דרושים » אבטחת מידע וסייבר » Information security developer - 2409

driving the future of autonomous vehicles with its state-of-the-art LiDAR technology. Our innovative systems, trusted by automotive giants such as BMW and Volkswagen, are revolutionizing the industry and setting new standards in automotive technology.
We are looking for an experienced Chief Information Security Officer (CISO) who will lead the development implementation & Monitoring of the organization's information security strategy, ensuring robust protection of assets and compliance with regulatory requirements.

The ideal candidate will oversee risk management, lead security initiatives, and strengthen the organization's overall security posture.
Job Description:
Develop and implement an organizational information security strategy to supports the company's objectives and business requirements.
Oversee and maintain the companys information security framework, ensuring protection for sensitive data and critical systems.
Lead, mentor the security team, fostering a culture of continuous improvement, security awareness, and accountability.
Identify and manage cyber risks, maintain & establish procedures and standards, coordinate responses to cyber incidents, and ensure compliance with international information security regulations and standards.
Support the organization through technological changes and verify that new solutions meet security requirements.
Establish and maintain current policies, procedures and protocols that enable our security, privacy, and IT Compliance strategy.
Manage day-to-day security operations, incident response readiness, business continuity planning, and the identification of vulnerabilities in infrastructure and applications.
Oversee the evaluation, selection, and implementation of vendor services and tools that support information security and compliance.
Developing and delivering security training programs to educate employees on security best practices.
Ensure ongoing compliance with relevant regulations and industry standards, particularly within the automotive sector.
Collaboration with internal departments such as IT, legal, HR, finance, and logistics to integrate security practices seamlessly into all business processes.

We are looking for a highly skilled Application Security Architect to join our team at our company. This role is pivotal in ensuring the security of our applications from inception to production and beyond. The ideal candidate will have a solid development background that has evolved into security expertise, enabling them to work closely with development teams to implement security best practices and develop protection mechanisms.
In this role, you will be responsible for:
Partner with all our company's development teams to establish and govern security practices from the outset of development to production.
Conduct application security assessments, including architecture design reviews and threat modeling.
Act as a security advisor to cross-functional teams, including product, engineering, and others, to support secure software development.
Design, build, and implement advanced application security solutions.
Lead security audits, vulnerability assessments, and code reviews.
Develop and share software security guidelines, including training materials, secure coding checklists, best practices, and reusable code.
Ensure ongoing compliance with security policies and procedures in support of regulatory requirements.
Elevate security awareness across the SSDLC, defining tailored training roadmaps as needed.
Manage and review security issues in products, analyzing severity and risk, and recommending remediation steps.
Establish, manage, and lead a VDP/Bug Bounty program.

Are you ready to power the future? At SolarEdge (NASDAQ: SEDG), we're a global leader in smart energy technology, with over 4,000 employees, offices in 34 countries, and millions of installations worldwide. Our innovative solutions include solar inverters, battery storage, backup systems, EV charging, and AI-based energy management. We're committed to making clean, green energy the primary power source for homes, businesses, and beyond. With the growing demand for electricity, the need for smart, clean energy sources is constantly rising. SolarEdge offers amazing opportunities to develop your skills in a multidisciplinary environment, covering everything from research and development to production and customer supply. Work with talented colleagues, tackle exciting challenges, and help create a sustainable future in an industry that's always evolving and innovating. Join us and be part of a company that values creativity, agility, and impactful work. This role is a team member in our security engineering team. The Cyber Security team is composed of strong and experienced security engineers, responsible for designing, implementing, analyzing, and maintaining an on-prem\cloud-based security controls in particular OT security. What you will be doing:
* Manage the day-to-day operations of the company’s security infrastructure systems.
* Will lead the implementation of IT/OT cyber security systems in the organization.
* Provide security guidelines to various projects and systems.
* Research new innovative technologies to mitigate security gaps and work to implement in the production

Country:
Israel

City:
Herzliya

We are looking for a highly skilled Product Security Architect to join our team at our company. This role is pivotal in ensuring the security of our applications from inception to production and beyond. The ideal candidate will have a solid development background that has evolved into security expertise, enabling them to work closely with development teams to implement security best practices and develop protection mechanisms.
In this role, you will be responsible for:
Partner with all our company's development teams to establish and govern security practices from the outset of development to production.
Conduct application security assessments, including architecture design reviews and threat modeling.
Act as a security advisor to cross-functional teams, including product, engineering, and others, to support secure software development.
Design, build, and implement advanced application security solutions.
Lead security audits, vulnerability assessments, and code reviews.
Develop and share software security guidelines, including training materials, secure coding checklists, best practices, and reusable code.
Ensure ongoing compliance with security policies and procedures in support of regulatory requirements.
Elevate security awareness across the SSDLC, defining tailored training roadmaps as needed.
Manage and review security issues in products, analyzing severity and risk, and recommending remediation steps.
Establish, manage, and lead a VDP/Bug Bounty program.

Medison offers hope to patients suffering from rare and severe diseases by forming partnerships with emerging biotech companies to accelerate access to highly innovative therapies in international markets. As the creator and leader of the global partnership category in the pharma industry, we strive to be Always Ahead and work relentlessly to bring therapy to patients in need, no matter where they live. The Information Security Officer (ISO) at Medison Pharma will be responsible for developing, updating, and maintaining the organizational information security management framework, including policies, procedures, and work plans. The ISO will provide consulting services on relevant solutions and products and lead the improvement and development of the information security field. Additionally, the ISO will manage projects related to the examination and implementation of new information security products and characterize information security solutions for related projects. The ISO will also advise on compliance with privacy and cyber protection laws and regulations, conduct information security and privacy protection surveys, and oversee ISO 27001 compliance, focusing on all aspects of cybersecurity within Application Security (AppSec), Infrastructure Security (DevSec), Governance, Risk, and Compliance (GRC), Security Information and Event Management (SIEM)/Security Operations Center (SOC), incident response, and IT security.

Responsibilities:

* Develop, update, and maintain a cybersecurity strategy.
* Manage a risk-based cybersecurity program to secure corporate IP, technology, information, computer systems, networks, and data.
* Provide guidance on proposed cybersecurity best practices to different business functions.
* Develop comprehensive cybersecurity guidance, processes, and procedures based on industry standards.
* Stay informed on trends and issues in the security industry, including current and emerging technologies and regulatory and compliance issues.
* Advise, counsel, and educate executive and management teams on the importance of cybersecurity.
* The position reports to Medison's CISO

We are seeking a highly skilled and experienced Head of Application Security to join our dynamic team. This role is pivotal in driving the security of our software development lifecycle and ensuring the robustness of our applications against potential threats. The ideal candidate will have a strong background in secure software development practices, including SSDLC implementation, and a deep understanding of security frameworks such as SALSA. This position reports directly to an R&D VP.

Key Responsibilities
Lead the application security team, providing strategic direction and mentorship.
Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework.
Oversee the integration of security practices into all phases of the software development lifecycle.
Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities.
Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity.
Implement and manage security automation tools and processes to enhance the efficiency of security operations.
Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture.
Provide expert guidance on security architecture and design for new and existing applications.
Lead incident response efforts related to application security breaches and vulnerabilities.
Foster a culture of security awareness and continuous improvement within the organization.

We are looking for a Red Team Expert with a deep understanding of both information security and computer science. The right person will have to learn advanced concepts such as application manipulation, exploit development, and stealthy operations. This is not a press the button type of job! This career is technical and challenging with opportunities to work in some of the most exciting areas of security on extremely technical and challenging work. A typical job could be breaking into a segmented secure zone at a Fortune 500 organization, reverse engineering an application and both developing and exploiting the most recent vulnerabilities, all without being detected.
Responsibilities:
Global organization red-team assessments and security posture
Co-ordinate and execute systems and network level advanced red team exercises for different environments
Design and develop scripts, frameworks and tools required for facilitating and executing complex undetected attacks
Configure and troubleshoot security infrastructure devices
Develop technical solutions and new security capabilities to help mitigate security vulnerabilities and automate repeatable tasks
Write or assist with comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement

About us, we secure products and systems throughout their lifecycle. As a multidisciplinary cybersecurity company based in Israel, we specialize in providing comprehensive security solutions across all engineering domains. Our expertise spans hardware security, system security engineering, FPGA and Embedded systems security, low-level software and operating systems cybersecurity, cryptography, RF cybersecurity, quantum-resilient security, and more.
Job Description Project Management and Technical Leadership: Lead and manage software development projects, including planning, coordinating, and supervising team activities to ensure successful project completion. Define development requirements, guide contractors, and implement secure development methodologies and practices. system Design and Development: Design and develop secure software systems and architectures for complex and Embedded systems, ensuring they meet security and performance requirements. Implementation and Configuration: Design, code, TEST, and debug system software, including hardware bring-up. Enhance system efficiency, stability, and scalability. Integrate and validate new product designs. Implement and configure software systems. Risk Analysis and Problem Solving: Conduct risk analysis and problem-solving for system issues, using tools and techniques to identify and resolve problems efficiently. Maintenance and Technical Support : Provide ongoing maintenance and Technical Support, including security updates, bug fixes, and performance enhancements. Secure Development Processes: Implement and oversee secure development processes, including secure code reviews, automated code testing (SCA + SAST), and defining treatment thresholds for TEST results. Documentation and Risk Management: Write explanatory documents, manage risks, and provide defensive justifications for scan results that cannot be addressed.

we have created an intuitive Social Trading platform that gives traders and investors access to global stock markets, commodity trading, cryptocurrency trading, and more. We strive to make money management available and accessible to everyone (even to users with no prior experience or knowledge). We have over 33 million users worldwide, and our platform is available in over 140 countries around the world.
With over 1500 employees worldwide, We have locations in the US, Cyprus, UK, Australia, Germany, and Israel, and we are constantly growing and expanding into new markets.
We are constantly growing and are excited to share that we are looking for a Blockchain Security Architect to join our team!
Join us as a Blockchain Security Architect at our company, where innovation meets security in the dynamic world of blockchain technology. Our mission is to build secure, scalable, and user-friendly blockchain solutions that empower businesses and individuals alike. As part of our cutting-edge team, you will play a crucial role in shaping the security landscape of new coins, blockchains, and digital assets.
We are at the forefront of blockchain security, providing top-notch services across various domains, including staking, decentralized finance (DeFi), and custody solutions. With a diverse, global team and a collaborative work environment, we are dedicated to fostering growth, learning, and excellence in everything we do.
Your Primary Responsibilities:
Security and Technical Analysis: Conduct in-depth security and technical assessments of new coins and blockchain platforms to ensure robustness and reliability.
Risk Analysis: Perform comprehensive risk evaluations for various blockchain operations such as staking, DeFi, and custody, identifying potential vulnerabilities and proposing mitigation strategies.
Secure Development Support: Collaborate closely with R&D teams to embed security into the development lifecycle, ensuring adherence to best practices and architectural guidelines.
Infrastructure and Product Security: Review and define architectural standards for blockchain infrastructure and products, fostering a secure ecosystem.
Custody Solutions Management: Develop and implement secure operational policies for custody, managing a variety of technology providers and solutions.
Perform hands-on technical operations of the Custody solution, including managing and configuring hardware and software used in Custody operations.
Set up computers from scratch, implementing both basic and advanced security policies to ensure the integrity and confidentiality of Custody operations.
Collaborate with the team to design Custody policies for all related solutions, including physical security policies and computer policies.
Risk Framework Development: Lead the creation and management of risk frameworks in coordination with internal stakeholders, focusing on security and risk mitigation.
Blockchain Monitoring and Playbooks: Define and execute on-chain monitoring strategies and develop playbooks for handling blockchain activities and incidents.

we are looking for an experienced Application Security Architect to join our Cybersecurity team. In this role, you will be instrumental in building and advancing our companys application security programs. Working closely with talented engineers, product managers, and platform teams, youll play a key role in ensuring the security of our software development lifecycle (SDLC).
Youll provide security services including secure coding practices, architecture reviews, awareness and training initiatives, and tool implementation. From threat modeling to secure development education, your contributions will directly impact the safety and resilience of our companys products.
What am I going to do?
Lead Secure SDLC Initiatives: Drive security throughout the software development lifecycle (S-SDLC), including threat modeling, risk assessments, and mitigation planning for new and existing applications.
Embed Secure Design Practices: Guide development teams on implementing secure architectural patterns, design principles, and coding standards, with emphasis on OWASP and industry best practices.
Security Tooling Strategy: Define and manage the integration of Static (SAST), Dynamic (DAST), and Software Composition Analysis (SCA) tools into our companys CI/CD pipelines, ensuring scalable, platform-agnostic coverage and effective vulnerability management.
Security Testing & Remediation: Perform and oversee application security testing, ensuring timely remediation of identified vulnerabilities.
Develop Security Standards: Create and maintain secure coding standards, best practices, and development guidance tailored to our companys tech stacks.
Code Reviews: Conduct in-depth manual and automated security code reviews for critical components, offering practical and constructive feedback to engineering teams.
API & Mobile App Security: Design and assess security for APIs and mobile applications, ensuring robust authentication, authorization, and data protection in line with industry standards.
Third-Party Risk Management: Evaluate the security posture of third-party libraries, components, and services integrated into our company's applications.
Cloud Security Collaboration: Partner with Cloud Security Architects to ensure secure application deployment in cloud environments (e.g., AWS, GCP), offering expert advice on cloud-native security practices.
Team Enablement & Education: Mentor development teams on emerging threats, secure coding techniques, and security-first development approaches.
Bug Bounty Program Leadership: Manage and evolve our companys bug bounty program, working with researchers and internal teams to resolve findings efficiently.