דרושים » אבטחת מידע וסייבר » Application Security Expert

As an Application Security Engineer, you will play a pivotal role in safeguarding our products against security threats and vulnerabilities. You will work closely with our development teams to integrate security best practices into the software development lifecycle, conduct thorough security assessments, and implement robust security measures to protect our applications and data.
Key Responsibilities:
Collaborate with development teams to integrate security controls into the software development lifecycle (SDLC).
Conduct regular security assessments, including code reviews, vulnerability scans, and penetration testing, to identify and remediate security vulnerabilities in applications.
Design and implement security solutions to protect against common security threats, such as SQL injection, cross-site scripting (XSS), and authentication bypass.
Conduct threat modeling and architecture security review.
Develop and maintain secure coding standards and guidelines for application developers.
Monitor and analyze security incidents and provide timely response and resolution.
Stay current with emerging threats, vulnerabilities, and industry best practices in application security.
Participate in security incident response activities and contribute to post-incident reviews and remediation efforts.
Collaborate with cross-functional teams to ensure security requirements are effectively integrated into product development processes.
Deliver secured development training to developers.

We are looking for an exceptional Senior Security Engineer to join our growing team. For the first 6 months you will:
Bolster and develop our defensive security capabilities, identifying advanced threats to us, developing and implementing countermeasures
Responding to incidents and conducting investigations as events happen through analyzing logs and various other sources (ex: AWS Guardduty, SecurityHub, Detective, etc.)
Engineer and automate custom detection and response capabilities to combat malicious and/or unwanted behaviors within the environment
Stay up to date with Tactics, Techniques, and Procedures (TTPs) that may apply to us and define and implement mitigation techniques to improve our overall risk posture
You will be part of a new product security team responsible for building, supporting, enhancing and improving our security frameworks, tools, processes and methodologies used across our SDLC and Runtime environments.
In this role, you will also be responsible to:
Conduct in-depth vulnerability assessments and security auditing of assets
Develop and improve processes for incident detection and the execution of countermeasures
Contribute to the creation and upkeep of run books to handle security incidents
Administer security configuration for threat management platforms for large-scale environments, including security orchestration, automation, and response (SOAR) and security information and event management (SIEM) tools
Contribute and showcase as a SOAR platform used within our Security Operations
Provide guidance on security architecture for threat detection and response systems used as a part of the overall security operations
Consult with our security compliance team during security audits to demonstrate our technical security capabilities
Collaborate with Product Management and Development team members to enhance our Security program
Take part in the Security Operations on-call rotation, including leading all incident response efforts and documentation during your rotation

SysAid, a pioneering SaaS firm in Enterprise Service Management, is celebrated for innovation and industry leadership. Featured in Gartner's ITSM Magic Quadrant and honored with AWS's Rising ISV Star Award, we serve 4,000+ clients spanning 140 countries, impacting over 9 million daily users. Our commitment? Revolutionizing Enterprise Service Management with Generative AI. We seek a Product Security Specialist for our growing security team. In this role, you’ll collaborate with our software development and DevOps teams to secure SysAid products, CI/CD infrastructure, and production infrastructure. Key Responsibilities:
* Review and be able to reproduce reported vulnerabilities whether they were reported by customers or by penetration test results.
* Assist developers in finding remediation for security bugs and vulnerabilities.
* Plan detection use cases and deliver detection capabilities to identify attack tactics, techniques, and procedures.
* Play a key role in the security incident response process.
* Plan and manage penetration tests and vulnerability assessments with our Security contractors.
* Develop, promote, and monitor the adoption of sound cloud security practices.
* Take ownership of vulnerability management and patching policies.
* Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to the SysAid infrastructure.
* Collaborate with engineering, DevOps, and IT teams to ensure security is at the heart of what we do.
* Lead threat modeling exercises around cloud-native, SaaS, and cloud-first technologies.
* Mentor and provide technical leadership to other members of the Security team.
* Manage vulnerability disclosure processes.

We are looking for talented security researchers, people who look at the world differently, who explore, "hunt" and live to beat the system and challenge it. People who are in pursuit of outsmarting the malware and overcoming it.
Youll be part of an exceptional research team that will ensure we provide the best detection, protection, and visibility capabilities to our customers at any given time. The team leads the vulnerabilities, exploits and anti-tampering research for all of our security products under all platforms. The team does it by performing in-depth analysis and research of vulnerabilities and exploits, while also being responsible for closing the loop through the development and deployment of detection assets to millions of endpoints across the globe. Youll be working closely with other detection teams to ensure our customers get the best security products they can. Your time will be focus on research and detection & protection assets.
Research
Assessing and evaluating our detection and protection coverage against in the wild vulnerabilities, exploits, and anti-tampering techniques.
Closing the loop by conducting research to discover and implement innovative solutions for these security challenges.
Initiate and propose new features and capabilities, leveraging personal experience and expertise in security research.
Perform strategic long-term research projects that involve deep research of OS internals, new detection techniques, and novel threats.
Continually learn about emerging vulnerabilities, exploits, threats, techniques, and new technologies on a regular basis.
As a security research expert, youll collaborate with many teams to help and support their work using your expertise, knowledge, or research.
Detection And Protection assets
Youll be responsible for developing the new detection content for all of our engines that will improve our detection, protection, and visibility, reaching all of our millions of endpoints across the globe.
Youll be responsible for the quality and accuracy of the deliverables that youll create and be accountable for them.
Youll create, maintain, and improve existing infrastructure and tools that are being used by the team.
You will also be encouraged to write white papers, blogs, and articles (but only if you wish to).

We are growing and is looking for a talented Threat Hunting Expert to join the company to enable our growth by investigating and hunting for sophisticated threat actors in the cyber security world.
The SOC Platform intelligently correlates events from every organizational data source and security solution, revealing undetected threats in modern enterprises and allowing security analysts to triage and investigate security events rapidly.
Team Axon comprises unique cyber security talents, who are responsible for proactively hunting for advanced threat actors over different attack platforms in our customers' environments, and for the investigation of sophisticated attacks. The team exhibits bleeding-edge threat hunting and research skills, which are applied over Enterprise, Cloud and SaaS platforms.
RESPONSIBILITIES:
What youll do:
Engage in continuous threat hunting practices and reveal below the radar attacks which bypassed current traditional security solutions.
Serve as an expert to our customers, Investigating sophisticated cyber attacks on customers environments over enterprise, cloud and application platforms.
Be at the heart of the Cyber Security threat landscape and research the most recent attack techniques found in the wild.
Be the focal point in the ecosystem, working closely with R&D, AI and product teams.
Implement cutting-edge detection strategies, and develop innovative investigation methodologies that will boost our platforms effectiveness and efficacy.
Be at the forefront of our mission and work closely with our customers regarding cyber security investigations and incidents detected in their environments.

we are looking for a Cyber Security Consultant to perform a range of expert level services. The successful candidates should have experience both as a security practitioner and security consultant, profound technological cyber knowledge and passion for cyber security. In addition, they should have a service approach, excellent communication skills and the ability to learn and work with the best in the field.

Main Responsibilities:

Evaluate the state of security, configurations, and security strategy, identifying gaps and opportunities and anticipating needs
Consult in cyber security engagements, including development of a cyber security plans and design implementation, and provide guidance on building security
Recommend cyber security strategies, policies, and procedures
Develop and support clients with internal training to assure deep understanding of fundamental cyber security practices, risks, and recommended mitigation tactics
Create expert-level deliverables, and present results of the assessment to a broad range of clients and design plans to address specific cyber risks and vulnerabilities
Collaborate with the cyber experts team in the development and implementation of cyber assessment tools, services, and best practices

We're looking for a Talented Security Researcher for our Threat Research Group offensive team, the RED TEAM.
Our team consists of elite researchers, analysts, and data scientists dedicated to advancing cybersecurity. We specialize in investigating and mitigating application, DDoS, database, and cloud-based attacks. Our work involves developing innovative algorithms for new security products, driving innovation forward, and establishing thought leadership in the cybersecurity field.
Key Responsibilities:
Contributions to the security community (public research, bug bounty, blogging, presentations, etc.).
Great presentation skills.
Experience in developing automation tools for vulnerability discovery, including fuzzing and related techniques an advantage.
Experience in conducting code reviews for vulnerabilities in large codebases an advantage.
Reported valid vulnerabilities to Google, Meta, Microsoft, or a similarly sized company an advantage.

We are looking for a Senior Product Manager who can help us design, build and ship industry defining products to help application security and developers build more secure cloud applications.

Your Impact

Build and launch enterprise class products throughout the entire product lifecycle - collect customers feedback and hear their need, prioritize features and trade offs, write the product requirements and work closely with engineering group to deliver the roadmap
Lead core pillars within Prisma cloud CAS and grow them to new horizons by bringing innovative and disruptive approaches, and ensure that they can be effectively launch
Working effectively with all areas of the organization in a global company, from engineering to sales
Understand DevOps and Application security practitioners, often being able to directly relate to and understand use cases
Work closely with our customer success, marketing and sales teams on supporting existing customers, identifying common user problems and taking the solutions you define to market
Understand DevOps and Application security practitioners, often being able to directly relate to and understand use cases

We are looking for an Experienced Penetration Tester at Advanced Security Center.
Job Description:
The work involves simulating attack scenarios against various applications, infrastructure, and network solutions on a wide range of platforms and technologies. In addition to penetration testing and forensic services, we also offer consulting services, secure design and development services, and training.
We provide an extensive training program that enables programmers, infrastructure, and network engineers to transition into the security profession and develop a long-lasting career path.