דרושים » אבטחת מידע וסייבר » Head Of Security - Base44

Required Director Application Security
About the Role:
As the Director of Product Security, you will spearhead our efforts to fortify and enhance the security posture of our products and runtime environments and play a critical leadership role in overseeing the design, implementation, and maintenance of security controls for the organizations complex product applications, platform, development and cloud infrastructure.
You will lead a team of security experts and collaborate closely with engineering, product, and other business units to ensure the security and integrity of our applications, platforms, cloud infrastructure, and code stack against current & evolving threats.
Your leadership will be instrumental in embedding security best practices throughout the development and operations pipeline, ensuring a secure and scalable product environment. You will also drive the strategy, development, and implementation of a comprehensive application security program across our cloud-based applications.
Reporting line: VP Security Engineering
What Youll Do:
Strategic Leadership and Team Management:
Strong leadership skills to develop and lead the strategic direction for the Application and Cloud Security teams.
Lead risk assessments, threat modeling, and secure design reviews of cloud platforms to proactively identify vulnerabilities and ensure compliance with security standards.
Oversee the design, implementation, and maintenance of security controls across multi-cloud environments (AWS, GCP, Azure) to protect infrastructure and applications.
Experience in collaborating with cross-functional teams, including engineering, product management, and customer support, to embed security into product development and all aspects of cloud deployments.

As the Head of AI Security, you will be the ultimate authority and strategic leader responsible for securing our AI/ML infrastructure, data pipelines, and deployed models, you will bridge the gap between advanced data science and enterprise-grade security. You will design, implement, and oversee security frameworks that protect our proprietary AI technologies, multi-agent systems, and RAG architectures.
Youll Own:
our companys end-to-end AI security strategy across AI/ML infrastructure, data pipelines, LLMs, RAG systems, and autonomous AI agents
Secure-by-design frameworks and security architecture for AI-powered products and platforms
AI threat modeling, adversarial testing, red teaming, and vulnerability management programs
AI governance, internal security policies, and alignment with emerging global AI regulations and standards
Security tooling, automation frameworks, and continuous monitoring capabilities for AI environments
Cross-functional security leadership across Data Science, AI Engineering, Product, Infrastructure, and SecOps teams
Youll Solve:
Protecting AI systems against emerging threats such as prompt injection, model inversion, data poisoning, and training data leakage
Preventing sensitive customer and enterprise data from leaking into training sets or model outputs
Securing complex AI architectures including LLMs, RAG pipelines, and multi-agent systems at scale
Embedding security seamlessly into the ML lifecycle without slowing innovation
Building scalable AI security operations through automation, monitoring, and continuous adversarial testing
Navigating evolving AI governance, compliance, and regulatory requirements across global markets
Youll Impact:
Maintain our companys reputation as a leader in secure and trustworthy enterprise AI
Build the foundation that allows AI innovation to scale safely and responsibly
Strengthen customer trust by protecting highly sensitive conversational and business data
Create resilient AI systems that can withstand real-world attacks and emerging threat vectors
Drive a security-first AI engineering culture across the organization
Shape the future of AI security, governance, and MLSecOps in a hypergrowth AI company.

Required Data Center Security Manager (English, Hebrew)
About the job
As a Data Center Security Manager, you deliver full pieces of a project and make significant contributions with minimal guidance. You use your knowledge of security technology, data analysis, and data visualization to plan efforts of a team responsible for small to medium sized initiatives by delivering value-added perspectives and influencing project direction. You contribute to cross-team collaborations, identify and recommend multiple creative ways to solve defined problems. You also demonstrate the behaviors expected of as captured in our cultural pillars, and you engage in community contributions to improve and sustain our culture and operations, making it a better place to work.
In this role, you will take ownership of key activities including security budgeting, and manage physical security vendor operations to ensure high-performance service delivery.
You will partner closely with cross-functional teams to implement security policies, lead investigations, and proactively mitigate operational risks. You will direct responses to active security incidents, coordinate critical event workflows, and serve as the primary, authoritative liaison with public safety officials and law enforcement.
Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of our platforms, we make our product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.
Responsibilities
Implement established compliance processes aligned with Compliance, Strategy, and Risk Management (CSRM) policies, standards, guidelines, and relevant legal or regulatory requirements.
Manage the security related costs through budget, forecasting, and invoice control for the assigned campus, assist management with financial analysis and input to financial decisions for security requirements.
Provide after-hours on-call management support and participate in emergent, large-scale event response or crisis management when needed.
Be responsible for the compliance, security and risk management program at the data center campus or related infrastructure which includes managing site security incidents, escalations, guard contract management and all other physical security related issues.

we are looking for a Head of Security Reliability to establish and lead the Security Reliability pillar. Reporting directly to the CISO, this leader will be accountable for the ongoing effectiveness, resilience, and operational maturity of security products after implementation.

The role ensures that security platforms remain properly configured, maintained, integrated, monitored, adopted, and optimized to deliver measurable risk reduction. It also owns Third-Party Risk Management (TPRM) program and the security-review process for new products, services, and technologies introduced across the company.

This is a hands-on leadership position for someone who combines security expertise, operational discipline, vendor-management experience, and a strong product mindset. The role partners closely with Security, IT, Engineering, Product, Procurement, Legal, Privacy, Compliance, and business stakeholders.

Key responsibilities

Security product reliability and lifecycle ownership

Own security products and platforms after implementation, from operational handover through optimization, renewal, replacement, or retirement.
Ensure security tools are correctly configured, maintained, integrated, monitored, and aligned with Nebius's risk profile and technical environment.
Define ownership, service levels, operating procedures, support models, and escalation paths for every security platform.
Monitor platform availability, data quality, control coverage, integration health, licensing, capacity, and performance.
Establish disciplined processes for upgrades, configuration changes, testing, exception management, and end-of-life planning.
Continuously assess whether security products deliver their intended outcomes, and improve utilization, coverage, automation, and return on investment.
Reduce overlapping capabilities, configuration drift, operational gaps, and underused tooling across the security stack.
Manage vendor performance, technical escalations, product-roadmap discussions, renewals, and service reviews.
Ensure newly implemented security products transition into operations with clear documentation, ownership, monitoring, and success criteria.
Security configuration and control assurance

Define and maintain secure configuration baselines for security platforms.
Establish continuous control-health monitoring to identify disabled, degraded, misconfigured, or incomplete controls.
Validate that integrations and telemetry remain complete, accurate, and reliable as environment evolves.
Coordinate remediation of control gaps with Security, IT, Engineering, and platform owners.
Maintain evidence demonstrating the operational effectiveness of security controls for audits, certifications, and customer-assurance activities.

We are growing and are looking for a Senior Information Security Manager JD to join our mission to increase access to life-saving treatments.

The Role:

Lead and maintain all certification and compliance efforts, including SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, and CIS benchmarks

Serve as the primary point of contact for all security questions and concerns, internal and external

Own global security awareness strategy and programs, including annual employee training, ongoing awareness campaigns, and phishing simulations

Respond to customer and prospect security questionnaires while maintaining agreed turnaround times

Oversee SOC (Security Operations Center) operations, including log source coverage, detection rule creation and tuning, and SLA/KPI management

Build and manage the Third-Party Risk Management, Business Continuity, and Disaster Recovery programs

Run the vulnerability steering committee across corporate and production environments

Manage vendor risk and the security risk register

Monitor and manage the company's external digital footprint using third-party attack surface management tools

Act as incident commander for security incidents - analyze, escalate, coordinate response, and drive remediation

Help design and execute the annual security roadmap

Manage the company Trust Center

Lead the internal security policy lifecycle - creation, updates, approvals, and distribution

Audit onboarding and offboarding processes from a security perspective

This is a senior, hands-on individual-contributor role with end-to-end ownership of security risk assessments, the security risk register, remediation tracking, risk acceptance, and risk reporting. The successful candidate will work closely with engineering, cloud infrastructure, product, security, compliance, legal, and business teams to ensure that material risks are identified early, assessed consistently, and driven toward clear treatment decisions.

The role requires strong judgment, technical understanding, and the ability to influence stakeholders without relying on formal authority.

Your responsibilities will include

Risk Assessment

Lead security risk assessments for infrastructure, cloud environments, products, applications, business processes, and major technology changes.
Conduct risk assessments for new initiatives, systems, and significant changes, including supporting M&A-related risk assessment work alongside the due diligence team.
Evaluate the design and effectiveness of controls and identify residual risk following mitigation.
Identify emerging and systemic risks that may affect multiple services, regions, or business functions.
Risk Register & Tracking

Maintain the security risk register: log new risks, update status, track owners, and follow items through to remediation or formal risk acceptance.
Support the ongoing refinement of risk assessment and risk register processes, contributing improvements as the practice matures.
Coordinate with other GRC functions on findings and gap assessments that carry risk implications, and independently determine whether a given finding warrants a risk register entry.
Metrics & Reporting

Maintain and improve security risk assessment, scoring, prioritization, and acceptance processes.
Define and monitor meaningful Key Risk Indicators and risk trends.
Translate complex technical risks into clear business impact for senior leadership and governance forums.
Prepare risk reporting that supports security posture reviews, strategic decision-making, and Board-level reporting.
Support auditors, customers, and internal stakeholders on security risk management matters.
Cross-Functional Coordination

Work closely with other GRC functions to ensure risk assessments reflect current operating reality.
Partner with engineering and business stakeholders to embed risk thinking into day-to-day decisions, building trust through clear, practical communication rather than formal authority.
Build trusted relationships with risk and remediation owners while maintaining independent and objective judgment.

We are looking for a highly skilled, technical, and multidisciplinary Deputy CISO to join our Bank's Information Security team. Reporting directly to the CISO, this key position serves as a right-hand lead in shaping technological strategy, managing risk, and implementing security policy. The role operates as a Senior Individual Contributor (IC) requiring high independence and real-world hands-on capabilities, and a strong 'all hands on deck' mindset.
Responsibilities
Strategic & Tech Partnership: Collaborate with the CISO and CIO to design security architecture, implement advanced solutions, and lead end-to-end tech projects.
Cloud Security & DevSecOps: Guide development teams, define secure cloud architectures, and enforce SSDF.
Hands-on Execution: Evaluate and deploy security technologies, analyze cyber/infrastructure incidents, and write/review code and scripts.
GRC & Banking Compliance: Lead GRC end-to-end, manage external pen-testing vendors, handle third-party/supply chain risk, ensure compliance with Bank of Israel regulations, and support audits.

Were growing and looking to hire an Information Manager, Security Operations Engineering who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
we are a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
As the Information Security Operations Manager, you will lead our front-line defense, monitoring, and incident response capabilities. You will manage a high-performing technical team responsible for protecting enterprise infrastructure, cloud environments, and emerging AI workloads.
This role requires a rare combination of deeply technical hands-on capability and sophisticated leadership. Beyond managing technical systems and engineering staff, you will serve as the core liaison between Security Operations (SecOps) and key business stakeholders-including software engineering, corporate legal, human resources, and executive leadership-to navigate complex incidents, manage risk, and foster a collaborative security culture.

As a Data Infra Engineer, you will play a critical role in setting up, optimizing, and maintaining our data & analytics infrastructure. You will work closely with the development and Security teams to ensure the reliability, scalability, redundancy, and security of our data infrastructure platform.

The ideal candidate is passionate about big data, loves working with cutting-edge technologies, and thrives in a collaborative environment.
What you will do:

Design, implement, and manage scalable, highly available databases for both transactional, real-time use as well as backend analytics and big data.

Build, design, and maintain data processing pipeline infrastructure used by our various applications

Develop and maintain CI/CD processes for automating seamless changes to data infrastructure, including data migrations and database upgrades

Work closely with developers to make sure our data infrastructure meets existing and new feature requirements

Work alongside our Security Team to ensure our infrastructure meets rigorous security standards

Ensure the data infrastructure processes adhere to best practices in security and compliance.

We are seeking a GRC Specialist (Governance, Risk, and Compliance) to join our growing GRC Team. This is a fantastic opportunity to be part of a growing team and support the company as it grows and matures. If you're a team player, self-driven, creative thinker, passionate about cybersecurity, and capable of blending a process-oriented mindset with a tech-oriented outlook, we are looking for you!

As a GRC specialist you will...
Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements.
Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the Sales Team to efficiently respond to compliance inquiries from prospective and existing customers.
Collaborate with cross-functional teams to support and enhance the overall GRC program.
Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards.
Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly.
Implement improvements and updates to the program, based on regulatory changes and customer requirements.
Participate in risk assessment and risk management processes.