Application Security Researcher

About the role

Cato Networks is seeking an Application Security Researcher to validate services and environments against the highest security standards, collaborating closely with R&D and product teams to solve complex security challenges.

Key responsibilities

• Continuously assess and improve security measures across systems.
• Review architecture, design, and code to identify and remediate security weaknesses.
• Guide developers on secure coding practices and risk mitigation.
• Stay current on emerging threats and incorporate best practices.
• Contribute to the company’s security research blog.
• Evaluate security of AI and agentic systems, using AI‑assisted tools for research.

Required profile

• Minimum 3 years of experience in application security or vulnerability research.
• Hands‑on penetration testing experience for web, mobile, infrastructure, and thick‑client applications.
• Ability to bypass security tools such as RBI, EDR, and DLP.
• Strong problem‑solving skills and ability to work independently.
• Effective communication and a passion for knowledge sharing.

Required skills

• Programming languages: Java, Go, C.
• Experience with AWS cloud attacks and mitigations (preferred).
• Understanding of microservices, Docker, and Kubernetes.
• Knowledge of supply‑chain attack prevention.
• Familiarity with SAST/DAST tools for static and dynamic analysis.
• Experience with open‑source library vulnerability remediation.