Technical Fraud Threat Analyst

עדכון קורות החיים לפני שליחה

8795229

שירות זה פתוח ללקוחות VIP בלבד

משרות דומות שיכולות לעניין אותך

דיווח על תוכן לא הולם או מפלה

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

לפני 22 שעות

Fraud Threat Analyst

חברה חסויה

Location:

Job Type: Full Time

We are seeking to hire a Fraud Threat Analyst to join the Fraud team. In this role, you will be responsible for researching, evaluating, and analyzing fraud detection mechanisms and vulnerabilities across various platforms and solutions. You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations to identify fraud risks, and monitor online platforms to detect malicious activities. You will also focus on uncovering fraud tactics, behavioral vulnerabilities, and process bypasses while delivering actionable mitigation recommendations to clients.
Key Responsibilities:
* Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the darknet).
* Analyze large datasets to uncover patterns and deliver actionable insights.
* Monitor third-party websites and channels for malicious activities and fraud risks.
* Prepare detailed reports with findings, insights, and actionable recommendations.
About us:
A trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, we provide end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. we are widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Requirements:
Required Skills & Experience:
* 3+ years of experience in intelligence analysis, CTI, or fraud detection.
* Strong understanding of OPSEC principles.
* Strong knowledge of web intelligence (WEBINT) and OSINT, including social media, apps, and the dark web.
* Strong analytical, communication, and reporting skills.
* Proactive, creative, and quick to learn new tools and practices.
* Fluent in English (additional languages are a plus).
* Comfortable with sensitive content. Advantage:
* Experience in conducting red team exercises on online platforms to uncover potential abuse methods and bypass mechanisms
* Experience with multiple languages.
* Platform familiarity: Hands-on experience with social media, apps, and forums.
* Experience with automation tools or scripting.

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8795228

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

10/08/2026

Fraud Threat Analyst

חברה חסויה

Location: Ramat Gan

Job Type: Full Time and Temporary

Alice is seeking to hire a Fraud Threat Analyst to join the Fraud team. In this role, you will be responsible for researching, evaluating, and analyzing fraud detection mechanisms and vulnerabilities across various platforms and solutions. You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations to identify fraud risks, and monitor online platforms to detect malicious activities. You will also focus on uncovering fraud tactics, behavioral vulnerabilities, and process bypasses while delivering actionable mitigation recommendations to clients. Key Responsibilities:
* Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the darknet).
* Analyze large datasets to uncover patterns and deliver actionable insights.
* Monitor third-party websites and channels for malicious activities and fraud risks.
* Prepare detailed reports with findings, insights, and actionable recommendations.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8571820

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

לפני 23 שעות

Mobile Threat Analyst

חברה חסויה

Location:

Job Type: Full Time

As a Mobile Threat Analyst, you will use your internet-fluency, online resourcefulness, broad areas of interest, technical skills, AI-driven methodologies, and hacker-like thinking to solve puzzles and lawfully access difficult-to-come-by open-source data from the deep web.
Responsibilities include:
* data mining and advanced analysis - conducting high-level Open Source Intelligence
* Collaboration with technical teams
* Analyzing malicious activities online, getting to their sources & distribution methods
* Analyzing large, complex datasets using statistical, scripting, and AI-based techniques.
* Researching new online platforms to discover methods for automating data collection.
* Monitoring third-party websites, forums, messaging app channels, dark web communities, and emerging platforms to uncover malicious activities.
* Translating analytical findings into actionable recommendations for detection systems and enforcement strategies.
* Generate intelligence reports often regarding highly technical concepts and TTPs.
About us:
A trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, we provide end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. we are widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Requirements:
Skills & Qualifications:
Play-to-win attitude: Curiosity and proactive approach to learning and developing technical skills as well as out-of-the-box and creative thinking
* Experience writing technical intelligence reports and presenting complex findings in clear, accessible English for non-technical stakeholders Fluent in written English, with the ability to communicate clearly and professionally - a must Strong communication skills, with the ability to collaborate effectively across diverse teams Comfortable with basic coding principles, including the ability to read and understand code (preferably in JAVA, JavaScript and Python) Strong Advantage:
* Extensive intelligence analysis experience (3+ years) - advantage
* Understanding of the mobile threat ecosystem / threat intelligence analysis background (1-2 years)
* Ability to leverage AI-assisted coding to develop scripts and lightweight internal tools, with a strong motivation to further develop technical and programming skills
* Proficiency in additional languages

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8795197

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

חברת השמה / כח אדם

לפני 22 שעות

Senior Fraud Analyst

חברה חסויה

Location: Tel Aviv-Yafo

Job Type: Full Time

We are looking for a Senior Fraud Analyst to serve as the technical cornerstone of our Fraud Prevention team.
In this role, you won't be managing a team; youll be managing the technical evolution of our fraud defenses. Reporting directly to the Fraud Prevention Director, you will act as a high-level individual contributor, bridging the gap between data science, engineering, and risk strategy. You will be responsible for pioneering the use of AI and advanced analytics to protect our community and ensure our platform remains the safest place for independent businesses to grow.
Here are a few of the things you'll do:
Technical Strategy & Architecture: Partner with the Fraud Prevention Director to define the long-term technical roadmap, moving us toward an AI-first, autonomous fraud detection ecosystem.
AI & LLM Integration: Design and implement Generative AI agents and LLM-powered workflows to automate complex forensic investigations, reducing the time-to-detect for emerging fraud vectors.
Advanced Detection Modeling: Develop and prototype sophisticated ML models and graph-based heuristics to identify collusion, synthetic identities, and fraud rings.
Cross-Functional Technical Lead: Serve as the primary technical consultant to Product and Engineering, ensuring that new payment features (like RTP or international expansion) are built with scalable, AI-driven safeguards from day one.
Expert Forensics: Act as an escalation point on high-stakes, large-scale fraud attacks, utilizing advanced Python and network analytics to deconstruct and mitigate threats.
Data Excellence: Set the standard for the fraud teams technical stack. You will optimize our SQL/Python environments and ensure our data infrastructure is capable of supporting real-time AI inference.

Requirements:
5+ years of experience in fintech or payments fraud analytics. You are a seasoned IC who has scaled fraud programs in complex, high-volume environments.
AI/ML Expertise: Proven experience leveraging Generative AI, LLMs (e.g., RAG, agentic workflows), and Machine Learning to solve real-world risk problems. You don't just use these tools; you know how to build with them.
Technical Powerhouse: Mastery of Python (for data science and automation) and SQL (performance tuning, CTEs, window functions). You are comfortable working alongside engineers and data scientists.
Network Analysis: Deep experience with graph databases (Neo4j, TigerGraph) and link-analysis techniques to identify organized criminal networks.
Demonstrated ability to translate complex quantitative findings into executive‑level insights and influence roadmaps across product, engineering, finance, and support.
Strategic Influence: While this is not a management role, you have a track record of influencing technical roadmaps and advising senior leadership on risk-reward trade-offs.
Advanced data‑visualization skills (Looker, Tableau, Omni, Superset, or equivalent) with a portfolio of self‑service dashboards adopted by the company‑wide.
Domain Depth: Expert knowledge of the payments lifecycle, including CNP, ACH, and RTP risk, as well as the specific fraud challenges of the SaaS and marketplace sectors.
Regulatory Fluency: A solid understanding of PCI DSS, Nacha rules, and the emerging regulatory landscape surrounding AI in financial services.
Prior experience scaling fraud programs in a marketplace, SaaS, or creator‑economy context - Advantage.
Education: Bachelors or Masters degree in a quantitative field (e.g., CS, Statistics, Mathematics, Economics) or equivalent technical experience- Advantage..

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8795241

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

16/07/2026

Data Analyst - Risk & Fraud

חברה חסויה

Location: Ramat Gan

Job Type: Full Time and Hybrid work

Were looking for a Fraud Data Analyst who combines deep technical analytical skills with a strategic mindset and a curiosity for identifying fraud signals and driving trust in the fintech domain. Youll partner closely with product, engineering, and support teams to turn complex data into automated detection models, scalable protocols, and measurable business protection.
As a Fraud Data Analyst, you will be responsible for safeguarding the platform by identifying, investigating, and mitigating fraudulent activity. Your goal is to move beyond manual ticket handling by architecting scalable investigation protocols, automating detection logic, and providing strategic data insights that reduce the teams dependency on manual intervention.
Responsibilities
Lead complex transactional data into insights for suspicious patterns.
Design and maintain Standard Operating Procedures (SOPs) for fraud investigations to ensure consistent, repeatable, and fast resolution times across the team.
Build, automate, and maintain dashboards and reports to track platform health, user behavior, and key trends.
Communicate findings clearly to stakeholders - Product, BE, etc. influencing both tactical and strategic decisions.
Partner cross-functionally to translate data findings into actionable product and business decisions.
Leverage AI and automation tools to accelerate analytical workflows and uncover deeper insights.

Requirements:
4+ years of experience in data analytics, with a relevant degree and a strong foundation in statistics.
2+ years in Risk Operations, or Trust & Safety (Fintech/Payments a plus), with a proven track record of preventing 1M+ in annual fraudulent losses.
Proven ability to translate complex fraud patterns into high-performance heuristic rules and decision trees that function in real-time environments without degrading system latency.
Strong command of SQL, Python, and data visualization tools (Tableau).
Proven track record of turning manual processes into automated workflows.
Proficient in using AI/LLM for advanced fraud detection, pattern recognition, accelerating analytical workflows.
Experience working with a transaction volume of at least 10M/day at scale.
Advantages
Experience with European and International fintech regulations (e.g. GDPR) and their impact on fraud monitoring and user data privacy.
Experience mentoring analysts or leading analytical projects.
A deep interest in fraud, AI, or communication apps.

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8740961

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

6 ימים

Technical Intelligence Analyst

חברה חסויה

Location: Herzliya

Job Type: Full Time

Required Technical Intelligence Analyst
As a Technical Intelligence Analyst, you will:
Conduct OSINT and technical research on mobile security, spyware, surveillance tools, cyber products, cybercrime markets, threat actors, companies, individuals and industry developments
Prepare clear analytical outputs, including company profiles, technical summaries, market overviews, incident analyses, timelines, trend reports and strategic briefs
Research corporate structures, founders, executives, investors, customers, partnerships, acquisitions, legal issues, sanctions and regulatory developments
Analyze mobile-related products, technical claims, infrastructure, capabilities and market movements to identify trends, red flags, intelligence gaps and signals.

Requirements:
3+ years of experience in intelligence, cyber intelligence, military intelligence, technical OSINT, corporate intelligence, threat intelligence or a comparable research role
Strong understanding of mobile and cyber concepts, including mobile apps, device identifiers, mobile malware, spyware, vulnerabilities, cloud services, telecom concepts and network fundamentals
Familiarity with cyber operations, including targeting, exploitation, persistence, collection, exfiltration, infrastructure usage and OPSEC
Strong OSINT skills across corporate registries, LinkedIn, media, regulatory filings, court records, GitHub, technical blogs, WHOIS/DNS, certificate transparency, forums, marketplaces, messaging platforms, app stores, social media and dedicated OSINT platforms/tools
Familiarity with OSINT tools and investigative workflows for entity resolution, link analysis, infrastructure mapping, social media research, breach/leak research, dark web/forum monitoring, domain/IP enrichment and data validation
Ability to assess source credibility, separate facts from assumptions and produce concise, source-backed analysis
Basic scripting ability, preferably in Python or similar languages, for data collection, parsing, enrichment and automation
SQL skills for querying, filtering, joining and analyzing datasets from internal and external sources
Excellent written English
Strong operational security awareness
It would be great if you also have:
IDF intelligence, IDF cyber or technology units, government intelligence/security organizations, mobile security research, cyber intelligence, technical OSINT, cybercrime research, spyware/surveillance technology research, corporate intelligence, due diligence or technology-focused business intelligence
Additional languages are an advantage.

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8788513

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

16/08/2026

Sr. Intelligence Analyst

חברה חסויה

Location: Work At Home

Job Type: Full Time

We are looking for a highly motivated, self-driven, detailed-oriented, and experienced Senior Analyst dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world.

This role demands a solutions-oriented mindset, as you'll be expected to go above and beyond for customers by driving innovative outcomes. You'll collaborate across multiple teams to craft creative solutions, ensuring we exceed customer expectations and deliver exceptional value. You will leverage our CAO's extensive resources to provide advanced digital risk monitoring expertise and analysis to safeguard our customers' environments. You will develop a trusted partnership by helping your customer identify and operationalize timely, actionable, and relevant threat intelligence and threat hunt findings.

What Youll Do:

Serve as a trusted advisor who maintains ownership of dedicated customer accounts, delivering outstanding experiences that build trust and facilitate high levels of satisfaction across all organizational levels.

Research dark web data and tailor threat intelligence for CAO Elite customer based on their specific requirements and environment.

Prepare and deliver customer presentations relating to intelligence reports and dark web alerts on a regular basis.

Partner across CrowdStrike teams to develop and implement creative solutions that exceed customer expectations, focusing on delivering exceptional outcomes even when faced with complex challenges

Respond to customer requests relating to threat intelligence, threat hunting, and dark web monitoring.

Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

Requirements:
All candidates must possess the following qualifications:

2+ years of specialized experience in the following domains:

Cyber Threat Intelligence.

Digital Risk Monitoring.

Third-party Risk Management.

Knowledge of cyber threat intelligence tradecraft, terminology, lifecycle, and all-source analysis.

Familiarity with dark and deep web ecosystems, including threat actors, forums, leak sites, malware, and adversary TTPs.

Demonstrated ability to work collaboratively within a customer-focused team environment, sharing knowledge and supporting colleagues while maintaining strong individual accountability for assigned deliverables.

Technical understanding of security across diverse cloud environments (production, development, isolated workspaces) with specific knowledge of enterprise SaaS platforms, their interconnected ecosystems, and unique security vulnerabilities.

Exemplary organizational skills with the ability to communicate both executive-level and detailed technical findings to customers.

Background in presenting, briefing, and delivering reports to stakeholders ranging from individual contributors to executives.

Curiosity about how AI, machine learning, and autonomous agents can enhance threat intelligence analysis and customer outcomes.

Ability to problem-solve and create customer solutions in a fast-paced environment.

Ability to operate independently with minimal direction while managing multiple concurrent workstreams.

Adaptable and willing to learn new technologies.

Ability to travel on short notice, up to 5% of the time.

Bonus Points:

Understanding of contemporary scripting languages.

Familiarity with application programming interfaces (API).

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8783520

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

7 ימים

CTI Analyst

חברה חסויה

Location: Tel Aviv-Yafo

Job Type: Full Time

We are on an expedition to find you, a CTI Analyst who is passionate about turning raw threat data into clear, evidence-backed intelligence and operational outcomes. Youll play a major role in advancing our next-gen CTI platform across threat actor attribution, adversary infrastructure analysis, External Attack Surface Management (EASM), and STIX-based knowledge management - Working closely with the Engineering, MLOps, and Data teams to deliver high-signal intelligence that drives action.
:Responsibilities
Execute the CTI research roadmap across threat actor attribution, adversary infrastructure analysis, EASM insights, and STIX-based knowledge management.
Conduct in-depth infrastructure and campaign analysis, including domain/IP relationships, hosting patterns and certificates.
Identify, validate, and track Indicators of Compromise (IOCs) and emerging threats using passive sources and approved active techniques.
Normalize, enrich, deduplicate, and maintain intelligence in STIX 2.1, aligned with internal ontology and quality standards.
Collaborate with the Engineering, MLOps, and Data teams to translate intelligence into actionable intelligence, alerts, and customer-facing outputs.
Produce high-quality intelligence reports, threat briefs, watchlists, and early-warning assessments for internal teams and customers.
Support investigations by providing contextual analysis, confidence scoring, and evidence-backed assessments.
Ensure adherence to governance, ethics, sourcing, provenance, and data-quality standards across all intelligence outputs.

Requirements:
3-6+ years of experience in Cyber Threat Intelligence, SOC/IR intelligence support, EASM, or adversary infrastructure analysis.
Strong understanding of DNS, IPs, ASNs, hosting/cloud providers, TLS/PKI, domain lifecycle, and phishing infrastructure.
Hands-on experience with open-source and commercial CTI sources (OSINT, feeds, telemetry, reputation systems).
Practical knowledge of STIX 2.1, MITRE ATT&CK, TAXII; experience with OpenCTI and/or MISP is a strong advantage.
Ability to perform passive discovery and controlled active validation, with a focus on accuracy, evidence discipline, and noise reduction.
Experience using Python for analysis and enrichment (pandas, notebooks); familiarity with Neo4j or Elasticsearch is a plus.
Strong analytical and threat-intelligence writing skills, able to translate technical findings into clear, actionable insights.
Comfortable working in a collaborative, version-controlled environment (Git), with attention to documentation and reproducibility.
Curious, methodical, and impact-driven mindset with a strong sense of intelligence rigor and accountability.

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8786712

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

חברת השמה / כח אדם

1 ימים

Incident Response Engineer

חברה חסויה

Location: Tel Aviv-Yafo

Job Type: Full Time

We are seeking an Incident Response Engineer to join the IR team. This technical role focuses on active investigation, threat mitigation, and the continuous improvement of the security organizations posture through detection engineering and automation development.
The successful candidate will be responsible for the full lifecycle of security incidents, from initial triage to recovery. Beyond reactive response, this role involves tuning SIEM correlation rules and developing SOAR workflows to increase operational efficiency.
What Youll Be Doing:
Incident Management: Execute the IR lifecycle (Triage, Containment, Eradication, Recovery) for complex security events.
Technical Investigation: Perform root cause analysis and forensic examination across Windows, Mac, and Linux environments.
Detection & Tuning: Collaborate with the IR team to create, test, and tune SIEM rules and dashboards to reduce false positives and improve visibility.
Automation Engineering: Build and refine SOAR playbooks and automated response actions to streamline repetitive investigation tasks.
Cloud Security: Monitor and mitigate cloud-native threats across Azure, AWS, and GCP environments.

Requirements:
Experience as a SecOps/IR Analyst or Engineer with a heavy focus on active investigation.
Deep understanding of the Incident Response lifecycle (Triage, Containment, Eradication, Recovery).
Hands-on experience handling and managing security alerts, performing root cause analysis, and leading investigations.
Experience working across cloud providers (Azure, AWS, GCP) to identify and mitigate cloud-native threats.
Strong knowledge of operating systems (Mac, Windows, Linux) and their respective artifacts.
Proficiency with Splunk or other SIEM platforms for log analysis and threat hunting.
Experience with XSOAR or other security automation tools from an end-user/analyst perspective.
Strong knowledge of security technologies, including EDR, Mail Relay, Vulnerability Scanning, Secure Access, and MDM.
Scripting experience with Python or Bash to assist in data parsing and investigation tasks.
Nice to Have:
Detection Engineering: Ability to build and improve SIEM rules, correlations, and dashboards.
Automation Development: Experience developing new SOAR workflows, automated actions, and response playbooks.
Technical Literacy: Familiarity with REST APIs and Regex for advanced querying and tool integration.
Container Security: Familiarity and experience with K8S (Kubernetes).
Consultative Skills: Ability to guide best practices in Cloud Security and SIEM operations.

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8794710

שירות זה פתוח ללקוחות VIP בלבד

שמך המלאמה השם שלך?

מייל

תיאור

שליחה

תודה על שיתוף הפעולה

מודים לך שלקחת חלק בשיפור התוכן שלנו :)

המשרה נמחקה

תוכל לצפות בה בדף המשרות שלי

המשרה הוחזרה לרשימת תוצאות החיפוש

האם תרצה להסיר את המשרה מרשימת

המשרות השמורות שלך?

כן לא

אירעה שגיאה בשליחת פרטיך למשרה

30/07/2026

Threat Hunting Researcher

חברה חסויה

Location: Tel Aviv-Yafo

Job Type: Full Time

We're looking for a Threat Hunting Expert to join our team and shape the future of threat detection. In this role, you'll be at the forefront of identifying and analyzing emerging threats, helping to shape the features of our Threat Detection platform. You'll be crafting detection logic and hunting strategies that enable security teams to identify and respond to advanced threats across their entire environment.

WHAT YOU WILL DO

Work directly with customers to help them solve concrete security pain points and operational use cases using , primarily during POVs and onboarding.
Perform advanced threat hunting across customer datasets to identify meaningful security findings, including compromise evidence, exploitation indications, suspicious activities, and visibility or posture gaps.
Build and evolve internal tools and AI-powered capabilities that support threat hunting, anomaly detection, and exploratory analysis.
Translate immediate customer security needs into ad-hoc security content, including detections, threat hunting notebooks, and investigative workflows.
Participate in customer-facing sessions alongside Sales Engineers and Technical Account Managers to present findings, explain security context, and walk through capabilities and content.
Deliver technical demonstrations, workshops, trainings, and hands-on sessions that show customers how to use for their security workflows.
Research emerging threats, including new CVEs and active campaigns, in collaboration with the CTI team, and translate them into immediate detections and threat hunting content.
Publish public-facing technical content on threat hunting and SecOps, including blog posts, webinars, open-source tools, and research findings.

Requirements:
At least 6 years of hands-on experience in security operations, threat hunting, incident response, or detection engineering, working with real production data.
Strong hands-on experience investigating security events, performing advanced threat hunting, and identifying meaningful findings.
Deep familiarity with common attack techniques, attacker behavior, and modern threat landscapes across endpoint, identity, network, cloud, and application environments.
Comprehensive knowledge of security controls and security architectures across cloud, network, identity, application, and endpoint environments.
Experience working with large-scale security datasets and performing exploratory analysis, anomaly detection, and investigative research.
Ability to write efficient, readable code and scripts for analysis, automation, and internal tooling used by the team.
Comfort working directly with customers in technical discussions, explaining findings, tradeoffs, and investigative approaches clearly and practically.
Experience collaborating with product, engineering, or research teams to influence tooling, workflows, and platform capabilities.
Strong written communication skills, with the ability to produce clear technical documentation and public-facing content when needed.
Excellent English communication skills, both written and verbal.
Curiosity and initiative to research emerging threats, new techniques, and evolving attacker behavior, and apply that research in practice.

This position is open to all candidates.

עדכון קורות החיים לפני שליחה

8762126

שירות זה פתוח ללקוחות VIP בלבד