Application Security Researcher
The full posting
Cato Networks is the converged network and security cloud for the AI era.
As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents.
Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide.
We're looking for an Application Security Researcher to join us. In this critical role, you will assist us in validating our services and environments according to the highest security standards. Also, You will work closely with our R&D and Product teams, and solve complex security problems.
Responsibilities
- Continuously checking and improving security measures to protect our systems.
- Reviewing system architecture, design, and code to find and fix security weaknesses before they become a problem.
- Helping developers follow secure coding practices and learn how to prevent security risks.
- Staying updated on new security threats and best practices to keep our security standards high.
- Contributing to Cato’s security research blog.
- Evaluating the security of AI and agentic systems, and applying AI-assisted tools to security research.
Requirements
- At least 3 years of experience in application security or vulnerability research.
- Hands-on experience in penetration testing for web, mobile, infrastructure, and thick client applications.
- Experience bypassing security tools like RBI, EDR, and DLP.
- Programming skills, with a preference for Java, Go, or C.
- Ability to find and fix security flaws in open-source libraries and third-party software.
- Knowledge of supply chain attacks and how to prevent them.
- Hands-on experience with AWS cloud attacks and mitigations (preferred).
- Understanding of microservices architectures, Docker, and Kubernetes.
- Strong problem-solving skills and the ability to work independently.
- Good communication skills and a passion for sharing knowledge.
- Understanding of network security and encryption protocols.
- Familiarity with AI and agentic systems, including their security risks and testing approaches.
Additional Skills (Preferred)
- Experience using SAST/DAST tools for static and dynamic code analysis.
- Experience working in Agile teams and collaborating with different departments.
- Security certifications like OSCP, CRTP, OSWE, or similar.
- Ability to lead security projects and initiatives.
- Adaptability to a fast-paced environment.
- Knowledge of current security threats and how to defend against them.
- Experience with writing security blogs, CVE research, or bug bounty programs is a plus.
- BSc in Computer Science- an advantage.
Text as Cato Networks published it; last compared with the original on 11 Nov 2026.
The application
Just your details.
Taken from Cato Networks's application form as it stood on 11 Nov 2026.
The employer: Cato Networks
Sells a cloud SASE platform joining SD-WAN and security; its staff research threats, analyze MDR alerts and build AI security features.
Pay and benefits: Israel-centered jobs at a late-stage private company.
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Cato Networks posts a security role
We read Cato Networks's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.