דרושים Applied Researcher

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

You will create statistics-based classification algorithms detecting everything from new malware through process behavior and attackers operating in enterprise-scale networks using data from multiple Windows endpoints; from analyzing attack patterns, finding statistical anomalies, and validating that you detect real attacks and APTs on real customer data.

Your Impact

• Research new methods to detect various attack techniques by utilizing enormous amounts and varied types of data
• Use and develop statistical algorithms and techniques to create and improve our analytics detection capabilities
• Take an active role in our collection modules by improving the ones that are already available and investigating new collection modules that will improve the quality of our detections
• Simulate attacks in the lab and conduct a deep analysis of the behavior
• Be part of a diverse research group, improving our research processes and leading us to be a better team, creating a better product
• Stay up to date with APTs, attacker methodologies, and TTPs

Your Experience

• In-depth knowledge of the inner-workings of operating systems (Especially Windows)
• Intimate knowledge and understanding of attack methods and techniques over endpoints and enterprise
• Vast experience and interest in malware research or development
• Python software development experience
• Comfortable conducting research and gathering insights by querying large databases
• Ability to drive and own projects
• Independent and team player, critical thinker

Advantages:

• Experience in machine learning or data analysis
• Reverse engineering knowledge and experience
• Advanced knowledge of Microsoft AD infrastructure
• Exploitation knowledge and experience

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Your Career

You will be part of a strong security research and data science team who solve highly complex security challenges using disruptive technologies, ML algorithms and a lot of data.

As part of that, you will take part in the design and development of new groundbreaking AI security solutions which make a direct impact on many customers.

Your Impact

• Transform Data into Defense: Take the lead in creating high-fidelity security incidents from a massive stream of alerts generated by our industry-leading advanced security solutions
• Innovate with AI : Actively participate in cutting-edge research projects focused on creating novel prevention content at scale using state-of-the-art AI and Large Language Models (LLMs)
• Drive Security Efficacy: Analyze complex threat data to identify attacker patterns, develop new prevention methodologies, and enhance automated flows to rapidly protect Cortex platform customers
• Collaborate and Lead: Work side-by-side with top-tier data scientists, engineers, and product managers to translate research ideas into tangible, customer-facing security protections

Your Experience

• 8+ years of hands-on experience in the cybersecurity research field
• Proven expertise in detecting threats by analyzing and correlating security data across hybrid environments, from on-premise tools (EDR, SIEM, NDR) to major cloud platforms (AWS, GCP, Azure)
• Proven ability to investigate and contextualize disparate security alerts to construct a full attack narrative
• Strong proficiency in a scripting language, with Python being highly preferred for data analysis and prototyping
• Hands-on experience with query languages and databases (e.g., SQL , KQL)
• A scientific, data-driven approach to problem-solving, with experience running research projects from ideation to production
• Excellent communication skills, with the ability to clearly articulate complex technical concepts and research findings to diverse audiences

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Career

We are looking for a Principal Linux Security Researcher for our Tel Aviv R&D center, to work on cortex-xdr for linux, which provides runtime protection to servers and cloud workloads.
You will be part of a team that is in charge of researching, developing and improving Anti-Exploit capabilities, Anti-malware capabilities. The position includes researching OS internals, exploits, malware, delving into cloud security, and finding ways to mitigate new attack vectors.

Your Impact

• Research, develop, and improve anti-exploitation mitigations and anti-malware modules - ranging from low-level mitigations up to tackling application-level security vulnerabilities
• Work on the design, evaluation, and implementation of new security technologies
• Research Linux OS internals, kernel, application codebases, vulnerabilities and exploits (both for internal usage and for PR)
• Analyze customer issues to help with detecting and preventing malicious activities in our customers networks

Your Experience

• In-depth knowledge of some operating system internals is a must - Knowledge of Linux is an advantage
• Development experience in C/C++/Rust is a must, 2 years at least
• Experience in reverse engineering - both static and dynamic, is a must (x86/64 architectures), 3 years at least
• Development knowledge in some scripting languages is a must - Experience with Python is an advantage
• Exploitation experience is an advantage (either application-level security or memory corruption)
• Experience with Kubernetes and cloud workloads is an advantage
• Ability to work independently and as a part of a team
• Strong attention to detail
• Ability to take initiative

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

Being the cybersecurity partner of choice, protecting our digital way of life.

Your Impact

• Conduct ongoing research to identify and develop new detection techniques for both agent-based and agentless cloud technologies
• Stay ahead of Advanced Threats, attacker methodologies, and Tactics, Techniques, and Procedures (TTPs) to ensure our solutions remain proactive and effective against emerging threats
• Simulate real-world attack scenarios in lab settings, performing in-depth analysis of adversarial behaviors and their implications for cloud security
• Foster a collaborative atmosphere within an experienced, diverse, and supportive research team, driving forward new and innovative ideas in cloud detection and response

Your Experience

• 3+ years of experience in leading security research teams or projects, with a proven track record in managing complex security research initiatives, particularly in cloud environments
• At least 5 years of hands-on experience in cybersecurity research, with extensive knowledge of cloud security principles, attack vectors, and defense strategies
• Strong proficiency in programming (e.g., Python) and experience with cloud platforms (e.g., AWS, Azure, Google Cloud) to develop detection and analysis tools
• Data Analysis - Proficient in SQL or similar query languages for analyzing large datasets and identifying attack patterns specific to cloud services
• Communication - Excellent verbal and written communication skills, with the ability to present complex research findings, processes, and concepts clearly to both technical and non-technical audiences
• A demonstrated history of developing novel security solutions or contributing innovative ideas to the cybersecurity community, especially in the realm of cloud detection and response
• Bonus Points
  • Experience with both agent-based and agentless security technologies, including EDR, XDR, or similar tools for cloud environments
  • Prior work in threat intelligence, APT research, or incident response focused on cloud services

We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.

All your information will be kept confidential according to EEO guidelines.

• Currently pursuing a Bachelor’s, Master’s, or PhD degree in Computer Science, Linguistics, Statistics, Biostatistics, Applied Mathematics, Operations Research, Economics, or Natural Sciences, or equivalent practical experience.
• Experience in one area of computer science (e.g., Natural Language Understanding, Human Computer Interactions, Generative Media, Computer Vision, Machine Learning, Deep Learning, Algorithmic Foundations of Optimization, Quantum Information Science, Data Science, Software Engineering, or similar areas).
  

• Currently enrolled in a full-time degree program in EMEA and returning to the program after completion of the internship.
  
• Experience as a researcher, including internships, full-time, or at a lab.
  
• Experience contributing to research communities or efforts, including publishing papers in major conferences or journals.
  
• Experience with one or more general purpose programming languages (e.g., C/C++, Java, MATLAB, Go, Python, etc.).
  

• PhD in Electrical and Electronics Engineering, or equivalent practical experience.
• 2 years of experience with software development in C++ programming language.
• 1 years of experience with data structures or algorithms.

• Experience in performance modeling, performance analysis, and workload characterization.
• Experience applying machine learning techniques and inference usage models on hardware.
• Expertise in CPU architecture disciplines such as branch prediction, prefetching, value prediction, and caching policies.