Security Researcher

One of the most compelling cybersecurity startups in the industry, pioneering a paradigm shift in cloud security orchestration.

Challenging traditional reactive methodologies, the company develops an AI-driven Cloud Security Enforcement platform engineered to proactively eliminate security risks and infrastructure misconfigurations before they ever reach production environments.

Backed by tens of millions of dollars in venture funding from premier cyber investors and tier-one funds, the company’s platform is already deployed across major global enterprises.

The company maintains an elite R&D nucleus of several dozen professionals, including veteran military intelligence researchers and defense award recipients.

Located in Tel Aviv within short walking distance of the train station.

Position Overview-

• Senior Cloud Security Researcher joining the core security research squad to drive advanced vulnerability and configuration research focused on pre-production cloud environments.
• Leading hands-on offensive and defensive research into cloud attack vectors, Identity and Access Management (IAM) bypasses, and complex multi-cloud misconfigurations.
• Translating deep vulnerability insights and threat-modeling research into automated enforcement features and defensive mechanisms embedded directly into the product.
• Analyzing modern cloud architectures, infrastructure-as-code (IaC), and continuous integration pipelines to map out predictive threat landscapes.
• Core Stack & Ecosystem Cloud Security Research, Offensive Security, Vulnerability Research, AWS, GCP, Azure, IAM Security, Cloud Penetration Testing, AppSec, DevSecOps, and Threat Modeling.

Requirements-

• 3+ years of proven professional experience as a Security Researcher (focused on core vulnerability/threat research rather than analytical or monitoring functions) – Mandatory
• Deep, architectural domain expertise in public cloud infrastructure (AWS, GCP, or Azure) – Mandatory
• Strong technical background rooted in offensive security, penetration testing (PT), application security (AppSec), or DevSecOps security layers – Mandatory
• Deep technical comprehension of cloud-native access controls, IAM frameworks, security configurations, and common cloud deployment risks – Mandatory
• Proactive, research-driven mindset with the ability to bridge theoretical vulnerabilities with practical product engineering solutions – Mandatory