דרושים Ml Security Researcher ב-Fortinet

ollaborate closely with our research and development teams to enhance our FortiEDR Windows endpoint solution, ensuring that it offers robust protection against emerging cyber threats while running the Windows low-level security research team and the group of talented researchers who are part of it. This includes conducting in-depth investigations of real-world attacks that specifically target Windows systems; developing comprehensive proof of concepts (POCs) for a variety of exploits and malware; creating POCs for effective defense mechanisms against these threats; and you will be responsible for meticulously recreating and analyzing security issues and bugs to fortify our defense systems and ensure a proactive approach to cybersecurity.

Requirements:

• 2+ years of research or development team management
• 5+ years of low-level security research experience (malware research and/or exploit development)
• Creative thinker, team player, and a people person
• Extensive in-depth knowledge of Windows OS internals, both user and kernel
• Good understanding of attack methods, tools, and techniques
• Experience with C/C++ (Win32) in Windows
• Experience with Python
• Experience in reverse engineering – static, dynamic, and assembly
• Familiarity with network protocols
• Proven experience in running end-to-end research POCs from ideas to customer solutions, including the design, execution, analysis, and conclusions of your research
• Experience in running projects and working in collaboration with other teams
• Experience with EDR/XDR/AV product RND – advantage
• Knowledge of Linux or macOS internals – advantage
• Familiarity with Elastic Stack or databases – an advantage

Responsibilities:

• Product Strategy and Roadmap:
  • Develop and maintain a comprehensive product roadmap aligned with market trends, customer needs, and business objectives.
  • Conduct thorough market research and competitive analysis to identify opportunities and inform product strategy.
  • Define and prioritize product features, enhancements, and new product initiatives.
• Product Development and Execution:
  • Collaborate closely with engineering teams to translate product requirements into detailed specifications and ensure timely delivery.
  • Define and track KPIs to measure product success and identify areas for improvement.
• Customer and Market Engagement:
  • Gather and analyze customer feedback to understand their needs and pain points.
  • Present product roadmaps and updates to internal and external stakeholders.
  • Work with sales and marketing teams to develop effective go-to-market strategies and product positioning.
• Cross-Functional Collaboration:
  • Work closely with sales, marketing, support, and engineering teams to ensure alignment and effective execution.
  • Act as a product evangelist, providing training and support to internal teams and partners.
  • Manage relationships with key technology partners and vendors.

Qualifications:

• 7-10 years of experience in product management, with a strong focus on email security.
• Proven track record of successfully launching and managing enterprise-grade email security products.
• Deep understanding of email security technologies, protocols, and threat landscape (e.g., anti-phishing, anti-malware, DLP, authentication).
• Strong analytical and problem-solving skills, with the ability to translate complex technical concepts into clear and concise⁴requirements.
• Excellent communication and presentation skills, with the ability to influence and persuade stakeholders at all levels.
• Experience working in an agile development environment.
• Bachelor's degree in computer science, engineering, or a related field. Master's degree preferred.
• Experience with cloud based security solutions.
• Experience in working with AI/ML driven security products
• Desired Skills and Experience:
• Experience with cloud-based email security solutions (e.g., Microsoft 365 security, Google Workspace security).
• Knowledge of security compliance standards and regulations (e.g., GDPR, HIPAA, SOC II).
• Experience with threat intelligence platforms and security information and event management (SIEM) systems.
• Experience with API security.