Senior Security Researcher

About Us:

Zenity is the first application security platform designed to help enterprises secure and govern copilots and low-code development. Our SaaS platform is built from the ground up with a security-first approach centered on three pillars: Visibility, Risk Assessment, and Governance to help our customers know their business applications and copilots that are being created by all business users, outside of the purview of IT. As the founding member of the OWASP Top 10 project specifically focused on low-code/no-code development, Zenity takes a community-oriented approach to this rapidly evolving security vector. We recently completed our Series A round of investment led by Intel Capital and are continuing to create a new category to bring application security controls to the world of AI and low-code development. We are looking for creative thinkers and doers to help take us to the next level.

About the Job:

We are seeking an experienced Senior Security Researcher to join our Research department, focusing on low-code and no-code platforms as well as AI copilots and generative AI technologies. This role offers a unique opportunity to work closely with Inbar Raz, a prominent figure in the security research community known for his pioneering work and thought leadership. Inbar’s extensive expertise and innovative approach to security research will not only guide but also inspire your work, making Zenity a place where your contributions can have a significant impact on the future of application security.

Responsibilities:

• Conduct thorough research to identify security weaknesses and vulnerabilities within low-code/no-code platforms, AI copilots, and Gen AI technologies.
• Perform in-depth analysis of web and API security, identifying potential threats and developing mitigation strategies.
• Collaborate with Inbar Raz and cross-company teams to proactively address security concerns during the development lifecycle, particularly in relation to AI and low-code/no-code environments.
• Stay up-to-date with the latest industry trends, security threats, and advancements in low-code/no-code technologies, as well as AI and Gen AI, benefiting from Inbar Raz's insights and experience.
• Develop proof-of-concept exploits, provide recommendations for remediation to affected vendors, and create detections in the Zenity platform, with a focus on AI and low-code/no-code security.
• Contribute to the development of security guidelines, best practices, and standards tailored for low-code/no-code platforms and AI technologies.
• Collaborate with external security researchers and organizations, leveraging Inbar’s network, to enhance the overall security posture of the low-code/no-code and AI landscape.
• Perform publishable research and share it via blog posts, conference talks, and meet-ups, with an emphasis on AI and low-code/no-code security.
• Publish research findings and present them at conferences or industry events, showcasing your work alongside Inbar Raz to share insights and advancements with the broader security community.
  
  

• Relevant professional and/or academic education:
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field;
• Relevant military courses;
• Other relevant formal training.
• Minimum of 5 years of experience in the field of security research, with at least 3 of them with focus on cloud, web and/or API security
• Proficiency in programming languages commonly used in web development (e.g., JavaScript, Python, Java).
• Experience working with cloud environments and understanding of cloud security best practices.
• Strong knowledge of security principles, protocols, and best practices.
• Excellent problem-solving skills and ability to think creatively
• Self-driven and able to work independently, with a proactive attitude towards continuous learning and self-study (others will need to corroborate this 🙂)