לוח משרות דרושים מומחה אבטחת מידע / סייבר במרכז

This role provides a unique opportunity to join a team with strategic importance to protecting our customers from emerging threats and novel attack methodologies in both cloud and Linux based environments. You will stay ahead of the curve with regards to the threat landscape and your research will directly impact the direction of the team and our product.

If you have a strong passion for security and technology, have an interest in supporting engineering projects, and want to gain real-world experience in dealing with advanced threat actors targeting cloud environments, we have a role for you!


Your contributions will enable continuous improvement of CrowdStrikes cloud detection capabilities ensuring that our customers can be secured with the most advanced security measures in place.



What You'll Do:

Develop, implement and optimize threat detection rules tailored to cloud runtime environments. Aim to detect and respond to activity as early in the killchain as possible.

Rapid response to potential malicious campaigns or extensive exploitation cloud runtime resources post vulnerabilities disclosure.

Conduct proactive threat hunting exercises to identify potential security gaps and emerging threats within cloud environments.

Track and present threat detection findings, including recommended strategies or possible product improvements.

Collaborate with cross functional teams: Work closely with various teams, including OverWatch, engineering, product management, detection engineering, and threat intelligence to drive cloud detections in the Crowdstrike falcon platform.

Stay abreast of the latest threat landscape and cloud security trends, continuously updating detection strategies to address emerging threats and vulnerabilities.

We are looking for a Leader to join our SOC Team. As a technical leader, you will on-going manage the ongoing shifts.

You will technologically manage the ongoing shifts that will include team members from multiple departments, whose goal is to technologically lead the team that responds to incidents created by internal and external systems.

In addition, This is the leading team of the SOC (Shift Managers) the team that takes part in advanced investigations, the technological leader, and the main source of knowledge in the room.

A passion for Security Operations with strong skills in critical thinking, communication, and mentoring, an inquisitive nature, and excitement to be part of our are musts.

Responsibilities
Professional guidance and accompaniment of a central team
Preservation and development of investigative and monitoring methods
Collaboration with other teams in the company with an emphasis on the professional aspect

We are looking for an experienced Senior SOC Analyst to join our SOC team.

Responsibilities
Being an active part of our SOC monitoring team.

Part of the daily tasks include investigating security-related cyber incidents while using a wide variety of different security systems.

The investigations are mostly independent and require strong analytics and creative thinking while using a wide variety of intelligence sources alongside common security tools.

Writing investigation reports (tickets), and direct interaction with clients / end-users via email or phone.

We are seeking a highly skilled and experienced Technical Product Expert& SME with a deep understanding of security principles in on-premise and cloud environments, ideally with some offensive security background. The ideal candidate will have a strong background in leading technical and non-technical teams and extensive knowledge of security frameworks, remediation methodologies, and security operational models.



Responsibilities:

Provide technical guidance, mentorship, and support team members to ensure high-quality service delivery.
Methodological mindset to create and maintain security and product usability processes and enforce them with internal customers such as CSMs, SEs, and the product team
Collaborate with product and RND about product usage and feedback from the field
Continuously monitor, analyze, and report on key performance indicators (KPIs) of the product.
In escalated client meetings, provide product matter expert remediation insights, recommendations, and security best practices.
Stay abreast of industry trends, emerging technologies, and best practices in automation to provide strategic insights and recommendations for enhancing technical solutions.

We are seeking a highly skilled and experienced SOC Manager to lead the development and operation of our Security Operations Center. This role involves building a new SOC team, adopting and deploying SIEM (Security Information and Event Management) technology, and managing incident response in a hybrid environment (on-prem/cloud).

Responsibilities:

Team Recruitment and Leadership: Recruit and mentor a team of 2-3 SOC analysts. Lead, develop, and evaluate team performance.
Technology Selection and Deployment: Identify and deploy appropriate SIEM technology to enhance our cybersecurity posture.
Alert and Log Management: Map out all necessary alerts and logs for continuous monitoring and threat detection.
Alert Classification and Prioritization: Develop a system to classify and prioritize alerts based on severity and impact.
Hybrid Environment Monitoring: Oversee the monitoring of both on-premises and cloud-based systems.
Automation and Process Improvement: Implement automation strategies to enhance the efficiency and effectiveness of the SOC operations.
Incident Response Management: Lead and manage the incident response process, ensuring swift and effective resolution of security incidents.

We are looking for a highly skilled and motivated software engineer who, along with the rest of our excellent software engineers in the group, will be responsible for developing the core component of the product while adhering to company standards and processes.

You will be working closely with other members of the group on a regular basis as well as other groups in the company from time to time. Communication is key!

Duties will include (but are not limited to) designing and implementing the newest

and most popular cyber-attack techniques that are relevant to all of customers.