Security Researcher

Job description

Join the Wix security guild as a Security Researcher and play a key role in safeguarding our systems by leading proactive research into emerging technologies and the ever-evolving field of AI security. In your day-to-day, you will:

• Conduct proactive security research on emerging technologies, focusing on AI/ML systems, LLM security, and automated threat vectors
• Perform threat modeling, vulnerability analysis, and technical evaluations of new platforms and architectures
• Develop Proof-of-Concepts (PoCs) and lightweight research tools in Python to test security assumptions and validate vulnerabilities
• Analyze novel attack techniques, public breaches, and industry trends to identify systemic risks and mitigate them before they're exploited
• Translate complex research, technical findings, and AI vulnerabilities into actionable security controls, strategic insights, and recommendations
• Collaborate closely with Security and Engineering teams to turn research findings into real-world security improvements
• Present research findings clearly to both technical and non-technical audiences

**

At Wix, we believe our best work happens together. Our work model is fully in person, with 5 days a week from our office. Flexibility remains a core value at Wix and special requests are handled thoughtfully at the team level.

Requirements

• 2 - 4 years of hands-on experience in security research, vulnerability research, threat intelligence, or offensive security. Military/intelligence unit service, academic research, CTFs, or strong personal research projects are highly valued
• Deep understanding of core cybersecurity concepts and modern web/cloud architectures
• Hands-on experience with Python for prototyping, automation, and developing research tools or PoCs
• Familiarity with AI/ML security principles (e.g., OWASP Top 10 for LLMs, prompt injection, data poisoning, model exposure risks)
• Strong critical thinking and an offensive mindset - you question assumptions, seek root causes, and look for ways systems can fail or be exploited
• A self-starter who is organized, takes ownership of research projects end-to-end, and drives them to actionable conclusions
• Excellent written and verbal communication skills in English, with the ability to turn complex technical findings into clear conclusions