we are looking for a talented Application Security Specialist to join our team. In this role, you will take an active part in application penetration testing, threat modeling, Secure SDLC activities, and AppSec initiatives that help evaluate and improve security posture. The position includes hands-on security testing of web, mobile, API, thick client, AI/LLM integrations, and MCP-based application components, identifying and validating vulnerabilities, assessing real business impact, supporting customers with clear remediation guidance, and contributing to application security processes, tools, and best practices.
Responsibilities:
Perform hands-on application penetration testing across web, mobile, API, thick client, AI/LLM integrations, and MCP-enabled application components.
Perform threat modeling and secure design reviews to identify risks early in the development lifecycle.
Support development teams with practical remediation guidance and secure implementation recommendations.
Perform Secure Software Development Lifecycle and secure coding training for developers.
Evaluate and improve customers application security development lifecycle, including secure coding practices, vulnerability management, remediation workflows, and security gates.
Participate in client-facing discussions, including assessment scoping, finding walkthroughs, remediation alignment, and retest updates.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.

we are looking for a security architect to join our team! 
The cyber architecture team is part of professional services delivery department and is dedicated to helping drive customers' cybersecurity maturity forward. as a security architect you would be conducting enterprise level organizations' white-box risk assessments, reviewing design issues or security controls configuration, and offering relevant mitigations to identified risks during penetration testing, executed by red teamers.  
Responsibilities:
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Review designed or deployed environments, identifying security flaws and recommending mitigations plans
Review Implementation of technical security controls, identify gaps and offer practical mitigations.
Escort, evaluate and improve our clients security posture by elevating their infrastructure resilience and implement best-practice organizational procedures
Escort mitigation plans and design practical implementations for security issues e.g., firewall policies review, segmentation & segregation recommendations, Microsoft AD-tier Model implementation etc.
Research and advocate for new security solutions and technologies

we are looking for a GRC Security Specialist.
Cyber Security Governance protects the security of an organizations information systems and data by setting policies, monitoring compliance, and following defined procedures to identify, assess, and manage risks from external and internal threats. We are seeking a GRC Security Specialist to join our Cyber GRC Team . You will be joining a tight-knit and highly respected team of GRC experts who are central to security strategy. In this role, you will be at the heart of protecting our global financial platform, directly influencing the trust and safety of millions of users worldwide. As a GRC Security Specialist, you will be responsible for the following:
Glilot, Israel
Hybrid
Full-time
What you'll do:
Directly responsible for policies, procedures, and controls to assure compliance with applicable regulatory, legal, and audit requirements as well as good business practices.
Develop a Cyber security compliance strategy and approach and ensure compliance with contractual requirements and globally recognized standards and guidelines.
Identify regulatory, legislative, and industry-specific compliance requirements and define controls that can be used to meet those requirements.
Conduct and participate in periodic internal reviews or audits to ensure that compliance procedures are followed.
Oversee and evaluate compliance systems to ensure they function effectively.
Compile and present reports to management on compliance activities and progress.
Stay updated on industry developments, regulatory trends, and best practices to evaluate their potential impact on the organization.
Design and implement enhancements in compliance communication, monitoring, and enforcement mechanisms.
Develop and execute a compliance awareness program, including the creation and distribution of materials for all employees.
Partner with Legal and IT teams to manage data protection agreements and compliance initiatives.
Lead the development and execution of company-wide security awareness and training initiatives.
Assist in incident response planning and investigations when necessary.

Cye is seeking a Cybersecurity Architect (GRC & Risk) to join our cybersecurity architecture team. In this role, you will lead security governance, risk, and control assessments, conduct third-party due diligence, support maturity assessments, and drive mitigation and architectural review processes. Youll work closely with CISOs, security leaders, engineering teams, and customers to develop risk-focused methodologies and improve security frameworks. This position is best suited for candidates with a technical GRC, risk, or security assessment background who excel in analysis, interpretation, and structuring of security information.
Responsibilities:
Lead customer third‑party security due diligence assessments.
Lead mitigation workshops to translate penetration test and assessment findings into prioritized remediation workplans.
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Develop and refine security methodologies, processes, and architectural guidance.
Maintain internal documentation and ensure alignment between frameworks, processes, and practical implementation.
Analyze technical findings and map them to governance, risk, and control gaps.
Produce clear, structured reports and executive‑ready summaries for technical and non‑technical audiences.

We are seeking a talented and versatile Senior Threat Detection Engineer to work with us in Herzliya with expertise in iOS and Android security. As a key member of our engineering team, you will play a crucial role in designing and developing complex compromise detection solutions and providing advanced professional services to customers to assist them in determining whether their mobile devices have been compromised.

Responsibilities:
Design and develop mobile focused on-device and off-device malware and compromise detection solutions that enable forensic analysis, including infrastructure, features, classification logic, tools, proof of concepts, heuristics and signatures for Android and iOS devices.
Represent the Company in front of customers by providing advanced professional services including malware and indicator of compromise analysis to determine if devices have been compromised, as well as professional training sessions.
Develop and implement components and features using C, C++, Python, assembly, Java, JavaScript, Go, Rust and other programming languages as needed, while employing secure coding practices and ensuring optimal performance, responsiveness, and cross-platform compatibility in line with product specifications.
Represent the company in front of potential customers and partners by conducting technical demonstrations, participating in meetings and other pre and post sales engagements.
The position may require local and international travel.

Senior-level individual contributor responsible for driving product strategy, roadmap, and go-to-market execution for cryptographic security portfolio, including data encryption, PKI, TLS, security SDKs/APIs, and FIPS 140-compliant solutions.



Key Responsibilities

Define and drive product vision, strategy, and roadmap for enterprise encryption, PKI services, TLS implementations, and key management solutions; engage directly with enterprise customers, federal agencies, and partners.

Serve as subject matter expert on FIPS 140 requirements and support CAVP/CMVP certification processes, including lab coordination.

Own product strategy for developer cryptographic SDKs and APIs, enabling encryption, certificate lifecycle management, and key management integration and oversee Secure Development Lifecycle (SDL) practices, including threat modeling, secure coding standards, cryptographic implementation reviews, and vulnerability management.

Drive release communications, customer-facing advisories, and cross-functional delivery for cryptographic SDK/API products.

Identify innovation opportunities including post-quantum cryptography readiness, Zero Trust integration, and crypto-agility

HW Application Engineer - Job description: we are a leading supplier of microcontrollers and security hardware solutions for tier-1 customers in the computing and servers business. It is a self-contained design center, spanning from product management, system and chip architecture, through design, software development, system engineering and production. The group works closely with major customers, primarily key OEMs in the computing space, to develop semi-custom, innovative solutions for a wide range of application platforms. We are looking for a Hardware Application Engineer, to maintain and support our strong collaboration with our customers.
What You Will Be Doing
* Lead customers through all stages of designing their systems based on Nuvoton manageability and security microcontrollers (i.e., BMC, EC, SIO and TPM) from planning till production.
* Respond and resolve customer hardware related issues and requests, reported by the regional support team (FAEs) or directly by customers.
* Work closely with R&D, architects and PMs to provide issue resolutions, workarounds, and implement product features or support tools.
* Key contributor in complex debug tasks for issues found by customers; build debug strategies and hands-on work with the design team through the debug.
* Develop deep knowledge of customer applications and systems, recommend application solutions, design ideas and products to customer design teams.
* Develop and maintain technical documentation (e.g., reference schematics, application notes, design guidelines).
* Provide inputs and participate in next generation ICs definition based on customer inputs.
* Contribute to the definition of innovative and differentiated products.

At Infinidat, a Lenovo company, we empower enterprises and service providers with cutting-edge storage platforms that redefine performance, reliability, and cyber resilience at scale. We are looking for a Tech Lead to join our System Validation & Verification team - someone who combines deep hands-on automation expertise with the leadership skills to drive technical direction, mentor engineers, and own end-to-end quality strategy for a complex, enterprise-grade distributed storage system. This role is centered on test design and development - the ideal candidate is someone whose craft is writing and owning tests for complex product features, and elevating a team to do the same at a high level. If you thrive at the intersection of architecture, code, and quality - and get energized by the challenge of making large-scale systems provably correct - this role is for you.

Responsibilities:

* Lead the technical direction of the automation group: define best practices, set coding standards, and guide architectural decisions for testing methodologies and new feature implementations
* Remain hands-on: actively write, review, and contribute to test code alongside the team, leading by example rather than by title
* Design detailed test plans for new features, and review and approve implementation designs proposed by team members for how those features will be tested
* Engage with R&D and Product from the earliest stages of feature development, providing input on testability, edge cases, and quality requirements before implementation begins
* Design and own test strategies for large, cross-cutting features involving multiple services and components working together
* Mentor and grow team members, conducting code reviews and elevating the team's engineering quality
* Work closely with development, product, and architecture teams to influence design decisions from a quality and testability standpoint
* Drive root cause investigations of complex, hard-to-reproduce issues - race conditions, timing-sensitive failures, and problems that only surface at scale
* Own release sign-off decisions - you'll have the authority to say "not good enough"
* Identify gaps in test coverage across service boundaries and drive initiatives to close them

our DFIR team is responsible for responding to our clients' cyber incidents and crises.
Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities
Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
Perform incident response in a cloud environment (Azure, AWS etc.).
Perform digital forensics investigations
Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
Perform hunt-evil and find-evil activities for proactively detecting attacks
Work closely with our in-house red team, CTI, and cyber architect teams
Work closely with worldwide companies, CISOs, and technology experts