Application Security Researcher

Tel Aviv District, Israel. Posted 31 months ago

The role

You will assist in validating services and environments according to security standards. You will work with R&D and Product teams to solve complex security problems.

What you will do

Continuously checking and improving security measures to protect systems.
Reviewing system architecture, design, and code to find and fix security weaknesses.
Helping developers follow secure coding practices and learn how to prevent security risks.
Staying updated on new security threats and best practices.
Contributing to Cato's security research blog.
Evaluating the security of AI and agentic systems.
Applying AI-assisted tools to security research.

Required qualifications

At least 3 years of experience in application security or vulnerability research.
Hands-on experience in penetration testing for web, mobile, infrastructure, and thick client applications.
Experience bypassing security tools like RBI, EDR, and DLP.
Programming skills, with a preference for Java, Go, or C.
Ability to find and fix security flaws in open-source libraries and third-party software.
Knowledge of supply chain attacks and how to prevent them.
Understanding of microservices architectures, Docker, and Kubernetes.
Strong problem-solving skills and the ability to work independently.
Good communication skills and a passion for sharing knowledge.
Understanding of network security and encryption protocols.
Familiarity with AI and agentic systems, including their security risks and testing approaches.

Nice to have

Hands-on experience with AWS cloud attacks and mitigations
Experience using SAST/DAST tools for static and dynamic code analysis
Experience working in Agile teams and collaborating with different departments
Security certifications like OSCP, CRTP, OSWE, or similar
Ability to lead security projects and initiatives
Adaptability to a fast-paced environment
Knowledge of current security threats and how to defend against them
Experience with writing security blogs, CVE research, or bug bounty programs
BSc in Computer Science

About the company

Cato Networks is the converged network and security cloud for the AI era. The company provides a unified, cloud-native platform to prioritize risks and stop threats in real time.