Senior Product Security Researcher
כדי להגיש, לשמור או לפתוח את דף המשרה מתחברים עם Google. זה חינם, ואחרי ההתחברות חוזרים ישר למשרה הזו.
תקציר
Island is shaping the future of work - creating an enterprise workspace for both knowledge workers and agents - where access, security, and AI-powered productivity are built in.
דרישות
- Several years of hands-on experience in application security research, product security, or offensive security, with a strong track record of finding real vulnerabilities (CVEs, bug bounty, published research, or equivalent).
- Deep understanding of web and browser security: same-origin policy, CSP, cookies and sessions, extension security, and common web vulnerability classes (XSS, CSRF, SSRF, IDOR, auth bypass, logic flaws).
- Strong knowledge of authentication and authorization protocols (OAuth, OIDC, SAML) and multi-tenant SaaS security.
- Ability to read and review code in languages such as TypeScript/JavaScript, Go, Python, or C++.
- Strong adversarial thinking and the ability to find logic and design flaws, not only known bug patterns.
- Clear communication and the ability to work as a partner to engineering teams.
- Experience with Chromium architecture or enterprise browser and endpoint products. (advantage)
- Experience researching LLM applications or agentic systems. (advantage)
- Clo (advantage)