{"id":1294413,"url":"https://alion.io/job/newcore-security-researcher","title":"Security Researcher","company":{"id":2093321,"name":"NewCore","domain":"newcore.com","url":"https://alion.io/company/newcore","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":93000,"max_usd":211000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1261},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"CVE","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"AWS","optional":true},{"name":"Frida","optional":true},{"name":"GCP","optional":true},{"name":"Ghidra","optional":true},{"name":"IAM","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-09-23T07:49:29Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-09-29T00:20:33Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Description\nNewCore is a security-first identity platform built for the agentic era, designed to secure, enable, and govern both human and agent identities within a single, scalable architecture. The platform has been rebuilt from the ground up by cybersecurity veterans and Unit 8200 alumni, bringing deep expertise in security and distributed systems. Backed by leading investors including Cyberstarts, Index Ventures, and Evolution Equity Partners, NewCore is focused on delivering robust, enterprise-ready identity solutions. Team members join a fast-growing company where security, innovation, and technical excellence are core values.\nWe are hiring a Senior Security Researcher to join the CTO Office and lead original research in identity security, bringing that work to the broader security community.\nYou'll have the autonomy to set your own research agenda and the visibility to shape product strategy with what you find.\nThe core of the role is offensive research targeting identity systems and protocols - identity providers, SSO, authentication and authorization standards (OAuth/OIDC/SAML, WebAuthn/FIDO2, etc.), MFA implementations, directory services, federation, session management, etc. When you find something, you'll drive responsible disclosure with the affected vendors and turn the work into technical write-ups and talks at conferences like Black Hat, DEF CON, CCC, and similar.\nBuilding a public research presence is a central part of this role, not a side effect of it.\nAlongside the research work, you'll contribute security feature ideas back into our product and periodically audit and pentest our own platform.\nResponsibilities\nHunt for novel vulnerabilities, design flaws, and attack techniques across identity providers, authentication and authorization protocols, and related infrastructure. Build proofs-of-concept that prove real-world impact.\nRun responsible disclosure end-to-end with affected vendors, from initial report through patch validation and CVE assignment.\nPublish your research as technical blog posts and whitepapers, and present it at top-tier security conferences. Represent the company on stage and in the community.\nFeed what you learn from breaking things into our product - concrete security features, detections, and design improvements.\nPeriodically turn the same scrutiny on our own platform through internal pentests.\nRequirements\n5+ years of hands-on offensive security or vulnerability research experience.\nStrong grasp of identity, authentication, and authorization technologies: OAuth 2.0, OIDC, SAML, Kerberos, WebAuthn/FIDO2, session and token security, federation, and directory services (Active Directory, Entra ID, Okta, or equivalent).\nA track record of published research - CVEs, technical write-ups, conference talks, bug bounty findings, or comparable public work.\nExperience driving responsible disclosure with vendors.\nExcellent technical writing and presentation skills in English. You can take a deep technical finding and make it land with both researchers and executives.\nNice to Have\nSpeaking experience at conferences such as Black Hat, DEF CON, CCC, or similar events.\nReverse engineering experience using tools such as IDA, Ghidra, Frida, or equivalent.\nFamiliarity with AWS IAM, Entra ID, GCP IAM, and modern cloud identity architectures.\nBackground in red teaming or identity-focused offensive security operations.\nContributions to open-source security projects.","description_format":"text","description_chars":3447,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-26T08:48:50Z"}],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.852,"p_room":1,"age_days":4,"expected_fill_days":23,"reasons":["conf:15","velocity","win:early"],"computed_at":"2026-09-28T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/newcore-security-researcher","json_url":"https://alion.io/job/newcore-security-researcher.json","meta":{"generated_at":"2026-09-29T01:45:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1415,"day_limit":5000,"remaining_today":3585,"minute_limit":60,"resets_at":"2026-09-30T00:00:00Z"}}}