About the company
BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cyber security SaaS portfolio. Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success.
Responsibilities
- Build and optimise detection logic for over-permissioned identities, excessive entitlements and least-privilege gaps
- Study how service accounts, IAM roles, workload identities and API tokens use permissions, and where behaviour diverges from what was granted
- Model effective permissions programmatically across AWS IAM, Azure RBAC and Entra ID, or GCP IAM
- Write heuristics and statistical routines to flag risky permission patterns
- Turn known attack paths, such as privilege escalation and credential misuse, into automated detection coverage
- Prototype, then work with product engineering to scale models into production
Requirements
- 3+ years writing clean, maintainable backend code, ideally Python or Go
- Solid grasp of IAM mechanics in AWS, Azure/Entra or GCP: policies, roles, authorisation flow
- Building analytical logic or heuristics from structured data, logs or permission models
- A methodical approach to complex debugging and real depth of interest in security
- Strong technical communication with engineering and product colleagues
Conditions
- Hybrid work in Tel Aviv, Israel
- Team player culture, flexibility, and continual learning
- Opportunity to work on applied research and detection engineering at scale