דרושים » אבטחת מידע וסייבר » Detection & Researcher Team Lead

משרות על המפה
 
בדיקת קורות חיים
VIP
הפוך ללקוח VIP
רגע, משהו חסר!
נשאר לך להשלים רק עוד פרט אחד:
 
שירות זה פתוח ללקוחות VIP בלבד
AllJObs VIP
כל החברות >
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
לפני 5 שעות
Location: Herzliya
Job Type: Full Time
As a Detection & Researcher Team Lead, you will:
Lead detection, investigation and mitigation of cybersecurity incidents, including deep network traffic and data analysis
Develop and maintain scripts for data parsing, packet analysis and correlation across multiple data sources
Leverage open-source tools and frameworks to support threat attribution and research
Build and maintain integrations with APIs, threat-intel feeds and big-data platforms to enhance visibility and detection capabilities
Document research findings, detection methods and analysis techniques for technical and non-technical stakeholders.
Requirements:
2+ years of managerial experience as a team leader and/or tech lead
At least 2 years of experience in incident response, SOC operations, or a related cybersecurity role
Strong knowledge of networking fundamentals and the MITRE ATTACK framework
Experienced in working across multiple interfaces, coordinating effectively between teams and stakeholders to ensure seamless execution
Programing/scripting experience in one or more languages, e.g., Python, Go, Ruby, Bash, PowerShell or Java
Experience with Big Data analysis platforms and security monitoring tools for log analysis and investigation
Practical experience with OSINT (Open-Source Intelligence) tools and methodologies for threat hunting, attribution or intelligence gathering
It would be great if you also have:
Experience responding to incidents in large-scale or complex environments
Hands-on experience with cloud-based infrastructure
Prior work in operational security or a related discipline.
This position is open to all candidates.
 
Hide
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8505423
סגור
שירות זה פתוח ללקוחות VIP בלבד
משרות דומות שיכולות לעניין אותך
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
23/12/2025
חברה חסויה
Location: Herzliya
Job Type: Full Time
Required DFIR Expert
Herzliya, Israel, Full Time, hybrid
Our DFIR team is responsible for responding to our clients' cyber incidents and crises.Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities
Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
Perform incident response in a cloud environment (Azure, AWS etc.).
Perform digital forensics investigations
Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
Perform hunt-evil and find-evil activities for proactively detecting attacks
Work closely with our in-house red team, CTI, and cyber architect teams
Work closely with worldwide companies, CISOs, and technology experts.
Requirements:
3+ years of experience as a DFIR team member
Experience with performing digital forensics in a cloud environment
Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis
Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping
Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL
Strong understanding of targeted attacks; able to create customized tactical remediation plans
Good written and verbal English communication skills.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8469626
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
23/12/2025
חברה חסויה
Location: Herzliya
Job Type: Full Time
we are looking for a Manager Cyber Defense Center
Responsibilities
Lead, mentor, and manage a team of analysts and incident responders, fostering a culture of continuous improvement and collaboration.
Oversee real-time monitoring, analysis, and escalation of security events using SIEM, SOAR, and other security tools.
Develop, implement, and optimize SOC processes, playbooks, and standard operating procedures.
Coordinate incident response activities, ensuring timely investigation, containment, eradication, and recovery from cyber incidents.
Serve as the primary point of contact for major security incidents, coordinating with internal stakeholders and external partners as needed. Ensuring effective communication and coordination among stakeholders throughout the lifecycle of security incidents.
Stay informed on the latest cyber threats, vulnerabilities, and regulatory developments to adapt the organizations security posture proactively.
Prepare and deliver regular reports, metrics, and presentations to executive management regarding Cyber Defense Center's performance and emerging risks.
Support compliance efforts and audits related to cybersecurity frameworks (e.g., SOC2, ISO 27001).
Manage Cyber Defense Center's technology stack, including evaluating and recommending tools and solutions for threat detection and response.
Establish and lead a dedicated purple team to enhance detection, response, and resilience against threats.
Requirements:
5+ years of experience in cybersecurity.
3+ years in a Security Operation Management role.
Strong knowledge of security operations, incident response, threat intelligence, and digital forensics.
Experience with SIEM, EDR, SOAR, firewalls, and other SOC technologies.
Relevant certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
Knowledge of attacker tactics, techniques, and procedures (TTPs), as well as methods for defense.
Excellent analytical, problem-solving, and organizational skills.
Exceptional communication skills, with the ability to convey complex security concepts to technical and non-technical audiences.
Ability to work under pressure, manage multiple priorities, and respond to high-impact incidents effectively.
Demonstrated experience in developing, tracking, and reporting on key performance indicators (KPIs) to measure SOC effectiveness and drive continuous improvement.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8470061
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
חברה חסויה
Location: Herzliya
Job Type: Full Time
We are looking for a talented, tech-savvy individual to join our Cyber Security team and help us tackle the toughest security challenges in cutting-edge ecosystem.
In this role, you will be a subject matter expert and play a major part in our efforts to build and maintain security infrastructure, design secure architectures, enforce security best practices, and automate security processes.
The Cyber Security team is composed of strong and experienced security engineers, responsible for defining the security strategy and managing all of infrastructure.
Responsibilities:
Define, implement, and maintain security policies, standards, and methodologies; ensure they evolve with new threats and technologies.
Design, deploy, and operate detection, prevention, and response technologies across a scaled, diverse, and complex environment (hybrid infrastructure: public cloud + on-premises).
Build and operate secure infrastructure: hands-on ownership of security configurations and system hardening.
Conduct security assessments, secure-design reviews and architecture assurance reviews to identify and mitigate possible security risks.
Automate security processes: configuration deployments, infrastructure management, detection, response, compliance checks, patching, configuration drift, etc.
Design, develop, and implement secure software development and deployment pipelines, incorporating best practices, automation, and CI/CD methodologies.
Stay ahead of emerging cyber threats and technologies: research, evaluate, pilot, and integrate where relevant.
Participate in creating incident response playbooks, coordinate incidents investigations, root cause analysis, and lessons learned.
Requirements:
4+ years of experience in security engineering, or equivalent.
Strong hands-on experience with security tools, services, deployment automation, and configuration management.
Demonstrated expertise in cloud security, including low-level design of secure cloud architectures (e.g., VPCs, network segmentation, endpoints, encryption).
Solid understanding of operating systems (Linux, Windows, macOS) and networking fundamentals (TCP/IP, DNS, VLANs, routing, etc.).
Well-versed in identity & access management: Conditional Access, Zero Trust, RBAC, identity lifecycle, access reviews, compliance, and governance.
Hands-on experience with infrastructure as code.
Experience securing microservices, containerized environments and serverless.
Strong knowledge of modern Secure Software Development Lifecycle (SSDLC) practices: threat modeling, secure design, code reviews, API security, SAST/DAST/SCA.
Programming/scripting skills to build automation, tools, and playbooks.
Self-motivated and autodidactic, with the ability to deliver solutions end-to-end as part of a do it yourself approach.
Advantage:
Relevant courses and qualifications.
Experience in securing AWS services.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8480100
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
3 ימים
חברה חסויה
Location: Herzliya
Job Type: Full Time
As a Security Researcher, you will:
Be a part of the OPSEC department which is in charge of research, design, development and enforcement of advanced OPSEC solutions
Be in charge of the operational security research of a cyber intelligence product
Conduct advanced analysis of operating system internals, including binary and architectural evaluation, security testing and exploit mitigation research
Define product requirements, alert mechanisms and working procedures.
Requirements:
Strong knowledge of operating system internals
At least 2 years of experience in one or more of the following areas: malware research, mobile forensics or vulnerability research
At least 2 years of experience with advance static and dynamic analysis tools (e.g., IDA Pro, Ghidra, Radare2, Binary Ninja, Hopper or similar tools)
At least 2 years of experience with ARM64 assembly and low-level debugging (e.g., LLDB, GDB)
Software development skills in at least one programming language: Objective-C, swift, C/C++
B.Sc. in a technological field or a relevant IDF background
Ability to work independently and as a part of a team
It would be great if you also have:
Familiarity with mobile security testing methodologies and security hardening techniques
Experience with network analysis tools, such as Wireshark, Fiddler and Burp.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8503962
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
6 ימים
חברה חסויה
Location: Herzliya
Job Type: Full Time
Power the Future with us! At SolarEdge (NASDAQ: SEDG), we're a global leader in smart energy technology, with over 3,000 employees, offices in 30 countries, and millions of installations worldwide. Our innovative solutions include solar inverters, battery storage, backup systems, EV charging, and AI-based energy management. We're committed to making clean, green energy the primary power source for homes, businesses, and beyond. With the growing demand for electricity, the need for smart, clean energy sources is constantly rising. SolarEdge offers amazing opportunities to develop your skills in a multidisciplinary environment, covering everything from research and development to production and customer supply. Work with talented colleagues, tackle exciting challenges, and help create a sustainable future in an industry that's always evolving and innovating. Join us and be part of a company that values creativity, agility, and impactful work. We are seeking a System & Cloud Team Manager with strong technical expertise in cloud, on-prem and system security, combined with strategic vision and proven leadership experience. This role involves managing a high-performing team, driving innovation, and building secure, scalable infrastructure across hybrid environments.
Key Responsibilities
* Lead and manage the System & Cloud team, ensuring operational excellence and strategic alignment.
* Design and implement strategic infrastructure plans for hybrid environments (Azure, AWS, On-Prem).
* Define and execute cloud and system security strategies, including infrastructure hardening and compliance.
* Oversee hybrid integrations and virtualization platforms (Azure, AWS, Vcenter – Broadcom). Manage Microsoft ecosystem services including: Active Directory , Group Policy, Windows Server, Windows Services Identity & Access Management (AAD, Entra) PKI (Public Key Infrastructure) DNS, DHCP, and File Services
* Drive automation initiatives using tools such as Ansible and PowerShell to improve efficiency and reliability.
* Ensure timely patching, system updates, and adherence to security best practices.
* Collaborate with cross-functional teams to support governance, risk management, and compliance initiatives.

Country:
Israel

City:
Herzliya
Requirements:
* 5+ years of managerial experience in IT infrastructure or cloud environments.
* Strong technical understanding of On-Prem Infrastructure and cloud system security and architecture.
* Hands-on expertise in Windows Server/Linux, Microsoft services (AD, AAD, Entra, PKI), automation tools, Azure/AWS, Vcenter, DNS/DHCP/File Services.
What We Offer
* Leadership role in shaping enterprise cloud and system strategy.
* Exposure to cutting-edge technologies and hybrid environments.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8292682
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
06/01/2026
Location: Herzliya
Job Type: More than one
We are seeking an experienced and analytical Intelligence Methodologist to join our new Gen AI team .
You will collaborate with analysts, product managers, data scientists and developers to design and optimize investigative workflows, ensuring our solutions address real-world intelligence challenges effectively.
This is a unique opportunity to combine your expertise in intelligence methods with cutting-edge conversational Gen AI technology.
you will:
Fostering cross-functional communication and bridging collaboration between Product Management, Data Science, and Development teams to design knowledge structures, training logic, and investigative methodologies that drive LLM-based conversational AI.
Develop and curate high-quality domain-specific datasets for training and evaluation.
Communicate findings, progress to stakeholders, and provide recommendations for further enhancements.
Provide expert knowledge and insights to ensure the LLM agent understands and processes domain-specific language accurately.
Design, document, and refine methodologies for conducting intelligence investigations.
Train intelligence analysts on the use of methodologies and tools.
Create documentation and training materials to support effective adoption of workflows.
Collaborate with internal teams and external partners to understand operational requirements.
Requirements:
Proven experience in Intelligence analysis/investigation and a deep understanding of its language and nuances.
Strong background in homeland-security/national-security/law-enforcement
Previous experience in a similar role or project involving LLM/AI-agents.
Experience with LLMs and fine-tuning techniques - an advantage
Excellent verbal and written communications skills English other languages advantage.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8489931
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
30/12/2025
חברה חסויה
Location: Herzliya
Job Type: Full Time
CodeValue is looking for a skilled and experienced Security Engineer to join our team and take a leading role in designing, implementing, and governing the security posture of our cloud and enterprise environments. This individual will work closely with cross-functional teams to ensure security is embedded across systems, applications, and workflows, aligning with industry best practices and compliance requirements.
Requirements:
Mandatory Qualifications
* At least 3 years of experience as a Security Engineer/DevSecOps
* Understanding of the Shared Responsibility Model
* In-depth knowledge of securing at least one cloud platform: AWS / Azure / GCP
* Understanding of Landing Zone and Well-Architected Best Practices
* Expertise in IAM (Identity and Access Management) network security (VPC, SG, FW).
* Experience in writing cloud policies (e.g., SCP Monitoring and logging (CloudTrail, GuardDuty, Security Hub).
* Strong understanding of general information security: security principles, encryption, risk management, incident response
* Scripting languages: Python / Bash / PowerShell
* Experience in configuring WAF Infrastructure as Code (IaC): Terraform / CloudFormation Preferred Qualifications:
* Experience in Kubernetes and container security Data security (encryption, KMS ), securing cloud services (e.g., EC2, Lambda, Containers
* Relevant certifications: AWS Certified Security – Specialty, Azure Security Engineer, CCSP (strong advantage).
* Familiarity with DevSecOps and code security tools (SAST/DAST)
* Experience with CSPM tools (e.g., Wiz, Orca Security, Prisma Cloud).
* Familiarity with SIEM tools (Splunk, Sentinel) and investigation capabilities.
* Experience securing Microsoft 365 services and Google Workspace
* Understanding of regulations and standards (GDPR, ISO 27001). Personal Skills Hands-on approach. Strong interpersonal communication skills and teamwork capabilities. High-level English proficiency.

This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8235613
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
23/12/2025
חברה חסויה
Location: Herzliya
Job Type: Full Time
We are seeking a highly skilled and experienced Security GRC Specialist to join our team. This position reports directly to the GRC Manager, as part of the CISO group. The ideal candidate should have a strong background in GRC, with a proven track record of successfully implementing GRC programs. This role requires a diligent professional who thrives in a fast-paced environment and can manage multiple priorities while maintaining attention to detail.

Key Responsibilities:
Develop, implement, and maintain GRC frameworks, policies, and procedures.
Manage ISO 27001/ISO27017/ISO27018 compliance by conducting gap analyses, maintaining ISMS documentation, and coordinating audits to ensure ongoing certification.
Respond to customer due diligence requests and support the review of security and compliance clauses in customer and vendor contracts,
Conduct third-party risk assessments and identify potential security threats and vulnerabilities.
Manage and maintain the GRC platform to ensure accurate compliance monitoring, documentation, and audit support
Collaborate with cross-functional teams to integrate GRC initiatives into business processes.
Provide guidance and support to internal stakeholders on GRC-related matters.
Stay up to date with industry trends and emerging threats to continuously improve the GRC program.
Requirements:
Minimum of 3 years of experience in GRC, and information security.
Strong knowledge of regulatory requirements and industry standards (e.g., GDPR, ISO 27001).
Experience in responding to customer due diligence requests.
Experience in conducting security audits such as SOC 2 and ISO 27000 family.
Experienced with leading GRC platforms, covering third-party risk management, audit management, and security awareness programs.
Excellent analytical, attention to detail, problem-solving, and communication skills.
We are looking for a passionate candidate who can work independently and collaboratively as part of a team in a fast-paced environment.
Relevant certifications such as CISSP, CISM, or CRISC are preferred.
Highly advantageous experience with:
ISO 42001 compliance, including implementation, documentation, and audit coordination.
Payment Card Industry (PCI) standards.
Business Continuity Management.
Developing GRC platform automations, integrations, and workflows.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8470066
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
23/12/2025
חברה חסויה
Location: Herzliya
Job Type: Full Time
We are looking for an Application Security Pen Tester to join the Application Security team responsible for application security.
The successful candidate will be responsible for contributing to our Cloud/On-prem strategic security program.
Responsibilities:
Conduct on-going Penetration testing activities across all platforms and services
Identify and facilitate remediation of application and cloud security exposures and vulnerabilities
Work to obtain the right mandate to ensure no new products or services are launched without the appropriate security controls
Take a part in development lifecycle and integration of security features into all phases of software design and development
Manage, aggregate, triage and track Vulnerabilities identified by external Assessors.
Assist in implementing Security Testing tools (Dynamic, Static and Runtime) in the Testing pipeline
Assist in defining testing scenarios for the Continuous Integration tests to cover identified vulnerabilities
Work closely with R&D to enhance application security on all layers
Requirements:
3+ years of hands-on experience in Penetration Testing for application and cloud environments.
Thorough understanding of cyber security frameworks, such as NIST CSF, CIS CSC
Understanding of Cloud)AWS & Azure) technologies and SaaS environments
Experience with web & application security, familiar with OWASP frameworks, solutions, and initiatives
Experience with security solutions such Vulnerability scanners, and DAST solutions and more
Experience with Container and K8s
Experience conducting application penetration testing.
Technical experience in network security technologies or security operations with a proven ability to engage and drive product and engineering priorities
Work with the business to identify, capture, escalate, and close security vulnerabilities found in Varonis products.
Leverage tools to deliver vulnerability information back to the development organization for remediation.
Coordinate security risk assessments for new products & solutions through the risk assessment team.
Maintain a risk register and risk visual with clearly defined owners for each risk.
Contribute to product/solution security frameworks and standards to reduce development cycle of new products and services and to ensure consistency across the different products and platforms.
Develop, institute, and maintain cloud security architecture standards
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8470035
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
3 ימים
חברה חסויה
Location: Herzliya
Job Type: Full Time
e a part of the top cyber research teams in the industry and make the world a better place!
As a Vulnerability Researcher, you will be:
Work with top-notch researchers using the latest technologies
Research low-level mechanisms, finding vulnerabilities and circumventing modern mitigation techniques.
Requirements:
Vulnerability research and exploit development experience
Strong analytical and problem-solving skills
Knowledge of programming languages: Assembly, C and Python
Experience with reverse engineering tool
It would be great if you also have:
B.Sc. in Computer Science or equivalent
Relevant military experience
Knowledge of mobile devices internals/Linux kernel/Win internals.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8503939
סגור
שירות זה פתוח ללקוחות VIP בלבד