דרושים » אבטחת מידע וסייבר » (DA) אנליסט.ית סייבר

We are seeking a detail-oriented, self-driven Security Analyst, based in Israel, to join the Risk and Compliance team and operate our ISO-aligned Event Management Process end-to-end. This role is the front door for security events in our company - the person who makes sure that every reported security event (from employees, vendors, and automated monitoring) is triaged, classified, escalated where required, and closed with documented evidence.

The Security Analyst is both an operator and a process owner. This is an excellent entry-point role for a Computer Science graduate or similar background person looking to build a foundation in security operations and compliance. You will run the daily flow of events, partner with Corporate IT, R&D/DevOps, and the CISO to drive down events, implement improvements and take corrective and preventive actions. You will report directly to the Chief Information Security Officer and work closely with the broader employee base engaging them directly.
This role covers five primary pillars: Security Event Intake and Triage; Classification, Escalation and Coordination; Process Operations and Continuous Improvement and Ai Automation.
This is a temporary position with an hourly pay.


RESPONSIBILITIES:
Event Intake & Triage
Own the front door for all reported security events - internal security hotline , IT services alerts, employee reports and automated monitoring - and make sure nothing falls through the cracks.
Triage security events within defined SLAs; gather context from logs, endpoints, identity systems, and SaaS admin telemetry to make a fast, defensible first call.
Maintain the Security Event Register as the single source of truth for every reported event - timeline, evidence, classification, owner, status, root cause, and corrective actions.
Review mail service admin holds that require review and investigation, user engagement and follow-up
Classification, Escalation & IRT Coordination
Classify security events against the defined severity matrix; distinguish security events from incidents and apply the agreed escalation criteria consistently.
Notify the CISO when escalation criteria are met, evidence collection, and timeline capture during incidents.
Process Operations & Continuous Improvement
Own and operate our ISO-aligned Event Management Process end-to-end - from intake through triage, response coordination, closure, and lessons learned.

We are seeking a dynamic and experienced Threat Hunter to lead proactive cybersecurity efforts by uncovering hidden threats across our environment. In this role, you will drive hypothesis-based hunting, perform deep analysis and validation of security telemetry, investigate suspicious network activity, and continuously improve threat detection and response.
You will also assess CVE relevance and exploitability to prioritize real-world risk, and leverage threat intelligence feeds and enrichment pipelines to enhance hunting context, detection accuracy, and response effectiveness.
If you thrive in a fast-paced environment and are excited about pushing the boundaries of cybersecurity, we want to hear from you.
Responsibilities:
Apply data analytics to analyze security-related network data, uncover actionable threat intelligence, detect anomalies and malicious behavior, and automate findings into an enhanced detection system.
Leverage current cybersecurity knowledge to interpret and contextualize findings, enabling informed decision-making and proactive measures to strengthen overall cybersecurity defenses.
Work closely with Product and Engineering to translate threat intelligence into product strategy, prioritized features, and defensive enhancements.
Monitor and analyze the latest vulnerabilities, CVEs, exploits, and threat actor TTPs, with a focus on techniques relevant to microsegmentation, identity security, lateral movement, and internal reconnaissance.
Integrate external threat feeds and intelligence sources into our product - including normalization, enrichment, classification, and validation of feed relevance.
Contribute to detection logic, threat models, and internal tooling that turn intelligence into prevention and protection.
Provide on-the-fly support during customer incident response events and penetration testing exercises by leveraging expertise to promptly detect and block security threats.