Senior Security Researcher

Description:

We are looking for an exceptional Security Researcher to join Aqua’s world-class security research organization. Looking for an experienced researcher in the cybersecurity world with depth, and excellence in cloud-native security research. 

As a Security Researcher, you will work on deep technical research on several areas – working with other researchers, and transforming advanced offensive insights into scalable defensive capabilities. 

What You Will Do 

• Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems, including Kubernetes, containers, and serverless environments. 
• Reverse engineer Linux malware families to extract behavioral patterns, execution flows, and persistence mechanisms. 
• Study real-world threat actor techniques and translate findings into actionable detection, prevention, and hardening strategies. 
• Design and prototype advanced detection logic and observability mechanisms, including kernel- and runtime-level approaches (e.g., eBPF). 
• Influence Aqua’s security strategy by turning research insights into capabilities that protect large-scale production environments. 
• Collaborate closely with engineering and product teams to ensure research outcomes are impactful and scalable. 

• 4+ years of experience in security research with a strong focus on Linux-based systems. 
• B.Sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background. 
• Deep, practical understanding of Linux internals (processes, syscalls, memory, networking, filesystems). 
• Strong experience with malware analysis and reverse engineering in Linux environments. 
• Proficiency in C and Python for low-level research, tooling, and prototyping. 
• Proven ability to analyze attacker behavior and design corresponding detection or mitigation strategies. 
• Strong familiarity with cloud-native technologies, including containers, Kubernetes, and container runtimes. 
• Excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.