לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 505 משרות

we are looking for a Research Infra Engineer.
As a Research Infra Engineer, you will build and operate the shared platforms that power cyber research: data ingestion, connectivity to internal/external systems, scalable analysis environments, and self-serve tools which allow the team moving faster.
Youll partner closely with CyberAI researchers to translate research needs into reliable, secure, cloud-deployed capabilities used across the group. Your goals are to reduces research-toil, improves reproducibility and code quality, and accelerates the path from prototype to shared capability.
The Responsibilities:
Design, implement, and iterate on internal platforms that support research workflows (e.g., data ingestion, enrichment, indexing, search, labeling, evaluation harnesses, experiment tooling).
Develop durable pipelines and connectors to bring in and normalize research data sources.
Create reusable libraries, templates, CLIs, and services that enable researchers to run analyses and experiments safely and repeatably.
Own deployments, reliability, observability, access control, and cost/performance of the research stack so its usable by all researchers.
Work closely with CyberAI researchers on the development of next-generation artificial cyber researchers and AI-driven analysis capabilities.

Were growing and looking to hire an Information Manager, Security Operations Engineering who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
we are a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
As the Information Security Operations Manager, you will lead our front-line defense, monitoring, and incident response capabilities. You will manage a high-performing technical team responsible for protecting enterprise infrastructure, cloud environments, and emerging AI workloads.
This role requires a rare combination of deeply technical hands-on capability and sophisticated leadership. Beyond managing technical systems and engineering staff, you will serve as the core liaison between Security Operations (SecOps) and key business stakeholders-including software engineering, corporate legal, human resources, and executive leadership-to navigate complex incidents, manage risk, and foster a collaborative security culture.

Were growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
Claroty is a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise.
As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy.

What You Will Do:
Research and prototype novel approaches to application security that go beyond traditional AppSec tooling.
Build proofs-of-concept for advanced prevention, detection, triage, and remediation capabilities.
Design experiments and validate new security features through data-driven testing.
Partner with product and engineering to bring successful POCs into the core platform.
Evaluate and optimize LLM-based agents and model outputs for security use cases.

We are is seeking a motivated security researcher with excellent technical skills to join the Advanced Research Team (ART). Security Researchers within ART will be expected to apply a broad set of skills to support the Intelligence mission. ART is responsible for researching and publishing on topics related to information security, providing technical expertise to other teams within our Intelligence, developing tools to support analysts in their day-to-day duties, and collecting technical artifacts about adversary activity.

Aside from working on longer-term research and collection projects, ART security researchers will be required to provide unique solutions on short notice to serve ad-hoc needs by other teams within our Intelligence.

What Youll Do:

Develop automated solutions for collecting, processing and analyzing data at scale, e.g.

Vendor patch processing and analysis.

Identification of exploits in large file collections.

Identification of browser exploits.

Identification of malicious infrastructure.

Perform vulnerability research on a wide variety of targets, e.g.

Analyze vendor patches to identify vulnerabilities and develop proof-of-concept exploits.

Review evidence of malicious activities (e.g. log files, payloads) to confirm exploitation of 0-day and n-day vulnerabilities, identify root causes and reproduce exploits.

Identify new vulnerabilities in applications or products.

Collaborate across other teams Intelligence and beyond to.

Reproduce emerging vulnerabilities and provide actionable technical information.

Inform on information security topics.

Satisfy unique technical collection requirements.

Publish research results on the blog or at conferences.

We are looking for a highly motivated, self-driven, detailed-oriented, and experienced Senior Analyst dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world.

This role demands a solutions-oriented mindset, as you'll be expected to go above and beyond for customers by driving innovative outcomes. You'll collaborate across multiple teams to craft creative solutions, ensuring we exceed customer expectations and deliver exceptional value. You will leverage our CAO's extensive resources to provide advanced digital risk monitoring expertise and analysis to safeguard our customers' environments. You will develop a trusted partnership by helping your customer identify and operationalize timely, actionable, and relevant threat intelligence and threat hunt findings.


What Youll Do:

Serve as a trusted advisor who maintains ownership of dedicated customer accounts, delivering outstanding experiences that build trust and facilitate high levels of satisfaction across all organizational levels.

Research dark web data and tailor threat intelligence for CAO Elite customer based on their specific requirements and environment.

Prepare and deliver customer presentations relating to intelligence reports and dark web alerts on a regular basis.

Partner across CrowdStrike teams to develop and implement creative solutions that exceed customer expectations, focusing on delivering exceptional outcomes even when faced with complex challenges

Respond to customer requests relating to threat intelligence, threat hunting, and dark web monitoring.

Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

we are looking for a Principal Security Solution Architect.
The role: own technical and market presence across EDR/XDR, SIEM, and SOAR, from evangelism and thought leadership through to customer engagements and won deals.
Reports directly to the CTO. This is a new practice built from zero, not a slot in an established team.
Responsibilities:
Build Detection & Response practice around EDR/XDR, SIEM, SOAR, and security data lake architectures, starting from nothing
Define and run the full presales cycle, from demos and POC scoping through to a signed architecture
Establish public voice in the category through conferences, meetups, and technical content
Feed field intelligence back to the CTO office to shape portfolio and services decisions
Create the reference accounts that make a leading cybersecurity partner in Israel

We are seeking a security researcher, who enjoys unraveling the mysteries and unique patterns of corporate computing environments and attackers techniques in our enormous scale of signals and security mechanisms.

The job includes performing both low level and high-level research of attackers techniques, security mechanisms and controls, and data analysis over various types of telemetries.

Responsibilities include:
Conduct in-depth analysis and research security controls, attackers techniques and anomalous patterns.
Explore massive amounts of data to come up with new security posture insights.
Build and evaluate AI-for-Research-Productivity and AI-in-Production agentic workflows.
Work together with the different engineering teams to develop the code to support the research findings.
Collaborate with multiple product teams to design cutting-edge sensors, implement discovery & detection logics and validate their effectiveness using a data-driven approach.
Collaborate with product, engineering and research teams across the Microsoft threat protection suite to come up and implement innovative ideas into the product.

We are currently hiring for multiple Security Research positions across our Microsoft Defender Research teams in Israel. By applying to this unified pipeline, you will be considered for a high-impact role (at either the Security Researcher II or Senior Security Researcher role) within one of our specialized groups, including Autonomous Attack Disruption, Cloud Workload Protection, Identity Research, Posture Research, or Security for AI.

We are looking for passionate, highly skilled security researchers who thrive on the challenge of breaking complex attacker kill-chains. Leveraging Microsofts dominant market position and the worlds most massive telemetry set, you will have a direct, tangible impact on the security of the global economy. We are looking for researchers who want to see their findings transformed into production-ready protection, where the ultimate goal is not just to detect threats, but to prevent and stop them in near real-time.

Responsibilities

Investigate real world advanced attacker TTPs to develop high-fidelity protection signals, and robust logic across complex kill-chains.

Design and implement innovative capabilities that autonomously prevent, detect and disrupt sophisticated threats in near real-time.

Infuse deep security expertise into the analysis of massive telemetry sets using big-data query languages, reasoning over data to identify novel malicious patterns, and drive evidence-based research decisions.

Partner with engineering and product teams to share research insights, validate protection concepts, and push ideas forward into production-ready protection at a global scale.

Contribute expert insights to a strategic feedback loop by analyzing real-world attack data and telemetry to refine protection coverage and accuracy.

Required Senior Incident Response Security Consultant, Mandiant, Cloud (Hebrew)
About the job
As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management.
In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.
Part of Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
Responsibilities
Lead large, client-facing incident response engagements, examine cloud, end-point, and network-based sources of evidence.
Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations.
Build scripts, tools, or methodologies to enhance Mandiants incident investigation processes.
Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Seeking a highly motivated IT Internal Audit Manager to join our global Corporate Internal Audit team, focusing on IT Risks, Processes, Controls, and Enterprise AI Governance. The role involves conducting audits and advisory engagements, developing AI solutions for process review, and assessing risks related to AI and IT systems to support the company's rapid transformation.
Key Responsibilities
Lead technology audit and advisory engagements across various domains, including cybersecurity, infrastructure, applications, data management, IT transformation, and AI-related risks while advising on practical ways to strengthen governance, resilience, and risk management.
Drive governance and oversight of technology programs and emerging AI risks, including model governance, data governance and quality, privacy, security, and responsible AI.
Develop and implement audit methodologies to assess risks across the entire AI lifecycle, including model design, validation, explainability (XAI), bias, and the security posture of Generative and Agentic AI systems-while ensuring compliance with emerging regulations, ethical guidelines, and industry best practices.
Drive the integration of AI risk management into existing technology audit domains by providing expert advice on control design.
Promote innovation within the internal audit function by applying new tools and techniques, such as agentic AI, data analytics, and automation.
Collaborate with cross-functional teams, including Privacy, IT, Engineering, Finance and Infosec, to identify and address audit observations with timely corrective actions.
Lead research on technology risks and controls to formulate recommendations for process improvements and innovation.

The team is responsible for developing and improving our Linux anti-malware prevention. This includes having top-notch knowledge about the latest malware families in the wild, Linux internals, different attack frameworks and hacktools. As part of this, the team analyzes customer data and issues to prevent malicious activities in our customer's environment, and help to improve the product.
Key Responsibilities
Research and analyze malware and keep up-to-date on the most recent tactics and techniques used in the wild
Create behavioral-based protection that enhances our product's coverage
Leverage Palo Alto Networks massive collection network to identify coverage gaps and emerging threats
Assist in the design, research, evaluation and implementation of new security technologies and features
Work in close coordination with other teams, including both development and other research teams, as well as support, sales and other cross-functional teams.

Lead the design, implementation, and management of security controls across three critical domains: Endpoint Security, Identity & Access Management, and AI Security, safeguarding Palo Alto Networks' global infrastructure with a Zero Trust approach.
Key Responsibilities
Design, build and implement enterprise security capabilities to protect Palo Alto Networks global infrastructure
Develop strategies to maintain security architecture, prevent unauthorized access, and ensure identity governance across the enterprise
Establish, maintain, and enforce hardened security baselines for Endpoints, Identity, and AI tools
Lead AI security governance, define controls, policies, and threat models for safe enterprise adoption of AI tools and models
Evaluate and secure AI-related data flows, including prompt injection risks, model access controls, and data exfiltration vectors
Implement and manage Identity Security, Endpoint security, and Access Management capabilities with a Zero Trust approach
Design and enforce endpoint hardening strategies across managed and unmanaged devices, endpoint DLP controls, drive mobile security and BYOD posture management
Be the first customer for Palo Alto Networks products and provide practitioner feedback to the product teams
Perform threat modeling and security architecture reviews for complex enterprise systems, infrastructure, and third-party integrations
Work with Security Operations team to investigate identity and endpoint breach incidents, identify root cause and provide appropriate remediation or risk reduction plans
Collaborate with legal and governance, risk and compliance (GRC) teams to ensure adherence to Identity and data protection regulations
Evaluate ongoing practices and procedures, technical documentation, and diagrams for appropriate security measure maturity and effectiveness
Lead hands-on POCs and technology evaluations with rigorous benchmarks; champion adoption with a collaborative team mindset
Be a strong thought leader and clearly communicate and build support for your ideas.