Senior Security Researcher

About the Role

Token Security is looking for a Senior Security Researcher to join our research team. In this role, you will be at the bleeding edge of AI security, leading deep-dive research into AI products, LLM frameworks, and modern Agentic AI ecosystems.

You will combine hands-on defensive and offensive research techniques with Tokenʼs cutting-edge platform to analyze modern AI products, dissect non-human identity architectures, and uncover privilege escalation paths in dynamic AI agent workflows. In this role, you will bridge deep security research, product engineering, and technical storytelling turning novel insights into real-world enforcement mechanisms, core platform capabilities, high-impact blogs, and talks at top global security conferences.

What We Do

The Frontier of Identity and Agentic AI Security

Token Security is pioneering the AI Agent & Non-Human Identity NHI) security space. Research-Driven Innovation

Our research directly powers our product capabilities uncovering complex identity attack vectors, analyzing enterprise AI products, and building security enforcement models for autonomous AI Agents.

Thought Leadership & PR We showcase our findings to the broader security community through technical publications, vulnerability disclosures, and global conference presentations. Innovation via Automation

We use AI Agents ourselves to accelerate research workflows, streamline environment analysis, and build smarter security checks. Direct Market & Product Impact

Our research bridges deep technical investigation and real-world defense, powering core platform enforcement 1 Senior Security Researcher capabilities, threat intelligence, and high-impact advisory for global enterprise customers.

Your Responsibilities

• Agentic AI & Product Security Research: Perform deep technical analysis on modern AI products, SaaS LLM offerings, and agentic tools to expose security gaps, privilege escalation risks, and data leakage vectors.
• Enforcement & Architectural Design: Research and prototype security enforcement models to protect, monitor, and govern autonomous AI Agents, enforcing token boundaries and runtime access controls. Public Research, PR & Thought Leadership: Author technical blog posts, research papers, and vulnerability disclosures. Represent Token Security by submitting and presenting original research at top global security conferences (e.g., Black Hat, DEF CON, RSA).
• AI Driven Research Methodology: Leverage AI Agents and modern AI tooling to scale research workflows, automate environment discovery, and accelerate vulnerability analysis across complex environments.
• Hands-on Research in POCs: Conduct deep security research into active customer environments during key POCs, identifying complex NHI and AI misconfigurations to build actionable, high-impact security reports.
• Cross-Functional Impact: Collaborate closely with Product, Engineering, and Sales to convert research findings into automated detections, platform features, and executive presentations.

What You Bring

• 5+ years of experience in security research, cloud security research, defensive or offensive security, or vulnerability research.
• AI & Agentic Security Expertise: Practical experience or deep technical research into AI architectures, LLM execution pipelines, API security, and agentic execution environments.
• Understanding of Organizational Security & IAM Thorough understanding of organizational security, cloud environments, and enterprise IAM models, as 2 Senior Security Researcher well as enterprise AI platforms and SaaS AI ecosystems (e.g., OpenAI, Claude Enterprise, Copilot).
• Technical Writing & Public Speaking
• Proven ability (or strong desire) to articulate complex research findings into engaging technical blogs, whitepapers, and public presentations for global security audiences.
• Scripting & Development
• Advanced proficiency in modern programming/scripting languages to write custom research tools, interact with APIs at scale, and build dynamic agent workflows. Analytical Problem Solver
• Ability to analyze how enterprise AI products work end-to-end and invent novel, frictionless ways to enforce security policies without breaking user experience or usability.
• Fluent English (written and verbal).

Nice to have

• Track record of speaking at security conferences (e.g., Black Hat, DEF CON, RSA, OWASP, BSides).
• Published security advisories, CVEs, or high-impact technical blog posts. Location & Employment Details Employment Type Full-Time Work Model: Hybrid – Tel Aviv, Israel In-office with Work From Home on Tuesdays