לוח משרות דרושים הייטק אבטחת מידע / סייבר בהרצליה, לחיפוש זה נמצאו 44 משרות

Required Web Security Researcher
As a Web Security Researcher, you will:
Perform in-depth technical research of Android and iOS application architectures, using both static and dynamic techniques.
Deep dive into the network stacks and communication protocols used by mobile applications
Develop detailed, reliable Proofs of Concept (PoCs) for related solutions.

Required Technical Intelligence Analyst
As a Technical Intelligence Analyst, you will:
Conduct OSINT and technical research on mobile security, spyware, surveillance tools, cyber products, cybercrime markets, threat actors, companies, individuals and industry developments
Prepare clear analytical outputs, including company profiles, technical summaries, market overviews, incident analyses, timelines, trend reports and strategic briefs
Research corporate structures, founders, executives, investors, customers, partnerships, acquisitions, legal issues, sanctions and regulatory developments
Analyze mobile-related products, technical claims, infrastructure, capabilities and market movements to identify trends, red flags, intelligence gaps and signals.

Required Threat Hunting and IR
As a Threat Hunting and IR, you will:
Proactively hunt threats, contain breaches and reduce organizational impact
Investigate, analyze and respond to security events and incidents, performing in-depth technical analysis to determine root cause and impact
Design, develop, and maintain security detections, alerts and monitoring capabilities across enterprise and cloud environments
Perform security assessments and red team exercises
Conduct network, protocol and technical research to identify emerging threats, attack techniques and defensive opportunities
Analyze network traffic, system logs, endpoint telemetry and security events to identify suspicious activity and security gaps
Conduct threat intelligence and OSINT research using internal and external data sources to identify threats and improve detection capabilities
Partner with Engineering, Infrastructure, and Architecture teams to embed security-by-design principles into new products and services
Develop automation and tooling to improve security monitoring, investigations and operational efficiency.

Required Technical Project Manager
As a Technical Project Manager, you will:
Plan, manage and lead complex technological projects to ensure solution delivery within the required standards
Define, improve and implement organizational processes and procedures in an agile environment
Act as a central point of contact for internal and external stakeholders, ensuring alignment across scope, schedule and quality expectations
Building work plans: milestones, timelines, dependencies and risks
Foster a culture of innovation, continuous improvement and technical excellence
Coordinate work across multiple technology teams
Manage the status of ongoing projects, identify blockers and drive solutions
Ensure processes and action plans are in place to meet predefined goals.

We are seeking a security researcher, who enjoys unraveling the mysteries and unique patterns of corporate computing environments and attackers techniques in our enormous scale of signals and security mechanisms.

The job includes performing both low level and high-level research of attackers techniques, security mechanisms and controls, and data analysis over various types of telemetries.

Responsibilities include:
Conduct in-depth analysis and research security controls, attackers techniques and anomalous patterns.
Explore massive amounts of data to come up with new security posture insights.
Build and evaluate AI-for-Research-Productivity and AI-in-Production agentic workflows.
Work together with the different engineering teams to develop the code to support the research findings.
Collaborate with multiple product teams to design cutting-edge sensors, implement discovery & detection logics and validate their effectiveness using a data-driven approach.
Collaborate with product, engineering and research teams across the Microsoft threat protection suite to come up and implement innovative ideas into the product.

We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI.

We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsofts dominant market position and the worlds most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time.

Responsibilities

Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains.

Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time.

Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions.

Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale.

Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy.

We are seeking an MDR Security Engineer to own and scale the automation layer that powers our global MDR operations. This role is responsible for building and operating production-grade automation systems that reduce manual workload, improve detection quality, and enable consistent, high-quality incident response.
The ideal candidate is a hands-on engineer with strong experience in SOAR platforms, security operations, and automation design, capable of driving measurable improvements in efficiency, reliability, and response outcomes across a high-volume SOC environment.
Responsibilities
Upkeep the design, development, and lifecycle of SOAR playbooks, workflows, and integrations across the MDR platform
Build and operate production-grade automation systems supporting alert triage, enrichment, investigation, and response
Define and drive automation strategy by identifying high-impact, high-volume SOC processes and scaling them through automation
Develop integrations across SIEM, EDR/XDR, identity, cloud, and ticketing systems using APIs and scripting
Partner with MDR analysts, IR, threat hunters, and engineering teams to translate operational workflows into scalable automation
Improve detection and response quality through automation of enrichment, investigation, and containment workflows
Contribute to incident response and RCAs by delivering tooling that improves investigation speed, accuracy, and consistency
Evaluate and implement new automation capabilities, including AI-assisted workflows and data-driven decisioning
Monitoring, Metrics & Reliability Ownership
Define and own automation KPIs, including:
Automation coverage (% of alerts handled or augmented)
MTTD / MTTR improvement
False positive reduction and signal-to-noise improvement
Analyst time saved and throughput increase
Build and maintain dashboards and reporting to measure automation impact on SOC performance and SLAs
Ensure production reliability and stability of automation systems, including:
Monitoring workflow success/failure rates and execution latency
Tracking integration and API health, errors, and retry behavior
Implementing logging, alerting, and observability across automation pipelines
Continuously optimize workflows based on data, feedback, and operational performance to ensure consistent 24/7 MDR operation.