דרושים » אבטחת מידע וסייבר » Software Developer - Cyber Security REF9K

We're looking for an innovative, experienced Software Developer to spearhead the creation of autonomous AI agents at the intersection of cyber security and advanced AI. Your primary focus will be designing and building cutting-edge agentic systems from scratch that reason over security data, orchestrate tools, and operate autonomously to support our company's cyber security and defense efforts. In this role, you will bridge the gap between advanced AI concepts and production-grade software engineering, taking real ownership of the architecture, mentoring others, and applying next-generation technology to counter advanced cyber threats.
Key Responsibilities
Design and build autonomous AI agents from scratch to actively support our company's cyber security capabilities
Develop knowledge-based, agentic AI systems capable of reasoning over security data, deciding on action plans, and executing tools autonomously
Own the multi-agent orchestration infrastructure, ensuring it is highly scalable, reliable, and secure against cyber attacks
Collaborate with cross-functional teams to integrate AI agent capabilities smoothly into existing product pipelines and cloud architectures
Stay current on both core software engineering trends and modern AI development methodologies, bringing that knowledge to the team.

This hands-on, customer-facing role will lead SIEM and SecOps modernization, migration, and delivery engagements across multi-cloud environments, leveraging security platforms and cloud-native services across GCP, AWS, and Azure.

Responsibilities
Lead technical Pre-Sales activities, including discovery sessions, solution design, demos, and PoCs.
Translate customer requirements into practical Cloud Security and SecOps architectures.
Implement, configure, and integrate SIEM, SOAR, and CNAPP platforms.
Onboard data sources from cloud environments, firewalls, endpoints, applications, and other systems.
Build and optimize detection rules, parsers, queries, dashboards, and SOAR playbooks.
Tune alerts to improve accuracy and reduce false positives.
Lead production deployments and migrations from existing platforms.
Troubleshoot implementation issues and collaborate with customers and internal teams throughout the project lifecycle.
Ensure delivered solutions are stable, scalable, and aligned with customer needs.

We are on an expedition to find you, a CTI Analyst who is passionate about turning raw threat data into clear, evidence-backed intelligence and operational outcomes. Youll play a major role in advancing our next-gen CTI platform across threat actor attribution, adversary infrastructure analysis, External Attack Surface Management (EASM), and STIX-based knowledge management - Working closely with the Engineering, MLOps, and Data teams to deliver high-signal intelligence that drives action.
:Responsibilities
Execute the CTI research roadmap across threat actor attribution, adversary infrastructure analysis, EASM insights, and STIX-based knowledge management.
Conduct in-depth infrastructure and campaign analysis, including domain/IP relationships, hosting patterns and certificates.
Identify, validate, and track Indicators of Compromise (IOCs) and emerging threats using passive sources and approved active techniques.
Normalize, enrich, deduplicate, and maintain intelligence in STIX 2.1, aligned with internal ontology and quality standards.
Collaborate with the Engineering, MLOps, and Data teams to translate intelligence into actionable intelligence, alerts, and customer-facing outputs.
Produce high-quality intelligence reports, threat briefs, watchlists, and early-warning assessments for internal teams and customers.
Support investigations by providing contextual analysis, confidence scoring, and evidence-backed assessments.
Ensure adherence to governance, ethics, sourcing, provenance, and data-quality standards across all intelligence outputs.

The Cyber Threat Intelligence Hunter will sit within Unit 42 Managed Threat Hunting and support proactive, intelligence-led hunting across customer environments. This role combines hands-on threat hunting with cyber threat intelligence analysis, helping multinational organizations stay one step ahead of adversaries and cyber threats.
Key Responsibilities
Analyze public and private threat intelligence, Unit 42 research, adversary campaigns, malware activity, infrastructure, indicators, and TTPs.
Translate threat intelligence into actionable hunting hypotheses, investigation workflows, hunting queries, and customer-facing findings.
Execute existing threat hunting reports and hunting workflows, investigate results, and support timely customer reporting.
Investigate scheduled hunt detections and compose clear, professional reports when relevant.
Investigate hunting leads based on IOCs, threat intelligence, internal detections, customer telemetry, and emerging adversary behaviors.
Monitor the threat landscape and prepare initial context for emerging campaigns, enabling the global team to continue deeper investigation and hunting.
Collaborate with threat hunters, detection engineers, incident responders, MDR, and Unit 42 researchers to operationalize intelligence quickly and effectively.
Escalate major, unclear, or high-impact security events to the Threat Hunting leadership team when necessary.
Provide ongoing feedback on findings, hunting reports, queries, intelligence workflows, and operational processes to support continuous improvement.

We're looking for an IT Operations & Security Specialist to join our IT & Security team. IT operations will be your primary domain - keeping global infrastructure running, employees productive, and office environments stable across Israel, Europe, and the US - with security work (endpoint monitoring, SaaS risk assessments, access governance, and customer-facing security reviews) as a natural extension of that ownership.
What You'll Do
Deliver Tier 1 and Tier 2 global technical support on a shifted schedule, covering employees across Tel Aviv, Europe, and the US.
Own the full employee onboarding and offboarding lifecycle - device provisioning, access activation, and secure asset retrieval and revocation.
Administer the full identity lifecycle across the core SaaS stack (Okta, Google Workspace), enforcing role-based access controls and license hygiene.
Manage the global hardware lifecycle and asset register, from shipping logistics through secure offboarding and inventory tracking.
Own the office infrastructure environment - network hardware, physical security systems, cabling, and AV/video conferencing setups.
Execute customer-facing security questionnaires and vendor assessments as the operational point of contact for sales-driven security reviews.
Monitor and maintain endpoint health across EDR (CrowdStrike) and MDM (JumpCloud), flagging and remediating non-compliant devices.
Conduct security risk assessments on new SaaS applications and support SOC 2 / ISO 27001 compliance initiatives and audits.