Software Development Engineer - Applied Research
- Level
- Mid
- Work type
- Hybrid · Tel Aviv
Not stated in the posting: salary, visa.
Open. First seen 2 October 2026.
About the role
BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cyber security SaaS portfolio.
BeyondTrust's standard text
Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.
The Role
You'll build the algorithms and detection logic that secure non-human identities and cloud entitlements. This is applied research as much as engineering: you'll study how identities interact with cloud permissions, model where access is excessive, and write the detection code that surfaces over-permissioning at scale.
The work sits between backend engineering, cloud IAM analysis and algorithm development, and it suits someone who wants investigative work to end in shipped software rather than a report.
What You’ll Do
- Build and optimise detection logic for over-permissioned identities, excessive entitlements and least-privilege gaps
- Study how service accounts, IAM roles, workload identities and API tokens use permissions, and where behaviour diverges from what was granted
- Model effective permissions programmatically across AWS IAM, Azure RBAC and Entra ID, or GCP IAM
- Write heuristics and statistical routines to flag risky permission patterns
- Turn known attack paths, such as privilege escalation and credential misuse, into automated detection coverage
- Prototype, then work with product engineering to scale models into production
What You’ll Bring
- 3+ years writing clean, maintainable backend code, ideally Python or Go
- Solid grasp of IAM mechanics in AWS, Azure/Entra or GCP: policies, roles, authorisation flow
- Building analytical logic or heuristics from structured data, logs or permission models
- A methodical approach to complex debugging and real depth of interest in security
- Strong technical communication with engineering and product colleagues
Who You Are
- You are a team player, eager and open to sharing successes and failures.
- You are flexible and can handle ambiguity and adapt to shifting situations and requirements.
- You take the initiative to fix issues before being assigned to them. You are persistent when facing roadblocks, overcoming them efficiently, and know how to coordinate with others when necessary.
- You hold high standards, continuously raise the bar, and drive our teams to deliver high-quality products, services, and processes.
- You understand software development best practices from appropriate testing paradigms to effective peer code reviews and resilient architectures.
- You know how to balance speed and risks; you make decisions based on data.
BeyondTrust's standard text
Better Together
Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.
We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.
About Us
BeyondTrust is the worldwide leader in intelligent identity and access security, enabling organizations to protect identities, stop threats, and deliver dynamic access. We are leading the charge in innovating identity-first security and are trusted by 20,000 customers, including 75 of the Fortune 100, plus a global ecosystem of partners.
Learn more at www.beyondtrust.com
#LI-EP1
What this role asks for
Particular to this role
Active Directory · Golang
Rare in BeyondTrust's other 27 open postings.
Standard for software engineering roles
Python
Common in software engineering postings at any company.
In most of BeyondTrust's ads
Cybersecurity
Named in most of its open postings, whatever the role.
78% of this description is written for the role. The rest is BeyondTrust's standard text, folded away below.
Read against BeyondTrust's other open postings on this site.
The team: Engineering HIRES STEADILY
This role is one of 13 open in Engineering. 5 were posted in the last 30 days and the oldest in May: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
AWS (11 of 13), Cybersecurity (9 of 13), Azure (7 of 13), Terraform (7 of 13), Kubernetes (6 of 13), Agile (5 of 13), GCP (5 of 13)
OTHER ROLES ON THIS TEAM
- Staff Software Development Engineer posted Oct 9
- Sr Site Reliability Engineer posted Oct 7
- Sr Software Development Engineer posted Oct 5
- Sr Manager, Site Reliability Engineer (FedRAMP / AWS GovCloud) posted Oct 5
- Site Reliability Engineer posted Oct 5
- Sr Software Development Engineer posted Aug 27
- Software Development Engineer posted Aug 13
- Software Development Engineer posted Aug 11
- Sr Staff Software Development Engineer posted Jul 24
- Staff Software Development Engineer - Windows Endpoint posted Jul 21
- Staff Software Development Engineer posted Jul 21
- Principal Software Security Architect posted May 14
From the team and dates on BeyondTrust's own job board.
Similar jobs
- Software Engineer - Security & Trust at Truveta
Shares 6 skills: Active Directory, Golang, GCP… · same seniority - Security Engineer - SIEM/SOAR - Northeast region at GuidePoint Security
Shares 6 skills: Active Directory, Cybersecurity, GCP… · same seniority - Cybersecurity Engineer at Accela
Shares 7 skills: Active Directory, IAM, Cybersecurity… · same seniority - IT Systems Administrator at EquipmentShare
Shares 6 skills: Active Directory, IAM, GCP… · same seniority - Systems Administrator - SME at Accenture Federal Services
Shares 6 skills: Active Directory, Cybersecurity, GCP… · same seniority - Cloud Network Engineer at BeyondTrust
Also at this company
Is this your posting and you want it taken down? Email info@careerholo.com.