לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 503 משרות

Requirements:
Minimum Qualifications:
2 years of hands-on experience in AppSec or penetration testing, including proficiency with enterprise tools like Burp Suite, OWASP ZAP, or Acunetix.
Hands-on experience with Linux, Windows, Docker, Kubernetes, web protocols (HTTP/S, REST, GraphQL), and authentication mechanisms (OAuth, SAML).
Proficiency in scripting languages such as Python, Bash, or Go to automate security tasks and interact with codebases.
Solid knowledge of networking concepts, the OSI model, and cloud infrastructure (AWS, Azure, or GCP).
Preferred Qualifications:
Knowledge of AI/ML and how LLMs or reinforcement learning agents operate within a cybersecurity context.
SaaS and cloud experience, with familiarity in AWS, Azure, or GCP environments and modern cloud-native architectures.
A red teaming background, with experience in simulated adversarial attacks and bypassing standard WAF or security controls.
An analytical mindset with the ability to diagnose complex logs and scans to distinguish between tool failures, configuration issues, and valid security findings.
Self-motivated with the ability to work collaboratively and communicate high-stakes security concepts effectively across teams.

Requirements:
Minimum Qualifications:
5 years of experience in cybersecurity, cyber-incident response, and threat hunting.
Experience with cloud security, including cloud services, Kubernetes, cloud architecture, and major cloud providers (AWS, GCP, Azure).
In-depth knowledge of OS internals for both Windows and Linux.
Experience with scripting languages and querying languages.
Full professional fluency (written and verbal) in both Hebrew and English.
Preferred Qualifications:
Strong analytical skills with a keen attention to detail.
Passion to solve any problem and to thrive as an independent and innovative Incident Responder.

Requirements:
Hands-on ability to develop POCs based on research findings using different programming frameworks.
A proven track record as a seasoned software engineer or security researcher with rich experience in modern software development and security practices.
Strong proficiency in creating professional content for diverse audiences and presenting it effectively through various mediums.
Demonstrated ability to work independently in a fast-paced, less structured environment with minimal supervision.
Excellent written and verbal communication skills, with great proficiency in English.
A curious and fast learner who loves to experiment and prototype.
Preferred background:
Experience with cloud computing, application security, or developer tooling.
Familiarity with a wide variety of security technologies and a passion for learning new ones.
Proven presentation skills and client-facing experience, with the ability to explain technical concepts concisely.
A technologist and hacker mindset-you love to explore how things work under the hood.
Experience working in a startup environment and wearing multiple hats.

Requirements:
Minimum Qualifications
5+ years of experience in software engineering.
3+ years of experience in cloud-based development. Familiarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure).
Deep knowledge of OS internals (Windows/Linux) and networking.
Experience delivering real-world impact on products affecting customers.
The ability to learn independently, to be self-driven and goal-oriented.
Preferred Qualifications:
Experience with runtime security products.
Hands-on experience in a detection engineering role/malware analysis/reverse engineering/vulnerability research.
Familiarity with notable threat actors and threat intelligence analysis.
IR/red-team/threat-hunting experience.
Familiarity with the following languages / tools: Python, PowerShell, Linux shell scripting, Terraform, CircleCI, Github Action.
Excellent communication and teamwork skills.

Requirements:
At least 3 years of experience in an Incident Response or Security Operation roles
Strong understanding of attack vectors, including Phishing, BEC, Email spoofing and impersonation techniques, Malware, ATO and more
Knowledge of email protocols and security concepts: SMTP, SPF/DKIM/DMARC, headers, authentication methods
Strong querying skills using SQL, SPL, KQL or AQL
Good knowledge with Static & Dynamic techniques
Familiarity with and understanding of code and scripting languages such as Python, JavaScript, Visual Basic, or similar - with the ability to read, interpret, and analyze potentially malicious scripts
Excellent written and verbal communication in English
Team player with a proactive, ownership-driven approach

Requirements:
Minimum qualifications
5+ years of hands-on experience in security or security research.
Strong threat-modeling mindset, with a deep understanding of both how attackers approach complex environments and how enterprises defend them.
Deep architectural understanding of complex software systems (Low-level, Distributed, or Core System Engineering mindset).
Proven ability to work independently, prioritize effectively, and drive complex, multi-quarter research projects from initial concept through to working PoC and product integration.
Strong ability to define and implement agentic workflows.
Preferred qualifications:
Security research experience in modern cloud environments (AWS, GCP, Azure, Kubernetes, etc.)
Specialized knowledge or research experience in AI security, focusing on risks to AI as deployed in the enterprise.
Solid foundation in program analysis or programming language theory (e.g., parsing, ASTs, compilation, or static code analysis).
Familiarity with model benchmarking, evaluation or fine tuning.
Hands-on experience with query languages (e.g., KQL, SQL) for efficient data analysis of security telemetry, or relevant large-scale data mining experience.
Excellent written and verbal communication skills, with a track record of successfully collaborating with cross-functional teams (e.g., Product, Engineering, Marketing) to achieve shared goals.
About the job

Requirements:
Minimum qualifications
5+ years of hands-on experience in security or security research, specifically relevant to modern cloud environments (AWS, GCP, Azure, Kubernetes, etc.)
Strong hands-on skills with scripting languages (e.g., Python, Go) for automation and research, as well as query languages (e.g., KQL, SQL) for efficient data analysis of security telemetry.
Proven ability to work independently, prioritize effectively, and drive complex, multi-quarter research projects from initial concept through to clear, delivered impact.
Preferred qualifications
Specialized knowledge or research experience in AI security, focusing on risks to AI as deployed in the enterprise.
Experience in public-facing work, such as presenting at recognized industry conferences, authoring technical blog posts, or publishing research.
Experience conducting data-driven research and working with large-scale security telemetry to derive statistically significant or high-impact findings.
Excellent written and verbal communication skills, with a track record of successfully collaborating with cross-functional teams (e.g., Product, Engineering, Marketing) to achieve shared goals.

Requirements:
So are YOU our next Manager, Cybersecurity Governance, Risk & Compliance? You are if you
7+ years of relevant experience in cybersecurity governance, risk and compliance, IT audit or technology risk, including at least 2 years leading people or leading a workstream with junior staff assigned.
Demonstrated ownership of at least one full SOC 2 Type II audit cycle as the internal lead, from readiness through to report issuance.
Hands-on ISO/IEC 27001 implementation or audit experience, ideally through a full certification or recertification cycle.
Working fluency in NIST CSF 2.0, including organisational profiles, implementation tiers and cross framework mapping.
Experience in a regulated financial services environment such as banking, brokerage, wealth management, payments or fintech.
Practical risk management experience covering risk registers, risk treatment plans, risk acceptance and residual risk reporting to senior stakeholders.
Experience assessing cloud control environments, particularly GCP or AWS, including identity and access management, logging and configuration controls, rather than reviewing policy documentation alone.
Strong written and verbal communication, presentation and technical writing skills, at a standard suitable for auditors, regulators and Board level readers.
Ability to operate independently across time zones within a geographically distributed team and with limited day to day supervision.
Comfortable challenging control owners constructively and holding remediation commitments to agreed dates.
Strong organisational agility, able to run multiple concurrent audit and assessment cycles without losing evidence integrity.
Additional kudos if you
CISA, CRISC, ISO 27001 Lead Auditor or Lead Implementer, CISM, CISSP, or an equivalent relevant work experience.
Knowledge of SOC 2 Trust Services Criteria, ISO/IEC 27001:2022 and Annex A controls, NIST Cybersecurity Framework 2.0 and NIST SP 800-53.
Familiarity with OSFI B-13, B-10 and E-21, and CIRO cybersecurity expectations, or demonstrated ability to learn a new prudential regime quickly.
Familiarity with Canadian privacy obligations including PIPEDA and Quebec Law 25.
Familiarity with GRC and cloud security platforms such as ServiceNow IRM, Salt, ZScaler, Cloudflare, F5, FortiGate, Palo-Alto, Drata or Wiz.
Familiarity with PCI DSS and MITRE ATT&CK is considered an asset.

Requirements:
Must-have
3-5 years in IT Operations or Systems Administration within a global high-tech environment, with hands-on expertise troubleshooting, configuring, and deploying macOS and Linux systems.
Proven experience managing the full IT employee lifecycle - provisioning, identity/access setup, and secure offboarding.
Proven experience managing device fleets via enterprise MDM platforms (JumpCloud, Jamf) and administering IAM/SSO platforms (Okta, Google Workspace).
Solid understanding of enterprise networking (TCP/IP, DNS, DHCP, VLANs, firewall policies), with hands-on experience deploying physical network infrastructure; Cisco Meraki experience a strong advantage.
Hands-on security operations experience, including active management of enterprise EDR tooling such as CrowdStrike Falcon.
Ability to work a shifted schedule with dedicated overlap with US business hours.
Fluent English (written and verbal) with a service-oriented mindset for supporting global employees and vendors.
Comfortable with the physical demands of IT work - office setups, cabling, monitor installation, hardware inventory.
Nice to have
Prior experience with customer security questionnaires, SOC 2 / ISO 27001 audits, or vendor risk assessments.
Hands-on experience with hardware in Zoom Rooms environments.
Experience with low-code tools (Make.com, n8n) or basic scripting (Bash/Zsh).

Requirements:
Passion to own and deliver - you take full responsibility for security outcomes and drive initiatives from idea to production
Curiosity and adoption of AI tools - you actively use tools like Cursor or Claude Code and are excited about how AI is transforming both software development and the threat landscape
7+ years of hands-on security experience, with real depth in product or application security
Experience in customer-facing security roles, representing a company to client CISOs, IT directors, and security teams across enterprise and SMB
Strong command of cloud security (AWS/GCP/Azure), web application security, and secure architecture design
Hands-on experience running or building a compliance program (SOC 2, ISO 27001, or equivalent)
A builder's mindset - comfortable establishing process and structure where none exists
Ability to thrive in a fast-paced environment, balancing deep technical execution with high-level strategic and client conversations
Strong communication skills, effective in a fast-paced startup environment
Bonus Points
Experience securing LLM-powered applications, agentic systems, or AI infrastructure
Background working with legal, financial, or other high-stakes documentheavy domains
Hands-on coding ability in Python or TypeScript
Experience building a security function from scratch, especially as a founding or first security hire
Familiarity with Kubernetes, infrastructure-as-code, and cloud-native architectures.

Requirements:
4+ years in cybersecurity, with strong application security or secure software development experience.
Proven experience designing secure application architectures and reviewing complex application ecosystems.
Ability to audit code in at least one programming language.
Hands-on experience with threat modeling methodologies, such as STRIDE.
Experience with SAST, DAST, SCA, findings triage, and guiding engineers through remediation.
Strong understanding of modern application stacks, including APIs, microservices, cloud-native applications, and AI/LLM integrations.
Excellent communication skills with engineers, product teams, and leadership.

Requirements:
Requirements
Hands-on experience in Cloud Security and SecOps.
Proven experience implementing, configuring, and integrating SIEM platforms.
Experience with data onboarding, log management, detection rules, and alert tuning.
Familiarity with SOAR and/or CNAPP solutions.
Strong understanding of cloud environments, infrastructure, networking, and information security.
Experience working directly with customers and leading technical projects end-to-end.
Ability to translate business and technical requirements into production-ready solutions.
Strong communication, presentation, problem-solving, and ownership skills.

Advantages
Experience leading discovery sessions, demos, and PoCs.
Experience developing SOAR playbooks, security automations, or parsers.
Experience migrating between SIEM platforms.
Experience owning security solutions from design through production deployment.

Requirements:
Requirements
Approximately 3 years of experience in a SecOps, SOC Tier 2, SOC Analyst, or similar security operations role.
Proven hands-on experience managing, maintaining, and troubleshooting Check Point Firewalls.
Hands-on experience with CyberArk PAM.
Hands-on experience with Trend Micro solutions and investigating alerts in EDR/XDR environments.
Practical familiarity with WAF solutions, preferably Radware, Reblaze, or Cloudflare.
Familiarity with SOC environments and SIEM/SOAR solutions.
Strong understanding of networking and security protocols, including TCP/IP, HTTP/S, SSL/TLS, and DNS.

Advantage
Experience using AI-driven security tools, automated analysis solutions, or AI capabilities within SOC/SecOps environments.
Understanding of cybersecurity risks related to AI, such as Prompt Injection and Data Leakage.
Experience leveraging AI tools for security investigation and threat analysis.

Requirements:
5+ years of experience in security research, vulnerability research, or offensive security.
Demonstrated ability to quickly develop expertise in new technical domains.
Familiarity with OWASP Top 10 for Large Language Model Applications (prompt injection, data poisoning, system prompt leakage).
Strong understanding of AI systems, frameworks, and deployment patterns, with proven ability to exploit them.
Experience conducting original security research - finding vulnerabilities, understanding attacker behavior, or developing novel techniques.
Highly motivated, curious, and able to work independently in ambiguous problem spaces.
Strong communication skills, written and verbal, with the ability to articulate technical findings and opinions clearly.
And Ideally:
Experience across multiple security domains (cloud, AI, infrastructure, application).
Background in offensive security, red teaming, or vulnerability research.
Solid understanding of cloud platforms (AWS, Azure, GCP) and cloud security concepts.
Track record of published security research, conference talks, or technical blog posts.
Experience tracking the evolving AI ecosystem and translating new developments into security research.