דרושים » אבטחת מידע וסייבר » Network security Analyst 2580

Requirements:
Please note that this role requires availability to work Monday-Friday
Native French speaker
1-2 years experience with intelligence analysis processes (army included), including Open-Source Intelligence (OSINT) and Web Intelligence (WEBINT) gathering, link analysis, and threat actor profiling
Inherent passion for Infosec and service excellence, understanding of cybersecurity
Investigative and analytical problem-solving skills
Knowledge of analytical tools, including excel
Fluent English
Infosec certifications an advantage
Customer facing background an advantage.

Requirements:
B.Sc. / B.A. in Computer Science or another technical discipline.
2+ years of experience in Network Security Research, Threat Research, or a similar Cyber Security role.
Great understanding of networking concepts and common protocols (TCP, UDP, HTTP, DNS, SMB, FTP, etc.).
Understanding of the OSI model.
Experience with Generative AI, Large Language Models (LLMs), or AI-assisted security analysis tools, and an interest in applying AI to Cyber Security research.
Strong technical and analytical skills.
Self-motivated, curious, and eager to learn.
Ability to work in a dynamic, collaborative environment.
Fluent written and spoken English.
Nice to Have
Previous experience in Cyber Security.
Familiarity with common network attacks and vulnerabilities, including DDoS, brute force, spoofing, injection attacks, and insecure deserialization.
Understanding of malware behavior, C&C communication, phishing, drive-by attacks, and network scanning techniques.
Hands-on experience with IPS/IDS technologies, signature development, threat detection, or network traffic analysis.

Requirements:
Previous experience in threat intelligence, due diligence, OSINT or WEBINT
Experience in conducting full-scale research-based reports and communication with stakeholders
Strong critical thinking and analytical skills
Excellent English skills, including reading and writing reports
Background as an intelligence analyst in the IDF or the intelligence community - an advantage
Proficiency in additional foreign languages - an advantage.

Requirements:
3+ years of experience in intelligence, cyber intelligence, military intelligence, technical OSINT, corporate intelligence, threat intelligence or a comparable research role
Strong understanding of mobile and cyber concepts, including mobile apps, device identifiers, mobile malware, spyware, vulnerabilities, cloud services, telecom concepts and network fundamentals
Familiarity with cyber operations, including targeting, exploitation, persistence, collection, exfiltration, infrastructure usage and OPSEC
Strong OSINT skills across corporate registries, LinkedIn, media, regulatory filings, court records, GitHub, technical blogs, WHOIS/DNS, certificate transparency, forums, marketplaces, messaging platforms, app stores, social media and dedicated OSINT platforms/tools
Familiarity with OSINT tools and investigative workflows for entity resolution, link analysis, infrastructure mapping, social media research, breach/leak research, dark web/forum monitoring, domain/IP enrichment and data validation
Ability to assess source credibility, separate facts from assumptions and produce concise, source-backed analysis
Basic scripting ability, preferably in Python or similar languages, for data collection, parsing, enrichment and automation
SQL skills for querying, filtering, joining and analyzing datasets from internal and external sources
Excellent written English
Strong operational security awareness
It would be great if you also have:
IDF intelligence, IDF cyber or technology units, government intelligence/security organizations, mobile security research, cyber intelligence, technical OSINT, cybercrime research, spyware/surveillance technology research, corporate intelligence, due diligence or technology-focused business intelligence
Additional languages are an advantage.

Requirements:
3-6+ years of experience in Cyber Threat Intelligence, SOC/IR intelligence support, EASM, or adversary infrastructure analysis.
Strong understanding of DNS, IPs, ASNs, hosting/cloud providers, TLS/PKI, domain lifecycle, and phishing infrastructure.
Hands-on experience with open-source and commercial CTI sources (OSINT, feeds, telemetry, reputation systems).
Practical knowledge of STIX 2.1, MITRE ATT&CK, TAXII; experience with OpenCTI and/or MISP is a strong advantage.
Ability to perform passive discovery and controlled active validation, with a focus on accuracy, evidence discipline, and noise reduction.
Experience using Python for analysis and enrichment (pandas, notebooks); familiarity with Neo4j or Elasticsearch is a plus.
Strong analytical and threat-intelligence writing skills, able to translate technical findings into clear, actionable insights.
Comfortable working in a collaborative, version-controlled environment (Git), with attention to documentation and reproducibility.
Curious, methodical, and impact-driven mindset with a strong sense of intelligence rigor and accountability.

Requirements:
5+ years total hands-on experience in cyber security / security operations, including:
Hands-on experience with monitoring platforms (SIEM) and detection-rule writing
Operating cyber defense systems (SecOps)
Practical experience with cloud infrastructures (AWS / Azure / GCP)
Solid knowledge of operating systems, network protocols, GPO, Active Directory, and authentication mechanisms
Deep familiarity with security solutions: DLP, WAF, IDM, VA
Proven experience implementing and integrating security systems in production environments
Experience writing technical documentation (HLD/LLD)
Project-management skills: driving implementations with multiple stakeholders
Experience in a mid-size to large organization
Team player, task-oriented, self-driven promoter of initiatives
Requirements:
Experience in a financial organization
B.Sc. in Information Systems or related field
Relevant professional certifications (e.g., CISSP, CCSP, Security+, vendor SIEM certs)
NOC background / familiarity with NOC tooling.

Requirements:
5+ years of experience in cybersecurity research, with a proven track record of impactful projects.
Good knowledge of Linux OS internals, including both user and kernel space.
Solid knowledge of the cyber threat landscape, modern malware techniques, and APTs.
Hands-on experience in real-world threat hunting, incident response, or detection engineering.
Proficiency in programming languages such as Python, C, and/or C++, with a strong understanding of system-level programming and APIs.
Excellent problem-solving skills and a passion for cybersecurity innovation.
Ability to work independently, take initiative, and collaborate effectively in a team environment.
Preferred Qualifications
Background in EDR/XDR products or security solution development.
Experience in reverse engineering, including familiarity with debugging and disassembly tools such as GDB, IDA Pro, or Ghidra.
Experience in advanced data analysis, statistics, or machine learning for security applications.
Experience with Linux kernel development or vulnerability research.
Familiarity with virtualization platforms (e.g., ESXi/vCenter).

Requirements:
Native-level fluency in English - Mandatory
3+ years of experience in IT compliance, information security, or a related field
Security certifications such as CISA, CISSP, or Security+
Advanced knowledge of regulatory frameworks and compliance guidelines
Strong analytical, problem-solving, and communication skills
Bachelors degree in a relevant field (e.g., Information Security, Law, Business, or related discipline)

Requirements:
5+ years of experience in cybersecurity research, offensive security, penetration testing, red teaming, threat analysis, or related security engineering roles.
Background in malware analysis, network research and OS internals.
Proven experience with reverse engineering of x86/x64/ARM binaries.
Experienced with analysis tools, such as: IDA, WinDBG, SysInternals etc.
Curiosity and understanding of modern AI techniques - or a strong motivation to partner with AI experts to integrate domain knowledge into intelligent systems.
Strong ownership and leadership skills, with a track record of driving initiatives forward.
Understanding the threat landscape, attacker's mindset and techniques.
Solid coding skills with the ability to dive into internals and develop proof-of-concepts.
Excellent communication, teamwork, and problem-solving skills
Kernel development experience - advantage
Advanced C++ - advantage

Requirements:
All candidates must possess the following qualifications:

2+ years of specialized experience in the following domains:

Cyber Threat Intelligence.

Digital Risk Monitoring.

Third-party Risk Management.

Knowledge of cyber threat intelligence tradecraft, terminology, lifecycle, and all-source analysis.

Familiarity with dark and deep web ecosystems, including threat actors, forums, leak sites, malware, and adversary TTPs.

Demonstrated ability to work collaboratively within a customer-focused team environment, sharing knowledge and supporting colleagues while maintaining strong individual accountability for assigned deliverables.

Technical understanding of security across diverse cloud environments (production, development, isolated workspaces) with specific knowledge of enterprise SaaS platforms, their interconnected ecosystems, and unique security vulnerabilities.

Exemplary organizational skills with the ability to communicate both executive-level and detailed technical findings to customers.

Background in presenting, briefing, and delivering reports to stakeholders ranging from individual contributors to executives.

Curiosity about how AI, machine learning, and autonomous agents can enhance threat intelligence analysis and customer outcomes.

Ability to problem-solve and create customer solutions in a fast-paced environment.

Ability to operate independently with minimal direction while managing multiple concurrent workstreams.

Adaptable and willing to learn new technologies.

Ability to travel on short notice, up to 5% of the time.

Bonus Points:

Understanding of contemporary scripting languages.

Familiarity with application programming interfaces (API).