Research Engineer

Cato Networks is the converged network and security cloud for the AI era.

As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents.

Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide.

Cato Networks is looking for an experienced Research Engineer to join the Cato Security team. As a security engineer in the Threats team, you will take part in analyzing emerging security threats, reproducing them in a lab environment, and developing prevention logic based on Cato's proprietary security engines. Your work outcome will feed Cato Cloud security products and protect thousands of enterprises around the globe. In your day-to-day, you will be tasked with researching and analyzing exploits and post exploitation tools and techniques used by attackers, as well as performing meticulous data analysis - harnessing Cato's big data warehouse - to produce the best possible prevention logic. In addition, each member in our team of six engineers has their own long-term projects, ranging from developing automation and internal tools, researching a complex issue, or contributing to new product feature developments (which there are many). Joining Cato is an excellent opportunity for network security enthusiasts who are passionate about the future of Networking and Security.

Responsibilities:

Research and analyze new threats and develop product content such as IPS signatures and logic to provide the best protection for Cato’s customers.

Enhance product accuracy and its ability to detect new threats in the dynamically changing security landscape.

Monitor and analyze your work to maintain 0 false positive rate.

Utilize Cato Data Warehouse with big data technologies to support your work.

Requirements:

At least 2 years of hands-on experience in the cybersecurity industry.

Excellent knowledge of networking architecture and protocols (TCP/IP, DNS, SSL, HTTP, SMB, etc.).

Understand the cyber-security landscape, and common attack scenarios: Exploitation, Malware C&C, Post exploitation, Phishing, Network scans, etc.

Experience ( Hands-on ) with Wireshark and PCAP analysis.

Experience with at least one scripting language, such as Python or PowerShell - a must.

Experience with signature development for IPS and Firewall - Advantage.

Analytic spirit: define a thesis and validate it based on in-depth analysis and technical facts.

Excellent English and communication skills.

Team player, responsible, independent, and well-organized.

B.Sc. in Computer Science, Information technology or Mathematics.

*We operate in a hybrid model, requiring three days in the office.

*Location: NR7, Náměstí republiky, Prague, Czech Republic.