דרושים » אבטחת מידע וסייבר » Senior Security Design Engineer

We are looking for a highly skilled and security-savvy Application Security Engineer to lead our product and application security efforts. In this role, you will drive security design, ensure secure coding practices, and validate our services and environments against the highest security standards.

You will work closely with our R&D and Product teams to identify, mitigate, and prevent security risks throughout the software development lifecycle (SDLC). You will own security initiatives, mentor developers on security best practices, and play a key role in shaping the security posture of our products.

The ideal candidate is highly motivated, eager to learn, and has a security by design mindset. This role provides career growth opportunities, enabling you to deepen your expertise in AppSec, DevSecOps, and cloud security.

What you'll do:
Partner with development and product teams to integrate security best practices into the SDLC.
Lead threat modeling and architecture security reviews to proactively identify and mitigate risks.
Conduct security assessments, including code reviews, vulnerability scans, penetration testing, and secure product design reviews.
Stay up to date with emerging security threats, vulnerabilities, and industry trends, ensuring we remains ahead of evolving risks.
Support and contribute to security incident response activities, including root cause analysis and post-incident improvements.
Automate security processes and integrate security tools within CI/CD pipelines.
Develop and deliver secure coding training to engineering teams.

You'll be joining our MDR Security Engineering team, whose mission is to help MDR scale, automate, and strengthen threat detection across a high-volume, global operation.

We are seeking a Senior Security Engineer, MDR Automation & Platform to serve as the engineering and development technical lead for our automation and orchestration platform. This role sits between engineering and security operations and will set the platforms technical direction, translate operational and security needs into technical designs, and lead decisions around architecture, scalability, reliability, and cost.

You will not develop the underlying product or build the infrastructure from scratch. Instead, you will understand the platform deeply, shape how it is designed and operated, and build or review the code behind its more complex integrations and workflow components. You will work closely with analysts, researchers, and engineers to ensure security-driven workflows for triage, enrichment, investigation, and response are scalable, reliable, and built according to strong engineering standards.

The ideal candidate combines strong engineering and development experience with a solid understanding of security operations. They have led the technical direction of an automation platform or similar system and can turn complex operational requirements into practical, scalable solutions.

Responsibilities
Drive the technical direction, architecture, and lifecycle of MDRs automation and orchestration platform, including SOAR, case management, integrations, and supporting workflow tooling.
Act as the engineering and development technical lead for the MDR Security Engineering team by reviewing designs and code, setting standards, and guiding technical decisions.
Design and build complex integrations, services, APIs, and workflow components, while guiding others in building and maintaining the broader platform.
Translate operational and security needs into clear technical designs and delivery plans in collaboration with analysts, IR, threat hunters, researchers, and engineering.
Make architecture, scalability, reliability, design, and cost decisions for the platform.
Design and shape SOAR playbooks and security-driven workflows for alert triage, enrichment, investigation, and response.
Identify high-impact, high-volume SOC processes and scale them through automation.
Establish strong engineering practices across version control, code review, testing, CI/CD, deployment, and observability.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.