Security Analyst (Part Time)

Location: Office (IL)

Description

About Ocean

Ocean is an email security company. Our research & detection team is the analytical core behind the product: we build AI systems that catch the attacks that slip past everyone else - phishing, social engineering, BEC, impersonation, AiTM/credential phishing, and AI-generated campaigns - and we back our customers' security teams with deep investigation and research.

About the role

We're hiring a Security Analyst to join a multidisciplinary research & detection team spanning cyber research, classical ML, and agent engineering. You'll be focusing on analyzing and simulating attacks: dissecting real-world phishing, BEC and social-engineering campaigns to understand how they are built and why they work, emulating those techniques in our lab to test and harden detection . Your findings feed directly into Ocean's detection and the AI agents that power it.

This is a part-time student position (2–3 days a week), hybrid from our Tel Aviv office.

Responsibilities

• Threat research - Dissect real-world email attacks and campaigns: reconstruct the attacker's technique, infrastructure, and intent, and characterize what makes them effective.
• Adversary emulation - Reproduce phishing and social-engineering techniques in our lab to test detection coverage.
• Reporting - Write up detailed reports on sophisticated cases and campaigns.
• Detection capabilities - Distill research and emulation findings into concrete improvements to Ocean's detection, generating leads and insights that will get built into our agents.

Requirements

Must:

• Hands-on cyber security background — red team, phishing or social-engineering, or equivalent military cyber experience.
• Currently pursuing a B.Sc. in Computer Science, Engineering, Mathematics or a related quantitative field.
• Solid software skills in Python or similar: you build your own tools, with AI coding assistants as part of your workflow.
• Ability to conduct end-to-end investigations and produce clear reports for both technical and customer audiences.
• Excellent written English.

Plus:

• Familiarity with email infrastructure and authentication (headers, SPF/DKIM/DMARC) and phishing URL analysis.
• Experience scoping and leading a security research project end to end.
• Experience building or evading LLM-based security tooling.
• Malware analysis.
• Proficiency in Go.