Software Development Engineer - Applied Research
BeyondTrust1 month ago
Tel Aviv-Yafo, IsraelMid Level
Responsibilities
- Build and optimize detection logic for over-permissioned identities, excessive entitlements, and least-privilege gaps.
- Analyze how service accounts, IAM roles, workload identities, and API tokens use permissions and identify divergences between granted and effective behavior.
- Model effective permissions across AWS IAM, Azure RBAC and Entra ID, and GCP IAM.
- Develop heuristics and statistical routines to detect risky permission patterns.
- Convert privilege escalation and credential misuse attack paths into automated detection coverage.
- Prototype detection models and collaborate with product engineering to scale them into production.
Requirements
- At least 3 years of experience writing clean, maintainable backend code, ideally using Python or Go.
- Strong understanding of IAM mechanics, including policies, roles, and authorization flows, in AWS, Azure/Entra, or GCP.
- Experience building analytical logic or heuristics from structured data, logs, or permission models.
- Methodical approach to complex debugging and a strong interest in security.
- Strong technical communication skills with engineering and product colleagues.
- Understanding of software development best practices, including testing paradigms, peer code reviews, and resilient architectures.
- Ability to balance delivery speed and risk and make data-informed decisions.
Benefits
- Flexible, trust-oriented culture focused on continual learning and employee growth.
- Inclusive and diverse workplace culture.
- Employee support focused on enabling teams to serve customers effectively.
About BeyondTrust
BeyondTrust builds identity and privileged access management software that controls admin rights, manages passwords and keys, and monitors privileged sessions across cloud and on-prem systems. The privately held company, founded in 1985 and headquartered in Johns Creek, Georgia, emerged after Bomgar acquired BeyondTrust and adopted its name. It serves more than 20,000 customers, including 75 of the Fortune 100, via enterprise subscriptions and partner channels.