Senior Security Researcher

SeniorHybrid
CompanyAqua Security
LocationRamat-Gan, Israel
CategorySecurity
DepartmentEngineering
SenioritySenior
WorkplaceHybrid
Posted2026-09-10
Estimated salary₪35K–48K (a market estimate, not the employer's figure)
Viacomeet

Description

We are looking for an exceptional  Security Researcher  to join Aqua’s world-class security research organization. Looking for an experienced researcher in the cybersecurity world with depth, and excellence in cloud-native security research.

As a Security Researcher, you will work on  deep technical research on several areas –  working with other researchers, and transforming advanced offensive insights into scalable defensive capabilities.

What You Will Do

  • Research and analyze sophisticated attack techniques  targeting Linux-based cloud-native systems, including Kubernetes, containers, and serverless environments.
  • Reverse engineer Linux malware families  to extract behavioral patterns, execution flows, and persistence mechanisms.
  • Study real-world threat actor techniques and translate findings into  actionable detection, prevention, and hardening strategies .
  • Design and prototype advanced detection logic and observability mechanisms, including kernel- and runtime-level approaches (e.g., eBPF).
  • Influence Aqua’s security strategy by turning research insights into capabilities that protect large-scale production environments.
  • Collaborate closely with engineering and product teams to ensure research outcomes are impactful and scalable.
  • 4+ years of experience  in security research with a strong focus on Linux-based systems.
  • B.Sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background.
  • Deep, practical understanding of  Linux internals  (processes, syscalls, memory, networking, filesystems).
  • Strong experience with  malware analysis and reverse engineering  in Linux environments.
  • Proficiency in  C and Python  for low-level research, tooling, and prototyping.
  • Proven ability to analyze attacker behavior and design corresponding  detection or mitigation strategies .
  • Strong familiarity with  cloud-native technologies , including containers, Kubernetes, and container runtimes.
  • Excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.