communication and interpersonal skills.
• Excellent proficiency in English, both written and verbal, is a must.
• Curious and creative mindset, with a passion for learning and solving complex problems.
• Ability to work independently and collaboratively in a fast-paced, dynamic environment and with a multi-region team.

How will you stand out from the crowd:

• GCFE, GCFA, GNFA, GCTI, OSCP, or equivalent.

As a Competitive Researcher, your role will be to know CyberArk’s products and be the leading expert on the other competing products in the market. The role involves in-depth technological research of the features and properties of competing products, comparing them to CyberArk products, and identifying the advantages of CyberArk products.
Everything in accordance with legal and ethical compliance guidelines.
You will also be responsible for staying up to date with the latest trends and developments in the cybersecurity industry. Additionally, you will collaborate with various teams within CyberArk to provide insights and recommendations based on your research. Your findings will play a crucial role in shaping the future direction of CyberArk's product development and marketing strategies.
There are several interesting aspects of the role that will be detailed personally to suitable candidates only.
The role is technological, interesting, educational, and has a significant impact on the company and its products and sales.

• Design, build and maintain diverse research environments that are up to date and fully working.
• Lead infrastructure-related procurement processes and collaborate with vendors and internal stakeholders.
• Conduct technological research on competing products in the cyber defense world.
• Perform technical research on the products features and available security detections.
• Stay up to date with the latest trends and developments in the cybersecurity industry.
• Monitor competitor activities and strategies to anticipate market shifts.
• Collaborate with various teams within CyberArk to provide insights and recommendations based on your research, including presenting insights to executive leadership.

What You Need to Succeed

• Previous experience in competitive \ technological \ cyber research or similar field.
• Be able to manage the IT aspect of software products, including network installation, configuration and deployments.
• Strong technical knowledge in a wide range of technologies, such as AWS, Azure, VMware, SSO, MFA, browsers, endpoint management, etc.
• Know attacking tools and attacker techniques and know the possible defenses against each of them, including simulating attacks.
• Deep understanding of security products and the cyber market.
• High analytical skills and ability to draw data-driven conclusions.
• Ability to work independently and as part of a team.
• Excellent written and verbal English communication skills.
• Highly motivated to succeed with a proactive approach, who is eager to make a significant impact on the company.

How You’ll Stand Out

• Proven experience in competitive intelligence research in the Cyber Security or Identity fields.
• Proven experience in Security Research with vast technical knowledge.
• Proven IT experience, with knowledge in designing, building, and maintaining diverse technological environments, including software installation, configuration and deployment.