דרושים » אבטחת מידע וסייבר » Senior System Security Architect

We help organizations reinvent themselves.
Through data, technology, and strategic thinking, we lead transformation processes that reshape how organizations operate, make decisions, and grow.
If youre looking to work in an environment that encourages initiative, challenges ideas, and creates real impact - this is the place for you.
Integrity, excellence, and innovation are not just values - they are our standard.
Our Cyber & Cloud Security Department is seeking an Information Security Architect to join us.
This role focuses on leading and advising clients and internal teams on integrating information security into complex technology, cloud, and digital transformation projects.
Responsibilities:
Lead security aspects in projects such as system implementations, cloud migrations, and digital transformation initiatives
Design and define end-to-end security architectures and protection strategies across cloud and on-prem environments
Provide expert guidance on Security by Design, Privacy by Design, and emerging areas such as AI Security
Conduct risk assessments, threat modeling, and comprehensive security reviews
Support implementation of security solutions and oversee security testing activities
Define security requirements and support RFP processes and vendor evaluations
Collaborate closely with development, product, infrastructure, cloud, and DevOps teams.

We are KPMG Israel. We help organizations reinvent themselves. Through data, technology, and strategic thinking, we lead transformation processes that reshape how organizations operate, make decisions, and grow. If you’re looking to work in an environment that encourages initiative, challenges ideas, and creates real impact - this is the place for you. Integrity, excellence, and innovation are not just values - they are our standard.
Our Cyber & Cloud Security Department is seeking an Information Security Architect to join us. This role focuses on leading and advising clients and internal teams on integrating information security into complex technology, cloud, and digital transformation projects.
Responsibilities:
* Lead security aspects in projects such as system implementations, cloud migrations, and digital transformation initiatives
* Design and define end-to-end security architectures and protection strategies across cloud and on-prem environments
* Provide expert guidance on Security by Design, Privacy by Design, and emerging areas such as AI Security
* Conduct risk assessments, threat modeling, and comprehensive security reviews
* Support implementation of security solutions and oversee security testing activities
* Define security requirements and support RFP processes and vendor evaluations
* Collaborate closely with development, product, infrastructure, cloud, and DevOps teams

תת מחלקה:
יעוץ סייבר ואבטחת מידע

Required Security Solution Architect
As a Security Solution Architect, you will be a high-impact technical practitioner and the definitive domain expert in Application Security (AppSec) and software supply chain security. You are a strategic "force multiplier" for our Strategic customers Solutions Engineering organization, leveraging deep technical roots to bridge the gap between developer-centric workflows, IT security teams, and executive risk management. You will serve as the technical authority that internal teams and external customers "pull" into their most complex and critical security opportunities.
As a Security Solution Architect you will...
Architect Enterprise Application Security: Lead the design of high-level , enterprise-grade DevSecOps architectures, ensuring our security capabilities provide a "Future State" blueprint for our most strategic customers.
Provide product in-depth Leadership: Serve as the primary technical authority for deep-dive customer sessions, demonstrating "under-the-hood" knowledge of application security, binary-level analysis, ML/AI security, and the intricacies of the modern software supply chain.
Drive Executive & Technical Command: Navigate seamlessly between deep-dive technical remediation whiteboarding with Security Engineers and high-level strategic ROI and value presentations for CISOs, security & engineering leaders.
Lead the Field-to-Product Innovation Loop: Systematically capture field use cases and technical gaps to work closely with Product and Engineering, ensuring our roadmap evolves based on real-world enterprise data.
Execute Competitive Strategy: Lead & master the technical displacement of legacy and modern AppSec players by developing "Win Themes" that highlight our unique ability to secure the entire lifecycle.
Scale Through Cross-Functional Enablement: Mentor the broader Solutions Engineering team to raise the organization's collective "Security IQ" by creating reusable architectural patterns, discovery playbooks and demos.
Optimize Post-Sales Adoption: Partner with Customer Success to analyze how customers operationalize our security products, identifying friction points to improve long-term retention and the "Technical Win".

We are seeking an experienced Security Architect who has experience in confidential computing and attestation systems. The ideal candidate should have deep expertise in at least one leading confidential compute architecture and ideally in PCIe support around TDISP, IDE, SPDM. Strong knowledge of general system security, virtualization and hardware-enforced isolation primitives is essential.

What you'll be doing:
Lead, research, design, develop, and implement solutions for next-generation confidential computing network devices.
Develop novel hardware isolation mechanisms to provide defense in depth in the SoC.
Collaborate with external and internal hardware and software teams to implement and deliver the architecture.
Architectural modeling, validation, microarchitectural definition, and developing proofs-of-concept for secure platforms.

We are looking for a proactive Security Assurance Lead to advance our security program into a proactive validate and verify model. Your mission is to ensure our defenses arent just present, but effective. In this hands-on technical role will own and manage testing, validating and reporting on our security posture, through automated testing against our controls, and ensure our security stack is optimized, integrated, and fully utilized.
Key Responsibilities:
Security Assurance Management: Define, orchestrate and drive the security assurance program from vision to full implementation.
Continuous Control Validation: Design and execute automated testing (e.g., Breach & Attack Simulation) to verify that prevention and detection controls are functioning across cloud, SaaS and IT environments.
Central Visibility Hub: Build and maintain a real-time Security Posture Dashboard. This hub will provide a single pane of glass for the coverage and health of our security stack.
Tool Optimization & Efficacy: Review our existing security suite to ensure tools are properly configured, integrated, and delivering ROI. You will identify blind spots where tools are installed but not effectively monitoring or blocking.
Offensive Testing Strategy: Coordinate regular external offensive testing cycles such as Penetration Testing, Phishing, etc. and translate broken controls and findings into actionable items.
Operational Excellence: Define clear ownership, maintenance schedules, and lifecycle processes for all security technologies to prevent tool rot.

we are looking for a Security Architect.
Providing an identity security platform to some of the most sensitive organizations in the world, product security is key in Security. As a Product Security Architect, you will be responsible for designing, shaping, and evolving the security architecture of all of our SaaS services. Youll be focused on proactively reducing security risks by performing architectural reviews, providing guidance and governance for security programs, owning application security training all through close collaboration with development and DevOps teams.
What youll do:
Security Architecture & Design
Security Reviews and Threat Modeling
Application Security Training
SDLC Security
Establish and provide guidance around application security and DevSecOps security programs