Security Analyst (Part Time)
Summary
Part-time (2–3 days/week, hybrid from Tel Aviv) student role on Ocean's email security research & detection team: dissect real phishing, BEC and social-engineering campaigns, emulate attacks in a lab to test detection, and feed findings into detection and AI agents. Core stack: Python (or similar), Go, and email auth (SPF/DKIM/DMARC).
About Ocean
Ocean is an email security company. Our research & detection team is the analytical core behind the product: we build AI systems that catch the attacks that slip past everyone else - phishing, social engineering, BEC, impersonation, AiTM/credential phishing, and AI-generated campaigns - and we back our customers' security teams with deep investigation and research.
About the role
We're hiring a Security Analyst to join a multidisciplinary research & detection team spanning cyber research, classical ML, and agent engineering. You'll be focusing on analyzing and simulating attacks: dissecting real-world phishing, BEC and social-engineering campaigns to understand how they are built and why they work, emulating those techniques in our lab to test and harden detection . Your findings feed directly into Ocean's detection and the AI agents that power it.
This is a part-time student position (2–3 days a week), hybrid from our Tel Aviv office.
Responsibilities
- Threat research - Dissect real-world email attacks and campaigns: reconstruct the attacker's technique, infrastructure, and intent, and characterize what makes them effective.
- Adversary emulation - Reproduce phishing and social-engineering techniques in our lab to test detection coverage.
- Reporting - Write up detailed reports on sophisticated cases and campaigns.
- Detection capabilities - Distill research and emulation findings into concrete improvements to Ocean's detection, generating leads and insights that will get built into our agents.
Requirements
Must:
- Hands-on cyber security background — red team, phishing or social-engineering, or equivalent military cyber experience.
- Currently pursuing a B.Sc. in Computer Science, Engineering, Mathematics or a related quantitative field.
- Solid software skills in Python or similar: you build your own tools, with AI coding assistants as part of your workflow.
- Ability to conduct end-to-end investigations and produce clear reports for both technical and customer audiences.
- Excellent written English.
Plus:
- Familiarity with email infrastructure and authentication (headers, SPF/DKIM/DMARC) and phishing URL analysis.
- Experience scoping and leading a security research project end to end.
- Experience building or evading LLM-based security tooling.
- Malware analysis.
- Proficiency in Go.
