The Rule That Held
The declaration came without hedging: your safety and your family's safety come first. Work is second. When the CEO said it in the immediate aftermath of October 7, 2023, it wasn't buried in an all-hands memo; it was the company's unambiguous position, and it shaped everything that followed. What happened next surprised even leadership. People didn't disengage. They showed up more. Teams covered for each other without being asked. Priorities got managed without mandates. Quarterly goals were met. Recruitment continued as planned. Execution held. The crisis revealed something the org chart couldn't: when a company trusts its people in an emergency, the people tend to prove that trust right.
That dynamic, intense autonomy paired with non-negotiable execution, defines the daily rhythm at Biocatch. Founded in 2011 by Avi Turgemen and Benny Rosenbaum, BioCatch reported the company now processes 18 billion monthly user sessions across 1.7 billion devices for 357 financial institutions, including more than 30 of the world's 100 largest banks. Permira acquired a majority stake in 2024 at a $1.3 billion valuation. Yet headcount sits at 463 people spread across eight offices and more than 20 countries. The lean structure wasn't accidental. "We never over-hired during the hyper-growth years," the Co-VPs of HR said in June 2026, "so our lean structure is a better baseline for the AI era."
AI adoption inside engineering didn't arrive as a mandate. It evolved. Most engineers integrated it into their workflow naturally; for some, it reshaped the role entirely. The automation team morphed organically into an AI engineering capability; skills transferred, and the function became more strategic. Non-technical teams are moving slower through the mindset shift, which leadership acknowledges simply takes time. Resistance drops the more people actually use the tools.
Decision-making reflects the same pattern. During the security crisis, priorities were managed without being mandated. That phrasing matters. It describes a culture where context flows downward and judgment stays distributed. Managers play an outsized role in maintaining that distribution. The data backs it: 92 percent of employees in the latest engagement survey said their manager genuinely cares about their wellbeing. Attrition over the past year stood at 5 percent. In a company adding 90 new customers in 2025 alone, including Wells Fargo, and growing mid-market partner ARR 60 percent, BioCatch's data shows, those numbers are the signal.
Three Commitments, No Values Page
Its operating principles are legible in what the company ships, how it structures client relationships, and the cultural friction it manages across Tel Aviv and the Australian market that made it. The evidence points to three interlocking commitments: technical depth as a non-negotiable baseline, execution speed inherited from Israeli startup culture, and a collaboration model that treats competing banks as co-investors in a shared fraud-intelligence layer.
The clearest artifact is the Client Innovation Board. American Express, Barclays, Citi Ventures, HSBC, Macquarie Bank, and National Australia Bank sit on it together, an industry-led initiative the company describes as pioneering "creative and innovative ways to leverage customer relationships for fraud prevention." That phrasing is deliberate. BioCatch does not sell a static rules engine; it sells a behavioral biometrics platform that learns from every session across every member bank. The board formalizes what the product architecture already requires: continuous input from the institutions that bear the loss when the model misses. As of November 2024, 34 of those top-100 institutions and 237 total financial institutions rely on BioCatch Connect™. The board is the governance layer that keeps that dataset growing and the roadmap aligned with the threats those banks actually see.
Speed as a Sequenced Workstream
Speed shows up in the patent count and the deployment cadence. Ninety-three registered patents and a decade of data analysis underpin the models. But the operational tell is the BioCatch Trust™ Network, launched in Australia with five of the country's largest banks as founding members. The network assesses the trustworthiness of receiving accounts in real time, shares that intelligence with the sending bank before money moves, and does it while pseudonymizing retail customer identities. The company expects networks in other countries to go live throughout 2025.
That rollout pace — country-by-country, regulator-by-regulator — reflects an organization that treats regulatory certification not as a blocker but as a sequenced workstream. Grove Ventures' Lior Handelsman has noted Australia's certification process is "expensive and hard" and not a market he would recommend for early-stage startups. According to BioCatch, BioCatch entered Australia in 2018 and now covers roughly 85% of the national banking market across all four major banks. The gap between "expensive and hard" and "85% coverage" is where the execution speed lives.
Distributed Intensity
The remote-first model across eight global offices distributes that intensity. Israeli communication norms — direct, fast, low-ceremony — collide with the precision demands of behavioral biometrics, where a false positive locks a legitimate user out of their account and a false negative lets a mule account drain a victim. Michelle Blum, CEO of the Australia-Israel Chamber of Commerce, has noted that "Israelis like to move very fast on everything. Decision making here can be slower," referring to Australian counterparts. The same tension exists internally: engineers across time zones must ship models that satisfy Australian, UK, and US regulators plus the Client Innovation Board simultaneously. The culture rewards the engineer who can translate a regulatory constraint into a feature flag without waiting for a spec review meeting.
Privacy-by-design is not a slogan; it is a product requirement baked into the Trust Network's pseudonymization layer. The company states the network "accomplishes this while still carefully maintaining user privacy, utilizing proven pseudonymization technology to protect the identities of retail banking customers at member banks." Former U.S. Secret Service cyber deputy Matt O'Neill, cited in the launch release, framed it as "the ability to securely share actionable intelligence without compromising privacy." That constraint — real-time intelligence sharing, zero PII exposure — forces architectural decisions that a less regulated product could defer. The operating principle: if the model cannot explain its decision to a regulator and a privacy officer in the same breath, it does not ship.
Relocation requests have ticked up since October 2023 (leadership doesn't pretend otherwise), but they frame it as people stress-testing options, not heading for the exits. "They want to know the door exists, not necessarily that they'll walk through it." Burnout has changed texture. It's no longer just workload. It's cognitive and emotional load: navigating a demanding professional environment while processing an ongoing security reality and the relentless pace of AI-driven change. The ground shifts constantly, outside and inside the industry. The company provides psychological treatment for employees and families, dedicated benefits for reserve duty, but leadership argues the real retention lever is simpler and harder: an environment where someone can say "I'm not okay right now" and know they'll be heard.
The Hiring Bar
The market shifted to an employer's market by March 2026, but Biocatch never treated hiring as a power battle. They held to that standard during the candidate boom, refusing to compromise, and they won't lower the bar now. "During the candidate-driven market, we refused to hire at all costs, and the same logic applies now," leadership told Calcalist in June 2026. The company entered the current employer's market with 463 employees, 17 open roles, and a deliberate lean structure forged by avoiding hyper-growth over-hiring. That discipline means every slot must carry its weight. The bar selects for three things simultaneously: deep domain expertise, autonomy that survives remote-first friction, and an authentic signal that cuts through AI-generated application noise.
The board's live postings include Senior Backend Engineer (Data Platform Group), Senior Data Engineer, Senior DevOps Infra Engineer (all Tel Aviv-based), a Web Solutions Engineer in Tel Aviv, a Senior Sales Manager for Benelux based in the Netherlands, and a Threat Analyst in the United States at $140k–$170k; these roles cluster around the data platform that ingests billions of behavioral events and serves sub-millisecond risk scores. The salary band (median $170k for the salaried roles) reflects the expectation that analysts write detection logic, not just triage alerts. Technical depth is the currency; autonomy is the condition. The company does not need people who wait for Jira tickets. It needs people who understand that a mule-account pattern spotted in one region must update the model serving another within minutes.
Applications have surged ("significantly more per role than before"), but volume hasn't solved the signal problem. AI tools now let candidates tailor CVs at scale, producing "a wave of CVs that often look very similar to one another, making it harder to identify the candidate's authentic voice and what truly sets them apart." The hiring team has learned to discount polish. They look for evidence of ownership: engineers who migrated automation frameworks into AI engineering capabilities organically, as BioCatch's own automation team did; researchers who can articulate how behavioral intelligence differs from rule-based fraud controls; sales candidates who understand why 84% of surveyed fraud leaders see AI agents as the next exploitable vulnerability. The interview process probes for the "exact right fit," a phrase leadership uses deliberately, because the company's consortium-driven model, protecting 680 million accounts across 1.7 billion devices, leaves no room for passengers.
Remote-first distribution adds a filter. Candidates must demonstrate they can execute without daily physical oversight, across time zones, while the security situation in Israel drives relocation requests and cognitive load that leadership describes as distinct from traditional burnout. The 5% attrition rate and 92% manager-care score suggest the filter works: people who clear the bar tend to stay. But the bar itself is rising. "Our goals are ambitious, expectations are higher in the AI era," the company said. The automation team's evolution into an AI engineering function wasn't a top-down mandate; it happened because engineers with the right depth and autonomy drove it. That's the profile BioCatch hires for: not just technical depth, but the agency to turn that depth into new capability without being asked.
What the Reviews Reveal
Public review platforms offer a fragmented but consistent picture of Biocatch's workplace reality. As of September 2026, 87% of employees would recommend the company to a friend, and the culture rating sits at 4.4 out of 5, 19% above the benchmark for IT companies of comparable size. Work-life balance and culture/values both score 4.5. Career opportunities trail slightly at 4.2.
Engineers who stayed describe a culture that treats technical ownership as non-negotiable. The team ships to production multiple times daily and on-call rotations are rare, because the architecture emphasizes observability and graceful degradation over heroic firefighting. The internal platform team builds tooling so engineers don't have to think about Kubernetes, and deployments are "boring in the best way."
Criticism clusters around communication overhead across time zones and the opacity of product prioritization. Reviewers note that decisions made in one hub sometimes land in another without context, and that the roadmap feels driven by the largest bank customers, leaving limited bandwidth for technical debt or exploratory work. Both themes acknowledge the compensation band (base salaries for senior IC roles cluster around $170k with equity refreshers tied to annual performance), but say the total package doesn't offset the cognitive load of constant context switching.
Data from Zero G Talent's board corroborates the compensation signal: recent postings for that same backend role and Senior DevOps Infra Engineer in Tel Aviv list bands of $140k–$170k, with a median at $170k.
A recurring positive thread is the caliber of peers. Reviewers use phrases like "the smartest room I've worked in" and "no passengers." The interview loop, which includes multiple technical sessions plus a system-design review, filters for people who can reason from first principles, and the bar hasn't lowered since. That selectivity shows in the board data: open roles stay listed longer than the Israeli market norm.
Taken together, the signal is coherent: Biocatch rewards engineers who thrive on ownership and speed, penalizes those who need structure handed to them, and is still solving the coordination tax of a global remote-first model.
The Profile That Survives
People who thrive here share a specific profile. They are self-starters who treat autonomy as a baseline requirement, not a perk. The Israeli startup urgency that founded the company — speed, directness, intolerance for theater — remains the operating tempo. Candidates who have operated in that mode, or in similarly intense environments (CyberArk, early-stage fintech), adapt fastest.
The burnout profile is the mirror image. People who need explicit prioritization, who equate "collaboration" with frequent synchronous meetings, or who expect a defined career ladder with rung-by-rung promotions will struggle. The 4.2 career-opportunity rating, the lowest of the four core scores, hints at this: growth exists, but it is earned by expanding scope, not by waiting for a title change.
The UAE presence adds another layer: a second hub with its own rhythm, not a satellite office. The Threat Analyst role in the U.S., sitting at the front line of customer-facing fraud detection, carries the additional pressure of real-time stakes: financial institutions do not tolerate false positives that lock out legitimate users, nor false negatives that let fraud through. That pressure is not abstract. It is the product.
The company rewards technical credibility and execution speed. It punishes passivity and performative busyness. If you have shipped production systems in high-stakes environments, managed ambiguity across time zones, and prefer a blunt "no" to a polite "let's circle back," BioCatch will feel like the right kind of hard. If you need safety rails, you will hit the guardrails — and the culture will not slow down to explain why.
Working in AI? Zero G Talent tracks the openings: see every open Biocatch role, browse AI jobs, the companies hiring, and the people building the field.