דרושים » אבטחת מידע וסייבר » Cloud Security Engineer - Microsoft 365

משרות על המפה
 
בדיקת קורות חיים
VIP
הפוך ללקוח VIP
רגע, משהו חסר!
נשאר לך להשלים רק עוד פרט אחד:
 
שירות זה פתוח ללקוחות VIP בלבד
AllJObs VIP
כל החברות >
08/09/2026
משרה זו סומנה ע"י המעסיק כלא אקטואלית יותר
מיקום המשרה: תל אביב יפו
משרות דומות שיכולות לעניין אותך
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
דרושים בG-NESS
Location: Tel Aviv-Yafo
Job Type: Full Time
Global company is seeking a highly qualified Cloud Cyber security Expert with demonstrated experience in
Microsoft 365, Power Platform, enterprise AI, as well as Agentic and autonomous AI
technologies. The successful candidate will secure modern cloud and AI platforms across the
enterprise, partnering with architecture, IT, and business teams to assess risk, define controls,
and enable safe adoption of emerging technologies
6-month temporary position with a high possibility of extension or transition to a permanent role.
Requirements:
HO experience securing cloud platforms (Azure preferred), including
identity, network, data...
Strong knowledge of M365 security and compliance,
including Entra ID, Defender, Purview, conditional access, and data protection.
Understanding of Power Platform governance, environment
strategy, data loss prevention (DLP), connectors, and Copilot Studio security.
Experience with enterprise AI, LLMs, RAG
architectures, and Agentic/autonomous AI technologies, including their security and
governance implications.
Proficiency in threat modeling, risk assessment frameworks, and
security control design.
Solid grasp of IAM principles, authentication, authorization,
and least-privilege design.
Good understanding and working knowledge of API / web service
security and data security practices and methods.
Familiarity with security standards and frameworks and cloud compliance practices.
This position is open to all candidates.
 
Show more...
הגשת מועמדות
עדכון קורות החיים לפני שליחה
8704096
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
4 ימים
Location: Tel Aviv-Yafo
Job Type: Full Time
We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations
You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders.
Key Responsibilities:
Microsoft 365 Tenant Administration:
Administer and maintain enterprise-scale M365 tenants, including configuration, governance, and operational support.
Oversee service health, usage reporting, licensing, and user lifecycle management.
Maintain documentation of configurations, workflows, and operational procedures.
Microsoft Intune / Endpoint Management (Full Scope)
Own all aspects of Intune administration, including:
Device enrolment (Windows, macOS, iOS/iPadOS, Android)
Configuration profiles, compliance policies, and security baselines
Autopilot provisioning, device naming policies, and lifecycle
Conditional Access integration with device compliance
Endpoint security policies (AV, firewall, ASR rules, BitLocker, etc.)
Identity & Access Management (Entra ID / SSO):
Manage and secure Microsoft Entra ID (Azure AD) for identity, authentication, and access governance.
Configure and maintain SSO integrations with SaaS applications using SAML/OAuth/OIDC.
Implement and optimize:
Conditional Access policies
MFA enforcement and authentication methods policy
Privileged Identity Management
Identity Protection policies (risk-based controls)
Security & Threat Protection:
Deploy and manage Microsoft Defender stack relevant to the organization
Integrate and manage endpoint security posture with non-Microsoft EDR platforms, such as Sentinel One/CrowdStrike
Collaborate with Security teams to implement detection and response workflows, ensure coverage, and align with organizational policy.
Messaging & Collaboration:
Exchange Online:
Administer Exchange Online policies and configurations
Implement email security best practices and support incident response when needed.
Microsoft Teams:
Administer Teams policies and governance - Teams lifecycle policy, app permissions, meeting policies; External access and guest collaboration settings
Requirements:
Required Qualifications:
3-5 years of hands-on experience administering Microsoft 365 in an enterprise environment.
Proven expertise managing Intune (full end-to-end: enrolment → policy → deployment → compliance → reporting), Exchange Online, SharePoint Online / OneDrive, Microsoft Teams, Microsoft Entra ID, Conditional Access policies
Strong understanding of email security fundamentals and implementations: Transport rules, threat policies, anti-phishing controls SPF, DKIM, DMARC; experience integrating M365 security posture with non-Microsoft EDR/XDR tools
Strong troubleshooting capability across identity, endpoint, collaboration, and security layers.
Experience in scripting/automation
Experience with Microsoft Defender for Endpoint/Office 365/Cloud Apps.
Key Skills & Competencies:
Enterprise cloud administration mindset (scale, governance, standardization)
Strong security-first approach
Ability to translate business needs into practical policies
Comfortable owning production-critical services
Excellent communication and cross-functional collaboration
Structured documentation and operational discipline
Preferred Skills:
Strong plus
Experience with Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery)
Familiarity with Zero Trust architecture and modern security frameworks.
Knowledge of SIEM integrations (Microsoft Sentinel, Splunk, etc.).
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8875465
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
4 ימים
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
We seek a dynamic and experienced Cyber Security Engineer to join us! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.
In this role, you will be responsible for:
Design, implement, and maintain security architectures and controls across the organization's Cloud, SaaS, AI, and Corporate environments.
Secure enterprise infrastructure by strengthening cloud security, protecting sensitive data, managing identity and access, and continuously improving the organization's security posture.
Deploy, operate, and optimize enterprise security technologies across Identity, Endpoint, Network, Email, Cloud, SaaS, Data Protection, and Security Operations domains.
Identify, prioritize, and remediate security risks, vulnerabilities, cloud exposures, and SaaS security findings.
Lead end-to-end security projects across multiple teams, collaborating with Engineering, DevOps, IT, and Security Operations to implement scalable security solutions and drive automation.
Support the secure adoption of AI technologies while ensuring security controls align with industry best practices and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls.
Requirements:
5+ years of Information Security experience, including 4+ years of hands-on Security Engineering experience implementing and operating enterprise security technologies across Identity, Endpoint, Network, Data Protection, and Secure Access domains (e.g., Firewalls, VPN, WAF, EDR/XDR, IDS/IPS, IAM, DLP, SIEM, and SASE). Must
3+ years of IT Infrastructure or Systems Engineering experience, including Active Directory, Microsoft Entra ID, Microsoft 365, MDM, and enterprise networking. Must
Strong hands-on experience securing AWS, Azure, and GCP using modern Cloud Security platforms (e.g., CNAPP/CSPM), alongside modern SaaS environments.
Hands-on experience implementing and managing Identity & Access Management (IAM), including SSO, MFA, RBAC, PAM, Conditional Access, Zero Trust, and encryption.
Experience securing enterprise AI environments, including AI governance, security controls, and Model Context Protocol (MCP). Advantage
Familiarity with industry security frameworks, including ISO 27001, SOC 2, NIST CSF, CIS Controls, and MITRE ATT&C
Nice to Have:
Experience with scripting and automation using Python, PowerShell, Bash, or REST APIs to automate security processes and workflows.
Industry certifications such as CISSP, CEH, Security+, CCSP, GIAC, AWS Security Specialty, or equivalent.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8877252
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
19/10/2026
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
Mesh Payments is looking for a hands-on Security & IT leader to serve as the foundational pillar of our internal technology and security operations. In this unique role, you will be the sole owner of our IT infrastructure while playing a critical part in protecting a fast-growing, cloud-native fintech platform.
In this position, you will have the autonomy to choose the best tools for the job, manage our corporate environment from the ground up, and have a direct impact on protecting the financial data of global enterprises while ensuring our team has the best technical tools to succeed.
What youll do:
IT Operations & Employee Experience
Youll work closely with the CTO, engineering, and business teams, combining hands-on execution with real ownership and impact.
Manage corporate SaaS platforms, identity management (SSO), and Google Workspace.
Compliance & audits (SOC2, PCI)
Acting as the security point of contact for customers, auditors, and internal teams
Act as the primary technical point of contact for all employees, providing hands-on support and troubleshooting.
Deploy and operate endpoint security and management tools (EDR, MDM, DLP) across a distributed workforce.
Cloud & Infrastructure Security

Improve and maintain the security posture of our AWS/GCP-based cloud infrastructure.
Operate cloud security platforms, such as Upwind / Wiz / Oligo, or similar solutions to prioritize and remediate risks.
Design and enforce secure access controls and least-privilege IAM policies.
Investigate cloud security alerts and support incident response.
Application Security
Integrate security into the SDLC and CI/CD pipelines by automating SAST, SCA, and secret scanning.
Secure containerized workloads (Kubernetes / EKS) focusing on runtime protection and image hardening.
Provide guidelines and safeguards for AI-powered development processes and AI models within our SaaS platform.
Compliance & Security Culture
Support SOC2 and PCI DSS compliance initiatives and audit readiness.
Serve as the primary security focal point for external auditors.
Contribute to security awareness and best practices across the company, explaining the rationale behind security requirements.
Requirements:
5+ years of experience in Security Operations, Cloud Security, or IT Systems Administration in a high-growth environment.
Experience owning and managing employee-facing systems and IT environments- a must
Strong hands-on experience with cloud platforms (preferably AWS) - a must.
Experience with identity platforms and SaaS security (Google Workspace / SSO).
Familiarity with cloud security platforms (Upwind / Wiz / Orca or similar).
Experience securing container environments (Kubernetes / AWS EKS).
Strong Service-oriented mindset with excellent collaboration and communication skills.
Fluent English
Nice to Have:
Experience in fintech or highly regulated environments.
Practical experience with PCI DSS and SOC2 audits.
Familiarity with MDM solutions (e.g., Kandji, Jamf) and EDR tools.
Working experience with Jira and GitHub.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8863043
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
05/10/2026
חברה חסויה
מיקום המשרה: תל אביב יפו
סוג משרה: משרה מלאה ועבודה היברידית
we are seeking a highly qualified Security Expert with demonstrated experience in Azure services, Microsoft Sentinel, Anthropic for enterprise, enterprise AI, as well as Agentic and autonomous AI technologies. In this role you will secure modern cloud and AI platforms across the enterprise, partnering with architecture, IT, and business teams to assess risk, define controls, and enable safe adoption of emerging technologies.
??מה תעשו בתפקיד? ניסיון של 5+ שנים בעולמות אבטחת מידע וסייבר בסביבת Microsoft שליטה מעשית ב Microsoft Defender, Sentinel וE5 Security ניסיון בעבודה עם פתרונות: Endpoint | Identity | Cloud Apps ידע מעמיק ב Entra ID כולל:? Conditional Access? MFA? RBAC? PIM? PURVIEW ניסיון Hands-On בעולמות הסייבר בענן ובסביבות Microsoft ניסיון בעבודה מול צוותים מרובי ממשקים בארגונים גדולים שליטה ב PowerShell (כתיבת סקריפטים) ניסיון בכתיבת מסמכי אפיון טכניים?? הסמכות Microsoft - יתרון?? סיווג ביטחוני - יתרון?? אנגלית ברמה גבוהה
דרישות:
?? מה חשוב לנו?? Experience with Cloud Security עם עדיפות ל,Sentinel,Azure?? Knowledge in Entra ID, Conditional Access ו-Network Security?? Experience with Enterprise AI, LLMs, RAG ו-Agentic AI?? Experience with Threat Modeling וביצוע הערכת סיכונים?? Deep Understanding of IAM, Authentication, Authorization?? Knowledge in API & data Security?? Knowledge in NIST, ISO 27001, CIS ותקני אבטחת מידע המשרה מיועדת לנשים ולגברים כאחד.
 
עוד...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8816162
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
Location: Tel Aviv-Yafo
Job Type: Full Time and Hybrid work
Were growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
About the Company:
A global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise.
As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy.
Responsibilities
As a Senior Security Operations Engineer, your responsibilities will include:
Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security.
Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP).
Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments.
Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments.
Provide recommendations regarding direction of systems and applications to help secure access, data and assets.
Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure our systems are properly protected.
Conduct research on emerging products, services, protocols, and standards relative to the information security arena.
Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations
Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc..
Ability to work well with other technology areas to deploy security technologies.
Customer service-oriented
Strong work ethic and sense of urgency
Develop and maintain security architecture diagrams, documentation, and standards.
Requirements:
Minimum 5 years experience with Cybersecurity Operations
BA/BS degree in MIS/Computer Science or related degree strongly preferred (or relevant experience)
Relevant Certifications are a plus (e.g. CISSP, CEH, etc).
Fluent in both English and Hebrew
Experience with endpoint security tools, network security tools related to deployment, management, support, and troubleshooting.
Knowledge of IT security regarding ID access, data protection, system\application monitoring, system and application access.
Working Knowledge of Windows, Mac OS, and Linux OS.
Experience with the rollout of new technologies and migrations.
Knowledge of AWS, GCP security and Azure security (deployment, configuration, monitoring, etc).
Strong knowledge in SSE, ZTNA, CASB, DLP, EDR
Experience with AI security policies and tools
Knowledge of security frameworks and standards.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8839311
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
7 ימים
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
we are looking for a Security Engineer.
The Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption - governing AI assistants, coding agents, and MCP integrations while keeping employees productive. You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team.
What You'll Be Doing:
Operate and maintain our corporate security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controls
Experience hardening endpoints and enforcing device policy via MDM/EDR - security baselines, disk encryption, local admin restrictions, and USB/peripheral controls
Monitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, and SaaS
Maintain identity security controls - SSO/MFA coverage, privileged access, joiner/mover/leaver, and access reviews
Secure our SaaS footprint - security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platforms
Implement and maintain DLP controls across email, endpoints, and SaaS
Run endpoint patching and vulnerability management, and coordinate remediation with owning teams
Run POCs and rollouts of IT security tools - evaluating vendors, testing controls, and deploying them in collaboration with IT and external vendors
Secure the company's use of AI tools - implement guardrails for AI assistants, coding agents, and MCP integrations, and build detections for AI-specific threats such as prompt injection and data exfiltration via connectors
Requirements:
Experience operating EDR/XDR, IdP/SSO, and MDM platforms (CrowdStrike, Okta, IRU/Jamf or equivalents)
4+ years of hands-on experience as a security engineer in a cloud-native / SaaS-first company
Hands-on experience implementing and tuning DLP controls across email, endpoints,
Experience in a cloud native high-scale SaaS or fintech environment
Hands-on experience with LLM-based tools and agents (coding agents, AI assistants, MCP) and a solid understanding of their security risks - prompt injection, tool/connector abuse, data leakage, over-permissioned integrations
Proven hands-on experience with incident response and forensic investigation in SaaS environments
Experience assessing SaaS and third-party integrations (OAuth scopes, API access, data flows)
Strong communicator, able to explain security risks to technical and non-technical stakeholders
Professional English (written and spoken)
Bachelor's degree in Computer Science, Information Security, or equivalent practical experience
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8871704
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time and Hybrid work
Were looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.Youll join Corporate Security Engineering within our Cyber Defense organization, Youll design, implement, and mature the security controls that protect our business applications, workforce, and corporate environment.
Youll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation.
Youll Own
The security posture of our corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.
Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.
Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.
Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.
SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.
Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.
Youll Solve
How to protect a fast-growing SaaS companys corporate environment across a broad and evolving technology stack.
How to translate security risks into clear requirements, practical controls, and reliable production operations.
How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.
How to automate security processes and integrate systems so controls remain effective as we scale.
How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.
How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.
Youll Impact
The security and resilience of our business applications, workforce, and corporate environment.
Our ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.
Requirements:
5+ years of experience in cybersecurity engineering, ideally in a high-growth SaaS environment.
Hands-on expertise with identity platforms, including Okta or Entra ID, plus experience in at least two of the following areas: data security, DLP/DSPM, endpoint security, EDR/BDR, email security, or network/SASE.
Practical experience with SSO, MFA, RBAC, SCIM, Zero Trust, and SSPM platforms.
Experience evaluating SaaS and application security, with an understanding of common security frameworks such as CIS, NIST, and OWASP.
An engineering mindset: you build automation, API integrations, and workflows rather than focusing only on tool administration.
The ability to drive security through strong relationships, communicate effectively across teams, and take ownership of complex problems.
An AI-first, hands-on problem-solving mindset.
Fluent English and the ability to work effectively with global teams.
Strong advantages
Experience securing AI agents, agentic workflows, or low-code/no-code platforms.
Offensive security knowledge.
Familiarity with emerging SaaS threats, including OAuth abuse, token theft, and identity-based attacks.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8838164
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
11/10/2026
חברה חסויה
Location: Tel Aviv-Yafo
Job Type: Full Time
Required Senior Security Engineer
As a Senior Enterprise Security Engineer, you will be a foundational architect of our security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment.
Your work will be critical in ensuring we become globally recognized for secure, unparalleled corporate travel and expense management.
What Youll Do:
Vulnerability Management & Exposure Reduction: Architect, manage, and scale the end-to-end vulnerability management program. Oversee continuous asset discovery, vulnerability scanning, threat exposure assessment, and risk-based prioritization (CVSS, EPSS, threat intelligence). Partner closely with infrastructure, engineering, and IT teams to establish SLAs, streamline patch management workflows, and validate effective remediation.
Security Incident Response & On-Call Rotation: Participate in the security engineering on-call rotation. Serve as a responder responsible for identifying, scoping, triaging, managing, and mitigating security incidents, followed by leading thorough post-incident reviews and root-cause analyses.
Detection & Automation Optimization: Help improve and maintain our existing detection pipeline by providing feedback on alert quality, reviewing current monitoring coverage, and performing direct tuning in SIEM platforms to reduce noise and increase signal fidelity. Evaluate existing SOAR playbooks and workflows, offering recommendations and performing targeted updates to streamline response processes.
Identity Governance & Access Control: Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise.
Email Security: Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity.
Requirements:
5+ years of hands-on experience in information or enterprise security, preferably within a high-growth tech environment utilizing cloud infrastructure.
Proven track record of designing, implementing, or maturing an enterprise-wide Vulnerability Management program, including expertise with modern exposure management and scanning platforms (e.g., Tenable, Qualys, Rapid7, Wiz) and vulnerability remediation workflows.
Demonstrated experience in incident response, with a willingness to participate in an on-call rotation to identify, analyze, contain, and resolve active security incidents.
Deep, up-to-date knowledge of modern attacker tactics, techniques, and procedures (TTPs), common exploit vectors, and risk prioritization frameworks (CVSS, EPSS, KEV). You excel at translating technical vulnerabilities and risks into clear business context for a range of stakeholders.
Ability to review SIEM and EDR/XDR platform outputs, provide constructive feedback on detection efficacy, and execute direct rule tuning and configuration refinements to optimize signal-to-noise ratio.
Comfort interfacing with SOAR workflows (e.g., Phantom, Demisto, XSOAR) to suggest optimizations and perform light playbook updates that improve overall team efficiency.
Demonstrated expertise in Zero Trust principles, modern identity governance, and access management solutions (e.g., Okta, Ping, or Azure AD).
Experience managing email security using platforms like Material Security, including reviewing post-delivery detections and analyzing mailbox activity.
Highly collaborative with strong ownership skills, adept at negotiating SLA timelines with engineering/IT partners and contributing actively within a small, focused security team.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8850990
סגור
שירות זה פתוח ללקוחות VIP בלבד
סגור
דיווח על תוכן לא הולם או מפלה
מה השם שלך?
תיאור
שליחה
סגור
v נשלח
תודה על שיתוף הפעולה
מודים לך שלקחת חלק בשיפור התוכן שלנו :)
Location: Tel Aviv-Yafo
Job Type: Full Time
Senior hands-on offensive security professional responsible for delivering complex, objective-driven Red Team and Adversary Simulation engagements for local and global clients. The role combines deep technical execution with the ability to independently take ownership of Red Team projects, including threat-informed adversary emulation, covert Red Team operations, Purple Team exercises, attack path analysis, and advanced penetration testing across enterprise, cloud, application, identity, and hybrid environments. The position requires strong offensive tradecraft, sound technical judgment, and the ability to manage assigned engagements from planning through delivery, while contributing to reusable tooling, knowledge sharing, technical quality, and client advisory. It requires the ability to translate realistic attack scenarios into clear insights that improve clients prevention, detection, response, and overall cyber resilience.
Job description
Take ownership of assigned Red Team, adversary emulation, Purple Team, and threat-led offensive security engagements, from planning and rules of engagement through execution, reporting, and client debrief.
Emulate realistic threat actors and execute multi-stage attack chains, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command and control, defense evasion, and achievement of agreed business objectives.
Design threat-informed scenarios and map adversary tactics, techniques, and procedures to MITRE ATT&CK and other relevant threat-led testing frameworks.
Assess enterprise environments across Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms, identity systems, and hybrid infrastructure, chaining weaknesses into realistic attack paths and business impact.
Develop, customize, and maintain offensive tooling, scripts, payloads, command-and-control infrastructure, and operational tradecraft while applying appropriate safety and operational-security controls.
Work closely with SOC, detection engineering, incident response, and security architecture teams to validate detection and response capabilities and translate observed gaps into actionable improvements.
Communicate directly with clients, present technical and executive results, and provide risk-based recommendations aligned with the clients threat landscape and business priorities.
Contribute to technical quality reviews, knowledge sharing, research initiatives, reusable methodologies, and the continued development of the teams Red Team capabilities.
Requirements:
7+ years in offensive security or related technical fields, including 4+ years in Red Team, adversary simulation, or advanced infrastructure penetration testing - Must.
Proven ownership of complex Red Team engagements from planning through delivery - Must.
Hands-on experience executing multi-stage attack chains in complex enterprise environments - Must.
Strong knowledge of Active Directory, Windows, authentication, identity attack paths, networks, endpoints, and defensive controls - Must.
Hands-on experience with offensive tooling, command-and-control frameworks, scripting, and tool customization - Must.
Practical understanding of adversary TTPs and MITRE ATT&CK - Must.
Strong independent working, client communication, and English reporting skills - Must.
Experience with cloud or hybrid environments, Purple Team exercises, detection validation, or EDR/XDR evasion - Significant Advantage.
Advanced certifications, threat-led testing, security research, or custom tool development - Advantage.
This position is open to all candidates.
 
Show more...
הגשת מועמדותהגש מועמדות
עדכון קורות החיים לפני שליחה
עדכון קורות החיים לפני שליחה
8860849
סגור
שירות זה פתוח ללקוחות VIP בלבד