Security Researcher

About Us and the Role
We are a cutting-edge cybersecurity company that combines powerful scanning technologies with expert services. At OP Innovate, security research isn’t a support function - it’s at the core of how we build, think, and deliver value to help businesses stay secure through modern, practical, and innovative solutions. This role sits right at that intersection of advanced hands-on research, combined with ownership over how our work shows up in the real world.
We’re growing our research team and looking for a super talented Security Researcher! In this role, you will be responsible for identifying and analyzing security vulnerabilities across modern applications, cloud infrastructures, and mobile platforms. You will act as both an offensive operator and a defensive advisor. In this dual capacity, you will proactively exploit complex system weaknesses to validate real-world risk while simultaneously collaborating with customers and development teams.

Requirements:

Lead and drive end-to-end security research projects across web applications, API, mobile (iOS/Android), and cloud environments (AWS, Azure, GCP) - from initial scoping through research, exploitation and final delivery
Conduct hands-on penetration testing and deep vulnerability research, digging into complex edge cases, validating findings with custom Proof-of-Concepts (PoCs), and setting the technical direction across engagements
Perform manual and static source code reviews across modern backends and microservices to identify subtle logic flaws, authorization bypasses, and data exposure vulnerabilities
Bridge offensive findings with defensive strategy by advising engineering teams and customers on secure coding guidelines, architecture hardening, and remediation
Translate technical findings into clear, actionable insights, helping clients understand risk, impact, and next steps without losing the technical depth
Serve as a trusted advisor by presenting findings, leading technical readout discussions, and representing the team’s work clearly to both technical leads and executive stakeholders

Skills and Experience:

3+ years of hands-on experience in security research from either a product or services cybersecurity company
Deep, practical experience in Application Security (both Web and Mobile), pentesting, and vulnerability research, including strong familiarity with common attack vectors and exploitation techniques
Confidence working directly with clients - presenting findings, leading discussions, and representing the team’s work clearly
Strong communication skills in both Hebrew and English, written and verbal
A proactive, highly accountable self-starter with strong organizational skills and a collaborative team mindset
Source code analysis skills across common backend and scripting languages (e.g., Python, Go, Java, Node.js) with the ability to identify security vulnerabilities and logic flaws
Experience in cloud-native pentesting and automated auditing within AWS, Azure, or GCP, with a focus on identifying misconfigurations and lateral movement risks

Advantages:

Broader experience across additional research domains such as red teaming, infrastructure testing, or incident response
Experience building internal tools, scripts, or automation to support research workflows
Track record of vulnerability discovery and disclosure (e.g., CVEs, bug bounty)
Experience working within secure SDLC practices, including "shift left" approaches and SAST and SCA tools (Semgrep, SonarQube, etc.)
B.Sc. in Computer Science or equivalent hands-on experience (military background or advanced certifications such as OSCP, OSWE, etc. are a strong advantage)
Familiarity with DFIR practices