Candidate must be willing to work onsite three days a week in our Tel-Aviv, Israel office.
Join Lenovo’s Physical AI Security team to develop security technologies for intelligent devices, including smart cameras, ambient systems, robots, and autonomous platforms. You will build runtime protection that detects compromise, identifies misuse of device capabilities, and enables controlled containment and recovery.
This role combines security research with embedded Linux engineering, behavioral detection, and an understanding of how software, AI, and device commands affect physical operation.
Job Responsibilities:
- Develop lightweight security agents and SDKs for Linux-based devices, balancing security coverage with CPU, memory, latency, and connectivity constraints.
- Collect and correlate process, network, file-access, and privilege events with application activity, AI-driven requests, and device commands to reconstruct attack chains and assess operational impact.
- Develop detection logic for exploitation, privilege escalation, persistence, unexpected execution, and abuse of legitimate services or identities to perform unauthorized operations.
- Define application capability profiles and enforce permitted access to resources, services, and control interfaces. Identify unauthorized expansion of privileges across software and configuration updates.
- Build mechanisms to revoke access, restrict commands, contain compromised components, and restore approved operation while respecting essential device functions and, for robots, control and safety requirements.
- Develop secure telemetry pipelines, incident correlation, and investigation timelines that connect device activity, detection evidence, response actions, and observed outcomes.
- Reproduce realistic attacks on embedded and robotic systems, evaluate detection bypasses, and measure false positives, response effectiveness, resource overhead, and operational disruption.
- Collaborate with product teams and OEM partners to embed reusable protection into different platforms, including robotics through ROS 2, application APIs, and command interfaces.
Minimum Requirements:
- B.Sc. in Computer Science, Computer Engineering, Electrical Engineering, or equivalent practical experience.
- Strong C/C++, Python, and Linux systems programming, with experience developing production software for embedded or resource-constrained environments.
- Strong understanding of Linux internals, including processes, permissions, capabilities, namespaces, system calls, networking, and inter-process communication.
- Experience in cybersecurity engineering or research involving embedded systems, Linux platforms, IoT devices, or cyber-physical systems.
- Hands-on experience with runtime instrumentation or enforcement mechanisms such as eBPF, Linux Security Modules, seccomp, or Linux auditing, including their platform dependencies and limitations.
- Ability to translate threat models and attack techniques into practical telemetry, behavioral detections, enforceable policies, and reproducible security tests.
- Experience building reliable agents or services, including secure communications, device identity, configuration management, offline operation, and performance optimization.
- Experience with event processing, detection pipelines, or security investigation tooling, with an emphasis on explaining alerts and managing incomplete evidence.
Preferred Requirements:
- Familiarity with robotics middleware, ROS/ROS 2, AI inference pipelines, or device-control interfaces is an advantage.
- An M.Sc. or Ph.D. with relevant research experience is an advantage.
What we offer:
• Disability Insurance
• Health Insurance
• Pension Fund
• Retirement Fund
• Study Fund
• Meal Allowance
• Employee Referral Bonus
• Employee Assistance Program
• 10% discount on Lenovo products
• Internal e-learning platform
Please note that the office is located at 121 Menachem Begin Road, Tel Aviv, 61st floor, in the POINT office complex. As per our office policy, you will be required to visit the site at least 3 times a week.
#DTL
