---
title: 'Senior Security Researcher at Token Security'
canonical: 'https://feeny.ai/job/senior-security-researcher-token-security-tel-aviv-keqvh1pfjdah'
type: 'job'
last_seen: '2026-10-15'
---

# Senior Security Researcher at Token Security

- **Company:** Token Security
- **Location:** Tel Aviv, Israel
- **Posted:** 2026-09-17
- **Last confirmed live:** 2026-10-15
- **Apply:** https://token-security-new.webflow.io/company/careers?gh_jid=4953824101

## Job description

## About the Role

Token Security is looking for a Senior Security Researcher to join our research team. In this role, you will be at the bleeding edge of AI security, leading deep-dive research into AI products, LLM frameworks, and modern Agentic AI ecosystems.

You will combine hands-on defensive and offensive research techniques with Tokenʼs cutting-edge platform to analyze modern AI products, dissect non-human identity architectures, and uncover privilege escalation paths in dynamic AI agent workflows. In this role, you will bridge deep security research, product engineering, and technical storytelling turning novel insights into real-world enforcement mechanisms, core platform capabilities, high-impact blogs, and talks at top global security conferences.

## What We Do

The Frontier of Identity and Agentic AI Security

Token Security is pioneering the AI Agent & Non-Human Identity NHI) security space. Research-Driven Innovation

Our research directly powers our product capabilities uncovering complex identity attack vectors, analyzing enterprise AI products, and building security enforcement models for autonomous AI Agents.

Thought Leadership & PR We showcase our findings to the broader security community through technical publications, vulnerability disclosures, and global conference presentations. Innovation via Automation

We use AI Agents ourselves to accelerate research workflows, streamline environment analysis, and build smarter security checks. Direct Market & Product Impact

Our research bridges deep technical investigation and real-world defense, powering core platform enforcement 1 Senior Security Researcher capabilities, threat intelligence, and high-impact advisory for global enterprise customers.

## Your Responsibilities

- Agentic AI & Product Security Research: Perform deep technical analysis on modern AI products, SaaS LLM offerings, and agentic tools to expose security gaps, privilege escalation risks, and data leakage vectors.
- Enforcement & Architectural Design: Research and prototype security enforcement models to protect, monitor, and govern autonomous AI Agents, enforcing token boundaries and runtime access controls. Public Research, PR & Thought Leadership: Author technical blog posts, research papers, and vulnerability disclosures. Represent Token Security by submitting and presenting original research at top global security conferences (e.g., Black Hat, DEF CON, RSA).
- AI Driven Research Methodology: Leverage AI Agents and modern AI tooling to scale research workflows, automate environment discovery, and accelerate vulnerability analysis across complex environments.
- Hands-on Research in POCs: Conduct deep security research into active customer environments during key POCs, identifying complex NHI and AI misconfigurations to build actionable, high-impact security reports.
- Cross-Functional Impact: Collaborate closely with Product, Engineering, and Sales to convert research findings into automated detections, platform features, and executive presentations.

## What You Bring

- 5+ years of experience in security research, cloud security research, defensive or offensive security, or vulnerability research.
- AI & Agentic Security Expertise: Practical experience or deep technical research into AI architectures, LLM execution pipelines, API security, and agentic execution environments.
- Understanding of Organizational Security & IAM Thorough understanding of organizational security, cloud environments, and enterprise IAM models, as 2 Senior Security Researcher well as enterprise AI platforms and SaaS AI ecosystems (e.g., OpenAI, Claude Enterprise, Copilot).
- Technical Writing & Public Speaking
- Proven ability (or strong desire) to articulate complex research findings into engaging technical blogs, whitepapers, and public presentations for global security audiences.
- Scripting & Development
- Advanced proficiency in modern programming/scripting languages to write custom research tools, interact with APIs at scale, and build dynamic agent workflows. Analytical Problem Solver
- Ability to analyze how enterprise AI products work end-to-end and invent novel, frictionless ways to enforce security policies without breaking user experience or usability.
- Fluent English (written and verbal).

Nice to have:

- Track record of speaking at security conferences (e.g., Black Hat, DEF CON, RSA, OWASP, BSides).
- Published security advisories, CVEs, or high-impact technical blog posts. Location & Employment Details Employment Type

Full-Time Work Model: Hybrid – Tel Aviv, Israel In-office with Work From Home on Tuesdays

## About Token Security

## Company Overview
- **One-liner**: Token Security provides an AI-native, identity-first security platform to discover, govern, and protect AI agents and non-human identities across cloud, SaaS, and enterprise environments.
- **Entity Type**: Private (Series A, raised $27M total)
- **Headquarters**: Brooklyn, New York, United States (with a presence in Israel)
- **Founded**: 2023
- **Founders**: Itamar Apelblat (CEO) and Ido Shlomo (CTO)

## Core Business
- **Primary Industries**: Cybersecurity, Identity Security, Non-Human Identity (NHI) Security, AI Security
- **Target Customers**: B2B – organizations building or adopting agentic AI, including security teams, DevOps, and platform engineering groups in enterprises and scale-ups.
- **Mission or Purpose Statement**: “We are on a mission to secure the autonomous enterprise. As AI agents evolve from simple assistants to independent actors, Token Security provides the identity lifecycle and intent-based access management required to securely turn AI potential into a competitive advantage.” [token.security](https://www.token.security/company/about)

## Products & Services
- **Token Security Platform**: End-to-end AI agent and non-human identity (NHI) security platform. Includes continuous discovery, context-aware visibility, lifecycle management (ownership, decommissioning), intent-based least-privilege enforcement, security posture management, identity threat detection & response (ITDR), and AI-driven automation & remediation. [token.security](https://www.token.security/)
- **Token AI Agent**: Native conversational AI within the Token UI, enabling users to query and manage their identity security posture via natural language. [token.security](https://www.token.security/)
- **Token MCP Server**: Allows integration with AI chat applications (e.g., Claude, ChatGPT, Gemini) and AI agent frameworks (e.g., Cursor) to interact with the platform programmatically. [token.security](https://www.token.security/)
- **New Entitlements Inventory**: Helps customers understand and control access rights for non-human identities. [token.security](https://www.token.security/)

## Market Standing
- **Valuation/Market Cap**: Not disclosed (latest funding round: Series A on Jan 28, 2025, at an undisclosed valuation)
- **Key Metric**: Total Funding: $27M (Seed $7M in May 2024, Series A $20M in Jan 2025); Annual Revenue: ~$1M (estimated)
- **Notable Investors/Partners**: Notable Capital, Crosspoint Capital, TLV Partners, SNR.vc, Silicon Valley CISO Investments (SVCI), AWS Startup Loft Accelerator [pitchbook.com](https://pitchbook.com/profiles/company/597198-97) [linkedin.com](https://www.linkedin.com/company/token-security)
- **Growth Signals**: Headcount grew 25% YoY to ~46-48 employees; LinkedIn followers grew 65.6% YoY; strong engineering team with 34% in technical roles and alumni from Unit 8200, Microsoft, SailPoint; expanding across all departments (Israel and US) [linkedin.com](https://www.linkedin.com/company/token-security)

## Competitive Advantages
- **Machine-first, AI-native architecture**: Built from the ground up for AI agents and non-human identities, not retrofitted from human-centric IAM tools. Treats agents as first-class identities with intent-aware policies.
- **Unified identity graph**: Correlates AI agents, humans, secrets, permissions, and data to reveal blast radius and enable automated remediation at scale.
- **End-to-end lifecycle governance**: Enforces ownership, intent, access, and governance from creation through retirement, including automated decommissioning of orphaned identities.
- **Deep alignment with MCP and agentic ecosystems**: Provides a native MCP server and AI agent to integrate with popular AI assistants and frameworks, enabling real-time security operations.

## Strategic Focus
- **Secure the autonomous enterprise**: Enable organizations to adopt agentic AI quickly without losing control or introducing security risks.
- **Expand coverage and integrations**: Continuously discover new AI agents and NHI types across on-prem, hybrid, and cloud environments.
- **Drive automation and remediation**: Use AI-driven workflows to detect permission drift, behavioral anomalies, and enforce least-privilege access dynamically.
- **Scale the team and go-to-market**: With fresh Series A funding, Token is actively hiring across engineering, product, sales, and marketing to meet growing demand.

## Why Work Here
- **Fast-growing startup**: Headcount growing 25%+ YoY, serving a critical emerging category (AI agent security) with strong investor backing.
- **Impactful mission**: Work on one of the most pressing cybersecurity challenges of the AI era – identity security for autonomous agents.
- **Engineering culture**: 34% of the team is in technical roles; founders come from elite Israeli intelligence unit (Unit 8200); team values “learning by doing, growing together, and celebrating wins.” [token.security](https://www.token.security/company/careers)
- **Work environment**: Hybrid – offices in Brooklyn, NY and Israel; remote-friendly culture with a global team (62% Israel, 30% US).
- **Notable perks**: Not explicitly listed, but the company emphasizes creativity, collaboration, and bold ideas; careers page mentions “real impact” and solving critical IAM challenges. [token.security](https://www.token.security/company/careers)

## Sources
1. [token.security](https://www.token.security/)
2. [token.security/company/about](https://www.token.security/company/about)
3. [token.security/company/careers](https://www.token.security/company/careers)
4. [linkedin.com/company/token-security](https://www.linkedin.com/company/token-security)
5. [pitchbook.com/profiles/company/597198-97](https://pitchbook.com/profiles/company/597198-97)

## Other roles at Token Security

- [Senior Devops Engineer](https://feeny.ai/job/senior-devops-engineer-token-security-tel-aviv-qn0tq0htmae3) — Tel Aviv, Israel
- [Channel Account Manager](https://feeny.ai/job/channel-account-manager-token-security-united-states-38n9y3fp8w79) — United States
- [Senior Security Analyst](https://feeny.ai/job/senior-security-analyst-token-security-tel-aviv-937j7yt5e5zc) — Tel Aviv, Israel
- [Content Marketing & AEO/GEO/SEO Manager](https://feeny.ai/job/content-marketing-aeo-geo-seo-manager-token-security-brooklyn-2ep6691j672g) — Brooklyn, NY
- [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-token-security-tel-aviv-kkqkg2v3swqc) — Tel Aviv
- [Senior Security Researcher](https://feeny.ai/job/senior-security-researcher-vectra-san-jose-ez7ggm10zqae) — San Jose, CA / Austin, TX / Boston, MA / Dublin, Ireland / United States
- [Senior Security Researcher](https://feeny.ai/job/senior-security-researcher-censys-remote-jg7z5188cp0v)
- [Senior Security Researcher](https://feeny.ai/job/senior-security-researcher-axonius-tel-aviv-japp0qkaqq4m) — Tel Aviv, Israel
- [Senior Security Researcher](https://feeny.ai/job/senior-security-researcher-endor-labs-bengaluru-swwfvkkzhyr5) — Bengaluru, India