לוח משרות דרושים הייטק אבטחת מידע / סייבר משרה מלאה

Cynet is seeking a dynamic and experienced individual to join our team as the Vice President of Security. As the Vice President of Security at Cynet, you will assume complete ownership of all matters pertaining to our ability to provide comprehensive cybersecurity solutions to our clients and enhance their security postures. This role is pivotal in driving our cybersecurity initiatives forward and ensuring the highest level of protection for our clients' digital assets. Responsibilities:
* Strategic Leadership: Lead and oversee all aspects of our cybersecurity strategy, including developing and implementing initiatives to enhance our cybersecurity capabilities.
* Team Management: Manage a multi-disciplinary team, including the Cyber Security Research department and Cynet MDR (CyOps) team, comprised of Security Researchers, Threat Researchers, Data Scientists, Automation Engineers, and Security Analysts.
* Research and Development: Drive cybersecurity research efforts and influence the development of innovative security solutions that align with our customers' evolving needs.
* Security Solutions Roadmap: Influence and contribute to the development of our security solutions roadmap to ensure we deliver cutting-edge cybersecurity solutions to our clients.
* Customer Engagement: Act as a primary point of contact for our clients on cybersecurity matters, providing expert guidance and support to enhance their security postures.
* Ownership and Leadership: Assume full ownership of cybersecurity initiatives within the company, taking charge of cybersecurity operations and decision-making processes.
* Managerial Experience: Demonstrate strong managerial skills, including experience in managing teams of managers, fostering a collaborative work environment, and driving team performance.

XM Cyber is the leader in hybrid-cloud security posture management, using the attacker’s perspective to find and remediate critical attack paths across on-premises and multi-cloud networks. We are seeking a highly skilled System Architect to join our team. The System Architect will be responsible for designing the system architecture for our SaaS solution, ensuring it meets the highest standards of security and performance. This role will require a deep understanding of modern cloud architecture and big-data tools, as well as experience in architecting complex systems in a SaaS environment.
* Designing the system architecture for our SaaS solution, considering factors such as scalability, reliability, and security
* Leading the design and implementation of product security measures to ensure the confidentiality, integrity, and availability of customer data
* Collaborating with cross-functional teams to ensure alignment with business requirements and technical goals
* Conducting regular assessments of the system architecture to identify potential risks and areas for improvement
* Providing technical leadership and guidance to the development team in implementing architectural best practices
* Keeping up to date with the latest trends and technologies to inform architectural decisions and bringing innovative solutions

We are looking for a curious and ambitious intelligence analyst to join our Intelligence Services Team, as part of our amazing Customer Success group. Responsibilities As a Cyber intelligence analyst, you will:
* Perform research, collect information and conduct monitoring of vulnerabilities, APT groups, threat actors, and cyber attacks on dark, deep, and clear web platforms
* Perform analysis and cross-reference findings
* Create cyber threat intelligence reports based on your analysis and provide information about trends, predictions, and recommendations
This is a PART-TIME position with the option to become full-time in the future.

Deep Instinct, the first cyber security company to apply Deep Learning to cyber security is looking for a Threat Researcher . Deep Instinct is an innovative company that has a unique and game-changing software solution to protect Fortune 500 End-Point users against Zero Day & APT cyber-attacks. This is an incredible opportunity to get in a Pre-IPO Cyber Security company that is poised to do huge things! We're on a mission to disrupt the cyber security market and the time is NOW! The successful candidate will be responsible to identify, analyze and collect cyber malware samples and campaigns. Perform research on threat actors, new attack vectors and techniques, develop POCs and analysis tools, and prepare research publications. The role involves hands-on responsibilities, working closely with security researchers and Deep-Learning engineers. It requires multitasking in a fast-paced environment with high-quality, accurate, and timely deliverables.

Office Location:
TLV Office

Region:
Israel

Responsibilities::

* Research and analyze emerging cyber threats: Identifying new malware strains, large-scale campaigns, and advanced persistent threats (APTs). Analyze their behavior, capabilities, and techniques for evading detection and achieving their goal.
* Collaborate with other members of the research department: Work closely with security researchers, ML engineers, and other team members to develop and implement defense strategies for the current and future threat landscape.
* Document the findings of threat research and publication reports that can be shared with internal and external stakeholders.
* Stay up-to-date with the latest developments in the cyber security field: including the latest trends, techniques, and threats in the cyber security field.
* Uncover and develop new cyber-attack vectors, techniques and POCs.

Why Work With Us::
At Deep Instinct we are committed to creating an excellent employee experience. We offer competitive salaries, a generous benefits package among great culture. We have some of the most forward-thinking and talented people in the world working for us. If you're creative and autonomous with a real passion for technology, we want to hear from you. About Deep Instinct: Deep Instinct , is the first cyber security company to apply Deep Learning as a platform. We are the only cyber security company harnessing the the power of deep learning to prevent 99% of known and unknown attacks from malware and zero-day threats.

We are looking for an Information Security Lead to steer the organizations information security, data security and risk management. The Information Security Lead will work with various departments in Mastercard and implement the organizations best practices. This role will report to the VP technologies operations organization.
Role-
Developing, implementing, and monitoring a strategic, comprehensive enterprise information security and IT risk management program that aligns with the organizations business objectives and regulatory requirements. The program is required to align with Mastercard's corporate strategy and directives.
Providing and approving security related items in RFP responses and contract negotiations. Joining customer calls to explain our security position and understand the customer needs.
Partnering with business units and stakeholders across the organization to facilitate risk assessment and risk management processes, and to raise awareness of security issues and best practices.
Establishing and maintaining an information security management framework that incorporates industry standards and best practices and lead compliance audits for ISO/IEC 27xxx, SOC II and other security certifications.
Assisting in the selection, implementation, and maintenance of security technologies, tools, and processes that support the organizations security goals and policies.
Responding to security incidents and breaches, and coordinating with internal and external parties to investigate, contain, remediate, and report on them.
Evaluating and reporting the organizations security posture and performance, and provide regular feedback and recommendations to senior management.
Staying abreast of current and emerging security threats, trends, technologies, and best practices, and ensuring that the organization adapts accordingly.
Sourcing and selecting vendors and service providers that offer security solutions or support.

We are looking for a GRC Analyst.
As a GRC analyst, you will be working very closely to participate in all aspects of cyber security and compliance. The role is a crucial part in our Cyber Security team and the entire security program. We are looking for a team member with experience in compliance frameworks operating with modern systems. You will be involved in all information security processes and activities, with the different teams, make risk mitigation recommendations, and suggest and review solutions. This is a key position in the process of building the security culture in the entire organization.
The ideal candidate is highly motivated, demonstrating a can do' attitude and needs to have a combination of troubleshooting and communication skills, as well as the ability to handle a mix of multiple tasks in parallel.
This role will provide career growth opportunities as you develop/acquire new security skills in the course of your duties.
RESPONSIBILITIES:
Support local, regional, and global initiatives and activities related to governance, risk, and compliance.
Establish, maintain, and publish up-to-date security and compliance policies, standards, and guidelines, and oversee training and dissemination of policies and procedures.
Identify and track timely closure of control gaps and risk mitigation plans.
Participate in ISO 27001, SOC, and other compliance assessment, evidence collection, and reporting.
Develop and implement various Governance, Risk, and Compliance tools.
Utilize a risk-based approach for vendor management, including assessing and treating the risks.
Assist with Incident Response and Business Continuity to include running table-top exercises.
Other related duties such as Incident response process, Vulnerabilities management and more.

We are looking for a Threat Researcher.
we are an innovative company that has a unique and game-changing software solution to protect Fortune 500 End-Point users against Zero Day & APT cyber-attacks. This is an incredible opportunity to get in a Pre-IPO Cyber Security company that is poised to do huge things! We're on a mission to disrupt the cyber security market and the time is NOW!
The successful candidate will be responsible to identify, analyze and collect cyber malware samples and campaigns. Perform research on threat actors, new attack vectors and techniques, develop POCs and analysis tools, and prepare research publications.
The role involves hands-on responsibilities, working closely with security researchers and Deep-Learning engineers. It requires multitasking in a fast-paced environment with high-quality, accurate, and timely deliverables.
RESPONSIBILITIES:
Research and analyze emerging cyber threats: Identifying new malware strains, large-scale campaigns, and advanced persistent threats (APTs). Analyze their behavior, capabilities, and techniques for evading detection and achieving their goal.
Collaborate with other members of the research department: Work closely with security researchers, ML engineers, and other team members to develop and implement defense strategies for the current and future threat landscape.
Document the findings of threat research and publication reports that can be shared with internal and external stakeholders.
Stay up-to-date with the latest developments in the cyber security field: including the latest trends, techniques, and threats in the cyber security field.
Uncover and develop new cyber-attack vectors, techniques and POCs.

We are looking for a Security and ML/AI Principal Researcher to work alongside product owners, designers, and technical writers within the broader Product Management Group. As a Principal Researcher, you are responsible for doing research in Cyber and ML/AI applictions to assist in refining and executing the vision of Identity Threat Detection and Response (ITDR), Cloud infrastructure Entitlement Management (CIEM), Behavioral Analytics, Secret Server and other company`s solutions, by working closely with cross functional teams in the research, planning, development, and release of new products. You will be working in a highly dynamic, fast-paced environment, interacting regularly with internal stakeholders in the development of our products.

The ideal candidate will have the tenacity, focus, and creativity to thrive in a fast-paced security startup, where initiative is expected, oversight is minimal, and where results are the only
outcome that matters.

This position is based in Tel Aviv and will require being on-site in the office two to three days per business week.

Key Responsibilities:
Research areas may include, but are not limited to the following.
Security research such as: identity threats, account takeover methods, AuthZ security, app permission mechanisms and privilege escalation paths, AuthN weaknesses, IAM mechanisms, automated provisioning abuse, configuration weaknesses, access related supplychain attacks, and protocol weaknesses and attacks on SAML, SCIM, OAuth2, OIDC, and similas. (it is unlikely but not impossible that work will include binary level exploitation / RE as well).
ML/AI applications research such as: ML/AI discovery of TTPs and anomalies, using LLMs and foundation models for security applications (may include fine tuning, RAG, and other
applications), quantifying risk, graph analysis and graph algorithms.

In this role you may also:
Help refine and articulate the product vision and strategy of selected our solutions.
Collaborate with customers, prospects, partners as well as external/internal stakeholders to understand client needs to define and validate product requirements.
Work closely with Engineering and PM teams to solve complex problems affecting our customers through research applications.

we are a strategic consulting and business intelligence firm based in Tel Aviv looking for an Intelligence Analyst.
Responsibilities:
* Conduct in-depth research and analysis, collaborating with cross-functional teams to communicate complex findings effectively
* Develop innovative OSINT and WEBINT methods, staying up to date on the latest trends and investigative techniques
* Operate and maintain cutting-edge technological systems, implementing investigative findings across various sectors
* Be part of a leading team, holding top-to-bottom responsibilities

Required Security Analyst - Remote
Job Description:
Do you enjoy cyber security and enabling Data Research to protect millions of people online?
Are you excited about working with cutting-edge data research systems?
Join our Data Research team!
Our Data Research team applies machine learning, including LLMs, to our security products. We not only leverage the massive amount of network traffic data to provide top-tier threat intelligence for customers but also apply ML/AI on security products directly as value differentiators.
Help us make the Internet a safer place
You'll identify attacks/threats from network data and collaborate with the researchers to enhance the models they develop. You will help us protect millions of people each day.
As a Security Analyst, you will be responsible for:
Having a great understanding of the security products.
Working closely with a data research team as a subject domain expert, assisting with data annotation and machine learning model development & analysis.
Assisting in domain-based feature development for ML/AI model building to solve complex security use cases.
Leveraging your deep understanding of the security products and data to enhance the ML/AI products and make them even better.

Required Senior Vulnerability Researcher
What will you do:
The vulnerability researcher will explore different security aspects of new technologies and suggest novel ways to break and protect these technologies.
Vulnerability research of many interesting technologies and popular products. Everything could be an option, from Internal OS components to cloud SaaS services, from DevOps tools to Linux Containers, etc.
Focusing on finding identity-related vulnerabilities and new attack vectors on any kind of digital identity: human, application, and machine identities.
Development of exploitation and mitigation POCs and tools.
Working together with R&D and PM to shape our future features & products.
Initiate and help driving innovation around your research area.
Writing blog posts and presenting new research work at security conferences such as Blackhat, DEFCON, RSA.