Application Security Researcher

<div class="content-intro"><p><strong>Welcome to the future of cloud networking and security!&nbsp;&nbsp;</strong></p> <p><span data-olk-copy-source="MessageBody">Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeam, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $28.5 billion by 2028.<br><br>This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it!</span></p> <p>&nbsp;</p></div><div class="p-rich_text_section"> <div class="p-rich_text_section">We're looking for an Application Security Researcher to join us. In this critical role, you will assist us in validating our services and environments according to the highest security standards. Also, You will work closely with our R&amp;D and Product teams, and solve complex security problems.</div> <div class="p-rich_text_section">&nbsp;</div> <div class="p-rich_text_section"><strong>Responsibilities:</strong></div> <ul class="p-rich_text_list p-rich_text_list__bullet" data-stringify-type="unordered-list" data-indent="0" data-border="0"> <li>Continuously checking and improving security measures to protect our systems.</li> <li>Reviewing system architecture, design, and code to find and fix security weaknesses before they become a problem.</li> <li data-stringify-indent="0" data-stringify-border="0">Helping developers follow secure coding practices and learn how to prevent security risks.</li> <li data-stringify-indent="0" data-stringify-border="0">Staying updated on new security threats and best practices to keep our security standards high.</li> <li data-stringify-indent="0" data-stringify-border="0">Contributing to Cato’s security research blog.</li> </ul> <p>&nbsp;</p> <div class="p-rich_text_section"><strong>Requirements:</strong></div> <ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested" data-stringify-type="unordered-list" data-list-tree="true" data-indent="0" data-border="0"> <li data-stringify-indent="0" data-stringify-border="0">At least 3 years of experience in application security or vulnerability research.</li> <li data-stringify-indent="0" data-stringify-border="0">Hands-on experience in&nbsp;penetration testing&nbsp;for web, mobile, infrastructure, and&nbsp;thick client&nbsp;applications.</li> <li data-stringify-indent="0" data-stringify-border="0">Experience bypassing security tools like&nbsp;RBI, EDR, and DLP.</li> <li data-stringify-indent="0" data-stringify-border="0">Programming skills, with a preference for Java, Go, or C.</li> <li data-stringify-indent="0" data-stringify-border="0">Ability to find and fix security flaws in&nbsp;open-source libraries&nbsp;and third-party software.</li> <li data-stringify-indent="0" data-stringify-border="0">Knowledge of&nbsp;supply chain attacks&nbsp;and how to prevent them.</li> <li data-stringify-indent="0" data-stringify-border="0">Hands-on experience with AWS cloud attacks and mitigations (preferred).</li> <li data-stringify-indent="0" data-stringify-border="0">Understanding of microservices architectures, Docker, and Kubernetes.</li> <li data-stringify-indent="0" data-stringify-border="0">Strong&nbsp;problem-solving skills&nbsp;and the ability to work independently.</li> <li data-stringify-indent="0" data-stringify-border="0">Good&nbsp;communication skills&nbsp;and a passion for sharing knowledge.</li> <li data-stringify-indent="0" data-stringify-border="0">Understanding of&nbsp;network security and encryption protocols.</li> </ul> <div class="p-rich_text_section"><strong data-stringify-type="bold">Additional Skills (Preferred):</strong></div> <ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested" data-stringify-type="unordered-list" data-list-tree="true" data-indent="0" data-border="0"> <li data-stringify-indent="0" data-stringify-border="0">Experience using&nbsp;SAST/DAST&nbsp;tools for&nbsp;static and dynamic code analysis.</li> <li data-stringify-indent="0" data-stringify-border="0">Experience working in&nbsp;Agile teams&nbsp;and collaborating with different departments.</li> <li data-stringify-indent="0" data-stringify-border="0">Security certifications like <strong>OSCP, CRTP, OSWE,</strong> or similar.</li> <li data-stringify-indent="0" data-stringify-border="0">Ability to lead&nbsp;security projects&nbsp;and initiatives.</li> <li data-stringify-indent="0" data-stringify-border="0">Adaptability to a fast-paced environment.</li> <li data-stringify-indent="0" data-stringify-border="0">Knowledge of&nbsp;current security threats&nbsp;and how to defend against them.</li> <li data-stringify-indent="0" data-stringify-border="0">Experience with writing security blogs, CVE research, or bug bounty programs is a plus.</li> <li>BSc in Computer Science- an advantage.</li> </ul> </div>