דרושים » אבטחת מידע וסייבר » Cybersecurity Enablement Engineer

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Staff Software Engineer in the Detection Platform group, you will be responsible for defining and evolving the architecture of the cloud-native systems that power our AI SIEM detection, hunting, and response capabilities, including large-scale real-time detection engines, stateful detection engines, anomaly detections, ML pipelines, agentic SOC and threat-hunting capabilities. You will participate in the design and execution of backend systems that process billions of events and several petabytes of data daily and serve tens of thousands of security specialists at enterprise and government customers worldwide.

As a Senior Cloud Security Engineer at our company, you'll own the security controls customers actually trust us to ship. Every major cloud - AWS, Azure, GCP, OCI - gives you a partial set of our company controls, and none of them cover what an enterprise security team really needs. You'll close the gaps: research what each cloud exposes, design controls that produce a consistent security outcome across all of them, and tailor each one to the provider it runs on. You'll work end-to-end. Research, threat model, design, infrastructure-as-code, rollout, production validation. No handoffs, no thrown-over-the-wall designs
Key Responsibilities
As a Senior Cloud Security Engineer, you'll take full ownership of security controls - from concept to delivery.
You'll engage with customers, align with our strategic direction, and identify what you and the team should build next.
You'll ship MVPs directly in production with real customer environments, iterate quickly based on feedback, and ensure the long-term success of your work.
And yes - you'll also jump in as a Security Hero, helping customers understand what their cloud is doing and what to do about it.

our company builds the real-time 3D platform that powers games and interactive experiences, along with tools used across ads, automotive, aerospace, architecture, retail, energy, and government. Our Product Security team keeps that platform, and the software built on top of it, safe for millions of creators and their users.
We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems our company itself is building, including agentic tools and AI-assisted development workflows.
You will work directly with engineering teams across the US and EMEA.
What you will do
Lead threat modeling, secure design reviews, and penetration testing for our company products and services, from the engine and editor to cloud services, APIs, and internal platforms.
Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.
Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.
Secure our company's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.
Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.
Investigate and respond to application security incidents, including root cause analysis and durable corrective action.
Contribute to our company's secure development lifecycle and to compliance work.

Required Sr Software Engineer -Email Security (Cortex)
Job Summary:
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. Thats why most of our teams work from the office full time, with flexibility when its needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.
As a Software engineer on our Email Security team, you will play a key role in shaping and delivering a cutting-edge email security solution within the Cortex platform. Your responsibilities will include designing and developing an infrastructure capable of supporting billions of events per second, collecting, storing, processing, analyzing, detecting threats and making them accessible, visible and actionable for users while seamlessly integrating with the industrys leading cyber-security products. You will design and build a highly available, reliable, and secure solution that adheres to the highest standards. Beyond development, your crucial role involves meaningful cross-organizational collaboration, driving a significant impact to ensure the success of our product. Our Cortex engineering group, primarily based in the TLV office, allows us to operate at a high pace with short decision-making loops. In this role, you will need to demonstrate creativity, innovation and deep knowledge in backend engineering, conducting research to find new technologies. A can-do approach, a passion for excellence and a commitment to continuous improvement are essential qualities for success in this position.
Key Responsibilities:
Take ownership of a brand new product, driving its development from concept and design to full implementation
Focus on meaningful, high impact work, building major parts of a groundbreaking new product
Build a new offering designed to operate at massive scale
Dive into new cutting-edge technologies, researching and integrating them to enhance the products capabilities.

We're hiring a Detection Engineering & Response Lead to build and run our D&R capability from the ground up. You'll own the detection engineering, threat intelligence, and incident response functions across Cloud - and lead a small, growing team of analysts and engineers.

This is a lead engineering role responsible for detection development, handling the most complex security incidents, forensics, and shaping the D&R strategy.

What youll do
Lead detection development: maintain low false-positive and false-negative rates. Work closely with alerts consumers (20+ teams) to keep noise low and signal high, ensuring they can act quickly without missing genuine threats.

Architect and operate detection coverage across our cloud and bare-metal environments

Build and extend our internal D&R tools and pipelines - onboard new logs, build and automate response runbooks.

Integrate threat intelligence into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure

Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews and controlling critical action items are closed to prevent future possible incidents.

Partner with Compliance and Engineering teams to detect real threats while meeting the needs of both engineers and regulators.

Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates, etc.

Build and maintain Security Incident Response program: people, processes, tools.

Build tools, runbooks, and on-call processes that scale as the company grows.

Were looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.Youll join Corporate Security Engineering within our Cyber Defense organization, Youll design, implement, and mature the security controls that protect our business applications, workforce, and corporate environment.
Youll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation.
Youll Own
The security posture of our corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.
Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.
Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.
Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.
SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.
Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.
Youll Solve
How to protect a fast-growing SaaS companys corporate environment across a broad and evolving technology stack.
How to translate security risks into clear requirements, practical controls, and reliable production operations.
How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.
How to automate security processes and integrate systems so controls remain effective as we scale.
How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.
How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.
Youll Impact
The security and resilience of our business applications, workforce, and corporate environment.
Our ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.

Required Information Security Engineer
The world of digital assets is accelerating in speed, scale, and complexity, opening new ways to leverage blockchain. Our platform and network provide the simplest and most secure way for companies to work with digital assets, and it is trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.
Security isnt an afterthought; its the foundation of everything we do.
Making Security Real:
As a Senior Information Security Engineer, youll be on the front lines of protecting the systems, users, and data at scale. This role is about turning strategy, architecture, and intent into enforced controls, effective detections, and resilient operations. Youll work hands-on with the tools, signals, and incidents that define our real security posture.
If you believe security should be practical, measurable, and embedded into daily operations-and not just documented-we want you on the team.
What the Role Looks Like in Practice:
You will be the technical anchor of our internal security posture:
Architectural Ownership: Deploy, manage, and tune enterprise-grade security stacks (EDR, DLP, IAM, CASB, MDM) with a focus on deep integration and automation.
The AI Frontier: Lead the charge on AI Security. You will implement and secure AI-driven workflows, ensuring LLM use is governed and protected against emerging threats such as data leakage and prompt injection.
Proactive Defense: Build and maintain high-fidelity detections and guardrails that align with real-world attack techniques.
Cross-Functional Synergy: Partner as a peer with Engineering, IT, and DevOps to ensure security controls are frictionless, automated, and effective.

As a Senior SOC Engineer within Unit 42 at Palo Alto Networks, you will drive the creation, validation, and optimization of custom detection rules and automated playbooks across our global customer base. Acting as a trusted advisor, you will collaborate closely with clients to maximize their security posture using Cortex XSIAM and Unit 42 expertise. This highly analytical role leverages your deep understanding of detection lifecycles, proactive automation, and threat intelligence to secure enterprise environments. You will architect end-to-end security lifecycles that seamlessly connect data ingestion with high-fidelity detection engineering.
Key Responsibilities
Own the full lifecycle of custom detections and response automations, deploying them as high-fidelity Cortex XSIAM correlation rules and playbooks through a rigorous engineering process of development, testing, staging, and soft implementation.
Drive the continuous refinement of correlation rules to ensure strict standards for performance, accuracy, and operational relevance.
Translate Unit 42 threat intelligence research and emerging adversary TTPs into actionable, robust detection logic.
Champion proactive automation by engineering sophisticated playbooks to resolve emerging security challenges and optimize operational workflows ahead of demand.
Architect the end-to-end security lifecycle within Cortex XSIAM, seamlessly connecting data ingestion, high-fidelity detection engineering, and sophisticated response automation.

our company's attack surface spans several distinct businesses: the engine and editor developers build on, a wide portfolio of cloud products and services, a large monetization business, and a growing set of AI-assisted creation tools. Code built with our company runs everywhere from a developer's workstation to billions of end-user devices, so targets range from native binaries to distributed cloud systems to AI pipelines, and findings here matter.
This role brings an attacker's mindset to that landscape: penetration testing and red team engagements built on complex attack chains. You would combine manual techniques with automation and tooling you develop as part of your craft, extending your reach across the company ecosystem.
What you'll be doing
Plan and execute objective-based penetration tests and red team engagements across our company's products, cloud services, and infrastructure
Find and validate exploitable vulnerabilities, chain them into realistic attack paths, and demonstrate impact with reproducible proofs of concept
Develop the automation and tooling that extend the team's offensive reach across the company ecosystem
Run joint exercises with the SOC and detection engineering teams to validate telemetry and improve detections
Deliver clear findings to engineering teams and surface recurring risk patterns to security leadership.