Senior Security Researcher Job at Endor Labs

Senior Security Research Engineer

Senior Security Research Engineer position at HPE's Security Lab in Bristol, UK....

Location

United Kingdom , Bristol

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

PhD (or equivalent research experience)
8+ or more years of experience
Track record of innovation driven into products
Experience as a technical leader
Knowledge of system security techniques and principles
Good knowledge of computer architecture, operating systems, networking, application of AI to security or security of AI
Good implementation skills with experience in Python, Rust, C, Go
Good written and verbal communication skills
mastery in English
Comfortable presenting to executives, technologists and customers

Job Responsibility

Define research agenda and take lead on research projects
Lead design of systems and solutions with colleagues
Own implementation of significant components
Build robust product-ready prototypes to test and demonstrate ideas
Research and develop foundational security capabilities for HPE products and services
Collaborate with business units, supply chain, partners and open-source community

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

Senior Security Researcher - ITDR (Cortex)

We are looking for a Senior Security Researcher to join our Identity Threat Dete...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

At least 5 years’ experience with Active Directory security and identity related attacks
2+ years of experience with Entra ID (formerly Azure AD) or SAAS application - Advantage
In-depth knowledge of the inner-workings of operating systems
In-depth Knowledge of network protocols, including but not limited to Kerberos, RPC, SMB, HTTP, SMTP, DNS, DHCP, etc
In-depth knowledge of enterprise infrastructure, including Active Directory, FW, VPN, Security products, etc
At least 2 Years of experience coding Python - Advantage
Strong knowledge of SQL language - Advantage
Experience with red-teaming / pentest of Entra ID - Advantage
Experience with machine learning / data analysis / cloud infrastructure / security - Advantage
Ability to drive and own projects from start to finish

Job Responsibility

Research the evolving threat landscape and develop advanced detections to protect SAAS, Cloud, on-premises, and hybrid identities
Focus on identifying and mitigating identity-related threats across networks, endpoints, and cloud environments, using statistical classification methods to build effective detection models and protecting customers at scale
Collaborate with cross-functional teams, validate detection concepts on real-world data, and continuously enhance detection capabilities to stay ahead of emerging threats
Research innovative methods for detecting targeted attackers operating in endpoints, networks, cloud and SAAS environments
Simulate real-world attacks in lab environments and conduct a deep analysis of the behavior
Develop and refine statistics-based classification algorithms and techniques to create and improve detection models
Research specific scenarios to enhance our model's capabilities
Collaborate within a diverse research group, improving our research processes and leading us to be a better team creating a better product
Stay informed on the latest APTs, attacker methodologies, and TTPs to ensure our models stay ahead of emerging threats

Senior Security Researcher - Cloud - Security Automation

As a Cloud Cybersecurity Researcher, you will design and implement remediation s...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

Strong background in cloud security operations and incident resolution
Deep expertise in at least one of the following: incident response, red teaming, or advanced threat hunting/detection research
Hands-on experience with cloud platforms (AWS, GCP, or Azure) and associated security services
Proficiency in Python and practical experience building automation or playbooks
Experience working with SQL or similar query languages for large-scale data analysis
Strong analytical skills, independent thinking, and ability to collaborate in a team environment

Job Responsibility

Develop robust, testable, and safe remediation plans for cloud runtime and posture issues (CSPM, DSPM, CIEM, CNAPP, IAM, etc.)
Conduct in-depth research to identify attacker TTPs and cloud misconfiguration risks, and translate findings into automated response playbooks
Apply data analysis, programming, and modeling techniques to evaluate and optimize remediation approaches
Collaborate within a diverse research group to continuously improve automation processes and methodologies
Stay ahead of evolving threats, including cloud-native attack vectors and advanced adversary tradecraft

What we offer

FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees
mental and financial health resources
personalized learning opportunities

Fulltime

Senior Security Research Engineer

We are seeking a senior technologist to join the Security Lab in HPE Labs. This ...

Location

United Kingdom , Bristol

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

PhD (or equivalent research experience) plus 10 or more years of experience
track record of innovation driven into products
experience as a technical leader
application of AI to security or security of AI
excellent knowledge of system security techniques and principles
strong implementation skills with experience in one or more of the following: Python, Rust, C, Go
excellent knowledge of computer architecture, operating systems and networking
excellent written and verbal communication skills
comfortable presenting to executives, technologists and customers
excellent analytical and problem-solving skills

Job Responsibility

Define a research agenda and take the lead on research projects
build advanced security capabilities for HPE products and customers
collaborate with business units, supply chain, partners, and the open-source community
build robust product-ready prototypes to test and demonstrate ideas
lead the design of systems and solutions
inspire and motivate others.

What we offer

Comprehensive suite of health & wellbeing benefits
personal & professional development programs
unconditional inclusion
flexibility to manage work and personal needs.

Fulltime

Senior Application Security Researcher

The JFrog CSO Security team is looking for a Senior Application Security Researc...

Location

Israel , Netanya/Tel Aviv

Salary:

Not provided

JFrog

Expiration Date

Until further notice

Requirements

4+ years of hands-on experience in an application security role
Experience with Web Penetration Testing (Hands On) - Mandatory
Strong coding skills, preferably in Java, Golang, and JavaScript - Mandatory
Experience with cloud environments - an advantage
Experience with microservices (Docker, K8S, Service Mesh) - an advantage
Excellent problem-solving skills and the ability to work independently with a strong sense of ownership
Good communication skills and a true passion to educate others and achieve continuous improvement

Job Responsibility

Continuously assess and challenge JFrog’s overall security posture to ensure optimal and up-to-date platform security in our products and systems
Evaluate architecture, design, and code to ensure they are free from potential vulnerabilities and security risks
Train and mentor developers about security frameworks, testing, vulnerabilities, and best practices to ensure code compliance
Evaluate new technologies and standards in the application security domain
Plan and lead cross-company efforts with the R&D that will improve JFrog’s security posture

Senior Mobile Security Researcher Android/iOS

At Promon, we protect the mobile apps people rely on every day. Our award-winnin...

Location

Norway , Oslo

Salary:

Not provided

Promon

Expiration Date

Until further notice

Requirements

A deep understanding of the mobile app security threat landscape (Android and/or iOS)
Hands-on experience with static & dynamic reverse engineering—think IDA Pro, Ghidra, Binary Ninja, Frida, Unicorn, or Qiling
In-depth knowledge of Android/iOS internals
The ability to write code —whether in ARM64 assembly, C/C++, or Python
Solid communication & collaboration skills
The ability to work autonomously
Fluent in English (both verbal and written)

Job Responsibility

Hunt down threats targeting mobile apps and our security products
Reverse-engineer attacks from external pentests, third-party exploits, and our bug bounty program, then document your findings
Fight back with proof-of-concepts (PoCs)—build countermeasures and collaborate with our product teams to turn them into reality
Monitor emerging threats and stay ahead of the game by tracking the latest attack techniques and security trends

What we offer

Work at the forefront of game-changing technology
Nordic work culture renowned for innovation, flat hierarchy, and inclusivity
Support for your passion, curiosity, and goals
Work with some of the world's best app security experts and mobile security thought leaders
International team
Celebrate birthdays, team wins, reaching milestones, or the joy of holidays

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Senior Cyber Security Analyst

In the Bosch Cyber Security Organization, we coordinate the vulnerability manage...

Location

Poland , Warszawa

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Completed university degree (Master/Diploma/PhD) in Information Security, Computer Science, Software Development, Electrical Engineering, Mathematics, or comparable field
Team player familiar with cooperation and delegation
Versatile and communicative individual who enjoys preparing and sharing information tailored to target audience
Strong technical background in security and several years of professional experience in multiple fields: IT Security, Cloud Security, Embedded Security, Industrial Control Systems (ICS), Industrial IoT (IIoT), Consumer IoT, Software Security and Security Research, Vulnerability Management process design and execution
Ideally basic knowledge in operational management of CSIRT, CERT, or Product-CERT
Love challenges while defining and implementing processes in new, effective, and user-oriented manner
Very good English written and spoken
German would be an important asset

Job Responsibility

Investigate and assess vulnerabilities within operational environment
Provide basis for prioritizing vulnerability remediation follow-up
Work closely with development and operations teams in Poland and tracking teams in India
Support further development of Enterprise Security Advisory Services
Track risks through vulnerabilities
Continuously identify process improvements for enhanced tool support
Coordinate implementation of improvements with international teams
Actively work as team to network with external stakeholders

What we offer

Competitive salary + annual bonus
Hybrid work with flexible working hours
Referral Bonus Program
Copyright costs for IT employees
Professional support and knowledge sharing
Ongoing development opportunities in multinational environment
Broad access to professional trainings including language courses, conferences and webinars
Private medical care and life insurance
Cafeteria System with multiple benefits including MultiSport, shopping vouchers, cinema tickets
Prepaid Lunch Card

Fulltime

Senior Security Researcher

Endor Labs

Location:
United States

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 24, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Security Researcher

Senior Security Research Engineer

Senior Security Researcher - ITDR (Cortex)

Senior Security Researcher - Cloud - Security Automation

Senior Security Research Engineer

Senior Application Security Researcher

Senior Mobile Security Researcher Android/iOS

Senior AI Security Engineer

Senior Cyber Security Analyst

Senior Security Researcher

Endor Labs

Location:United States

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:April 24, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Security Researcher

Senior Security Research Engineer

Senior Security Researcher - ITDR (Cortex)

Senior Security Researcher - Cloud - Security Automation

Senior Security Research Engineer

Senior Application Security Researcher

Senior Mobile Security Researcher Android/iOS

Senior AI Security Engineer

Senior Cyber Security Analyst

Location:
United States

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
April 24, 2025