Vulnerability Researcher

Imperva is a multi-billion dollar cybersecurity company, that protects the world’s largest organizations from cyber-attacks. We work in a Hybrid Model from home and from the office (Rehovot) and We have been recognized as one of the Best 50 high-tech companies to work for in Israel 202 3 by Dun & Bradstreet! https://www.duns100.co.il/Imperva_%D7%90%D7%99%D7%9E%D7%A4%D7%A8%D7%91%D7%94

We're looking fora Talented Security Researcher for our Threat Research Group offensive team, the “RED TEAM”.

Our team consists of elite researchers, analysts, and data scientists dedicated to advancing cybersecurity. We specialize in investigating and mitigating application, DDoS, database, and cloud-based attacks. Our work involves developing innovative algorithms for new security products, driving innovation forward, and establishing thought leadership in the cybersecurity field.

What makes this position unique?

A great opportunity to be part of a unique team with the mission of making the attackers job harder by continuously finding and responsibly disclosing vulnerabilities in some of the largest companies in the world. Take a look at our recent findings to learn more.

What You Will Contribute

• Conducting in-depth research into current and emerging security threats and vulnerabilities.
• Actively participating in the cybersecurity community by finding and responsibly disclosing vulnerabilities in major companies.
• Thought Leadership: Share your research and findings with the community by writing blog posts and presenting your work at leading hacking and security conferences worldwide.
• Collaborating with a team of elite researchers, analysts, and data scientists to drive forward Imperva's mission of protecting data and all paths to it.
  
  

• B.S. or M.S. in Computer Science or related field, or equivalent experience.
• Experience with exploiting common security vulnerabilities.
• Ambitious and results-oriented, with excellent communication skills.
• Proven track record of finding web application and or cloud infrastructure vulnerabilities.
• 3+ years of work experience writing code in one or more of the following programming languages: JavaScript, Python, PHP, Java, Ruby, C/C++, Go, or Rust (or a similar language).
  
  

• Contributions to the security community (public research, bug bounty, blogging, presentations, etc.)
• Great presentation skills
• Experience in developing automation tools for vulnerability discovery, including fuzzing and related techniques – an advantage
• Experience in conducting code reviews for vulnerabilities in large codebases – an advantage
• Reported valid vulnerabilities to Google, Meta, Microsoft, or a similarly sized company – an advantage