Senior Security Researcher

About Us:

Zenity is the first and only holistic platform built to secure and govern AI Agents from buildtime to runtime. We help organizations defend against security threats, meet compliance, and drive business productivity. Trusted by many of the world’s F500 companies, Zenity provides centralized visibility, vulnerability assessments, and governance by continuously scanning business-led development environments. We recently raised $38 million in a Series B funding, solidifying our position as a leader in the industry and enabling us to accelerate our mission of securing AI Agents everywhere.

About the Job

We are seeking an experienced Senior Security Researcher to join our Research department, focusing on low-code/no-code platforms, AI copilots, and generative AI technologies. This role offers a unique opportunity to lead cutting-edge security research and help shape the future of application security in these rapidly evolving fields.

Responsibilities

• Conduct thorough research to identify security weaknesses and vulnerabilities within low-code/no-code platforms, AI copilots, and Gen AI technologies.
• Perform in-depth analysis of web and API security, identifying potential threats and developing mitigation strategies.
• Work closely with cross-functional teams to address security concerns throughout the development lifecycle, particularly in AI and low-code/no-code environments.
• Stay up-to-date with the latest industry trends, security threats, and advancements in low-code/no-code and AI technologies.
• Develop proof-of-concept exploits, provide recommendations for remediation to affected vendors, and contribute to security detections in the Zenity platform.
• Contribute to the development of security guidelines, best practices, and standards tailored for low-code/no-code platforms and AI security.
• Collaborate with external security researchers and organizations to enhance the security posture of the low-code/no-code and AI landscape.
• Conduct publishable research, sharing insights through blog posts, conference talks, and meet-ups to advance the broader security community.

Qualifications:

• Relevant professional and/or academic education:
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field;
• Relevant military courses;
• Other relevant formal training.
• Minimum of 5 years of experience in the field of security research, with at least 3 of them with focus on cloud, web and/or API security
• Proficiency in programming languages commonly used in web development (e.g., JavaScript, Python, Java).
• Experience working with cloud environments and understanding of cloud security best practices.
• Strong knowledge of security principles, protocols, and best practices.
• Excellent problem-solving skills and ability to think creatively
• Self-driven and able to work independently, with a proactive attitude towards continuous learning and self-study