Example Company
Software engineer
- Location
- San Francisco
- Type
- Full time
- Compensation
- $150k-$200k
- Posted
- 2 days ago
Join a team building useful software. Work closely with engineering and design to turn new ideas into products.
Loading job details
Security Researcher- Posture
- Location
- Tel Aviv
- Type
- Full time
- Posted
- 17D AGO
About the role
Description
Every nation has data. Few can protect it. Fewer still can act on it.
Dream is the sovereign AI and national cyber-defense company for governments.
We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign.
This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world.
We defend nations against the most advanced threats in the world with a national security suite that offers AI-native resilience against APTs with visibility, insights and mediation across Posture, CTI, and Detection & Response, all fully sovereign.
The Dream Job
We're looking for a Cyber Security Researcher to join the research team within our Posture Management group. Our product is AI-driven, and this is a research role on the research team. You’ll characterize and analyze risks and potential vulnerabilities in enterprise networks (domain- and network-level) and translate those findings into logic built into our product. A core part of the role is helping to build AI agents that emulate threat actors’ flow and mindset, modeling how a real adversary would reason through and traverse an environment to anticipate and detect those paths.
The Dream-Maker Responsibilities
- 5+ years of experience, including hands-on experience as a security researcher (red team, penetration testing, exploit research, or similar).
- Implement methods and algorithms to discover network topology, relationships between devices, and potential lateral movement paths
- Conduct network security assessments to identify weaknesses in customers’ network infrastructure and recommend mitigations to monitor and limit unauthorized access.
- Research and characterize attack techniques, misconfigurations, and vulnerabilities across enterprise domain and network environments (e.g., Active Directory, network segmentation, identity infrastructure, exposed services).
- Build POC exploits/attack chains to validate risk hypotheses before they're modeled into the product. Collaborate with product and engineering teams to define how identified risks should be surfaced, prioritized, and remediated for customers.
- Produce clear technical documentation of research findings, attack paths, and proposed detection logic.
The Dream Skill Set
- Strong analytical thinking and ability to generalize from specific findings to broad detection logic.
- Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies
- Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development
- Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios
- Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation
- Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis
- Independent, self-driven researcher who can define and pursue research questions with minimal guidance.
- Comfortable working cross-functionally with product and engineering teams.
Never Stop Dreaming...
If you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, we’d love to hear from you!
Similar roles
Enterprise Security Posture Management (ESPM) LeadBarclays Investment Bank
Security Communications Technician IIINASA Jet Propulsion Laboratory
Principal Information Security Customer Engagement EngineerLexisNexis · Sydney · Melbourne- Sr. Cybersecurity Analyst – Application/Cloud Security Automation - Hybrid 2 Days Chicago, IL - FreeWheelCompa · Chicago
Security Operations & Detection Engineer (SecOps) – AI CloudBitdeer · Los Angeles · San Jose
Senior IAM & Information Security EngineerCaris Life Sciences