לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 504 משרות

We are seeking a GRC Specialist (Governance, Risk, and Compliance) to join our growing GRC Team. This is a fantastic opportunity to be part of a growing team and support the company as it grows and matures. If you're a team player, self-driven, creative thinker, passionate about cybersecurity, and capable of blending a process-oriented mindset with a tech-oriented outlook, we are looking for you!

As a GRC specialist you will...
Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements.
Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the Sales Team to efficiently respond to compliance inquiries from prospective and existing customers.
Collaborate with cross-functional teams to support and enhance the overall GRC program.
Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards.
Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly.
Implement improvements and updates to the program, based on regulatory changes and customer requirements.
Participate in risk assessment and risk management processes.

. We are looking for an experienced malware researcher to join the team. As a Malware Researcher , you will perform research on source code, compiled code, and various software supply chain attacks. The position requires proven experience in security nomenclature and an understanding of both high-level and low-level attack
As a Malware Researcher you will...
Research malicious code in public repositories from various coding languages and technologies.
Define and implement ways to automatically detect malicious code in open-source software.
Write technical reports and outward-facing publications regarding all research subjects mentioned above.

we are building an AI-powered reverse engineering agent. As a Security Researcher, youll help shape how the system understands real-world binaries, by reversing complex targets, finding where automation breaks, and turning that insight into product capabilities.
This is a hands-on research role with direct product impact: your work will influence accuracy, explainability, and trust in the results we deliver to security teams.
What Youll Do
Reverse engineer complex binaries and large real-world codebases
Analyze malware samples and vulnerability-relevant behavior (as needed)
Identify edge cases and failure modes in decompilers and reversing workflows
Work closely with engineering to translate findings into robust product features
Validate accuracy and explainability of analysis outputs across diverse targets.

Were looking for a Field Security Architect to serve as a trusted advisor to our customers, helping them adopt our company and build secure-by-design practices across their SDLC.
This role sits at the intersection of Application Security, Customer Success and Advisory, and Product, with a clear focus on driving measurable customer value and security outcomes.
What youll do
Own the post-sale journey (onboarding → adoption → maturity) and drive retention & expansion
Act as a trusted advisor on secure design, threat modeling, and SDLC integration
Lead adoption of our company and translate security needs into actionable workflows
Deliver onboarding, workshops, and architecture/design sessions
Partner with Product, R&D, and Sales to drive customer impact and feedback
Proactively manage customer risks, challenges, and escalations
Drive measurable security outcomes and help customers mature their security programs.

Were looking for a Security Researcher to join our Research team and drive cybersecurity research at the intersection of Product Security and AI. You'll investigate security risks in modern software development, including AI-assisted and agentic workflows, and translate research into product capabilities, customer guidance, and industry insights.

Join our company, a stealth-mode cybersecurity startup building the next generation of Vulnerability Management and Exposure Management.
Were looking for a Senior AI Researcher (Cyber Security) to join our founding team and build AI-powered product capabilities that enable unprecedented effectiveness in vulnerability and asset management.
In this role, youll work hands-on with large-scale security data (assets, vulnerabilities, exposure context) and design production-grade AI systems that turn messy, complex information into clear, actionable insights.
Own the end-to-end AI lifecycle: from feature ideation and initial research, through data exploration and model development, to delivering reliable, production-grade capabilities. Validate solutions in controlled testing and continuously monitor, evaluate, and improve performance in production.
If you love combining real security problems with applied data science and AI driven problem solving, and want to have real impact in a rapidly evolving product - wed love to meet you.

Youll be part of a small, elite founding engineering team solving real-world security problems that sit at the intersection of network security, cloud infrastructure, and large-scale data systems.
This is a hands-on role where youll design and build core parts of the product - from network-aware security logic and attack-path modeling, to high-performance pipelines that process massive volumes of security and infrastructure data.
If youre excited about deep security challenges, love building real systems end-to-end, and want massive impact in an early-stage team - wed love to meet you.

we are looking for a Security Researcher.
As a Senior Security Researcher, you will bridge our core research initiatives at the intersection of proactive exposure management, agentic workflows, and scalable threat modeling. We are looking for an innovator who translates complex security data into product-driven features, taking full ownership from concept to production.
What You'll Do:
Drive Product-Led Research: Translate complex, real-world security challenges into actionable, product-driven research. Take full ownership of research projects end-to-end, from identifying the security gap to collaborating with engineering to ship platform features.
Drive Proactive Exposure Management: Leverage Automated Security Control Assessments (ASCA) alongside vulnerability evaluation and prioritization to holistically assess organizational risk. Deep dive into enterprise security tools (EDR, SIEM, Firewalls, IAM, etc.) to analyze configurations, map defensive capabilities, and continuously evaluate their effectiveness against real-world threats.
Build Security Tool Integrations: Drive the technical research and define the data models required to actually build deep, functional integrations into diverse security platforms, ensuring the accurate extraction of telemetry, policies, and configuration data.
Build AI & Agentic Workflows: Define, design, and implement the logic and knowledge base that feeds Nagomi's AI-powered agents, ensuring they deliver accurate, context-aware security guidance and automated risk assessments.
Map Attack Paths: Define realistic attack flows, identify toxic combinations of misconfigurations, and surface the security gaps that help customers prioritize the risks that actually matter.
Engage with Customers: Work directly with customers to help them understand their exposure, translate your research findings into meaningful posture improvements, and gather feedback to drive product innovation.
Cross-Functional Collaboration: Partner closely with product, engineering, and data teams to embed security insights into everything we build.

We are looking for an Information Security and Cyber Specialist with hands-on experience in information security systems to join the company’s Information Security team. The role includes responsibility for the operation and management of security systems, the investigation of information security incidents, and advanced technological areas within the Information Security Department.

Responsibilities:

* Monitoring, operation, and maintenance of information security systems.
* Handling and analyzing information security incidents at the Tier 2 level.
* Conducting initial and advanced investigations of cyber incidents.
* Working with IT and DevOps teams and external vendors.
* Writing procedures and technical documentation.
* Assisting with regulatory controls, risk assessments, and audits.
* In-depth knowledge of Microsoft 365 and Azure Security systems.
* Experience in managing and implementing EDR/XDR and SIEM systems and endpoint protection solutions.
* In-depth understanding of networking and Windows and Linux operating systems.
* Experience working with firewalls, VPN, NAC, and network security solutions.
* Ability to work independently, learn quickly, and maintain a system-wide perspective.

As a Senior Cloud Security Engineer at our company, you'll own the security controls customers actually trust us to ship. Every major cloud - AWS, Azure, GCP, OCI - gives you a partial set of our company controls, and none of them cover what an enterprise security team really needs. You'll close the gaps: research what each cloud exposes, design controls that produce a consistent security outcome across all of them, and tailor each one to the provider it runs on. You'll work end-to-end. Research, threat model, design, infrastructure-as-code, rollout, production validation. No handoffs, no thrown-over-the-wall designs
Key Responsibilities
As a Senior Cloud Security Engineer, you'll take full ownership of security controls - from concept to delivery.
You'll engage with customers, align with our strategic direction, and identify what you and the team should build next.
You'll ship MVPs directly in production with real customer environments, iterate quickly based on feedback, and ensure the long-term success of your work.
And yes - you'll also jump in as a Security Hero, helping customers understand what their cloud is doing and what to do about it.

As a Cybersecurity GRC Specialist at our innovative healthcare startup, you will own our information security program end to end. We are on a mission to bring the first Hybrid Drug to market: a groundbreaking therapeutic entity that integrates mobile apps with traditional medication. Operating at the intersection of digital health and pharma means security, privacy, and compliance are core to what we build - and you'll be the one making sure we get it right. If you're excited to shape and lead the security function of a growing company (rather than inherit one), read on

About the Role
This is a hands-on role with broad ownership. You'll act as our security lead, serving as the go-to person for all things governance, risk, and compliance - working directly with leadership, engineering, quality, and clinical teams. It's a great fit for someone with a few years of GRC experience who's ready to take on company-wide responsibility, not a traditional executive CISO position.

‍

Responsibilities
Governance & Security Program
Build, implement, and maintain our Information Security Management System (ISMS) in line with ISO 27001.
Develop and enforce security policies, standards, guidelines, and procedures across the company.
Foster a culture of security awareness through training and ongoing communication.
Risk Management
Identify, assess, and prioritize cyber risks across our products, infrastructure, and vendors.
Conduct Business Impact Analyses (BIA) to map critical business functions and potential disruptions.
Own the risk register and drive mitigation plans with relevant stakeholders.
‍
Compliance & Regulatory Alignment
Ensure compliance with healthcare and privacy regulations, including HIPAA and GDPR.
Support regulatory and quality processes relevant to medical device software (e.g., working alongside our QA/RA team on standards such as ISO 13485 and IEC 62304 where security intersects).
Manage security aspects of customer, partner, and vendor due diligence, including security questionnaires and audits.
Resilience & Incident Preparedness
Design and maintain Business Continuity (BCP) and Disaster Recovery (DRP) plans.
Define and test incident response procedures; lead response efforts when needed.
Run periodic tabletop exercises and recovery drills.
Security Operations & Engineering Collaboration
Work with engineering to embed security requirements into the development lifecycle of our mobile and cloud platforms.
Coordinate penetration tests, vulnerability assessments, and remediation follow-up.
Evaluate and manage security tooling appropriate to our size and needs.

We're looking for an AI Security Researcher to join us and uncover emerging AI threats, derive detection logic, discover new attack vectors, conduct red teaming, and identify insider threats and misconfigurations.
What You'll Do:
Deep-dive into AI usage risks, including threat detection for chat platforms and AI agents.
Research emerging agent threats and LLM attacks, such as jailbreaks and prompt injection.
Conduct red teaming and large-scale experiments on AI agents, including quantitative experimentation and advanced result analysis.
Assess internal and externally-facing AI agents for security posture and risk exposure.
Evaluate and attack real-time defenses and runtime protections for AI applications.
Conduct research across cloud, web, and API security to uncover novel threats and attack vectors relevant to AI systems.
Partner with product and engineering teams to turn research findings into detection logic, guardrails, or product features.
Stay current on and contribute to industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS) - potentially contributing back to the community.
Publish blog posts, give talks, and represent research at conferences.