דרושים » אבטחת מידע וסייבר » Detection Software Engineer

We're looking for a Security Engineer - our company Product to spread the power of our company. The ideal candidate will have experience performing security reviews, vulnerability management, and detection and response operations in cloud-native environments. Youll get to collaborate with our software development and DevOps teams to secure our companys products, CI/CD infrastructure, and production infrastructure. Youll also have the opportunity to influence our product roadmap by utilizing our company-for-our company to assess, monitor, and harden our environments.
Responsibilities
Lead threat modeling and security design reviews with R&D and Product teams - identifying and mitigating architecture risks early in the development lifecycle.
Drive vulnerability management and remediation - actively writing IaC (Terraform), submitting code PRs, and developing security automations (Python/Go) to resolve risks.
Extend cloud detection and response capabilities - authoring detection rules, monitoring cloud environments, and investigating live security incidents across our production infrastructure
Act as "Customer Zero" by leveraging our company to protect our company- dogfooding new product features in our massive multi-cloud environment and directly shaping the product roadmap.
Partner with our DevOps and our company Federal teams - hardening CI/CD pipelines, container/Kubernetes infrastructure, and extending security controls to FedRAMP environments.
Enable engineering teams to deliver secure-by-design cloud and AI solutions without slowing down development velocity.

Were growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
About the Company:
A global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise.
As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy.
Responsibilities
As a Senior Security Operations Engineer, your responsibilities will include:
Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security.
Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP).
Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments.
Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments.
Provide recommendations regarding direction of systems and applications to help secure access, data and assets.
Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure our systems are properly protected.
Conduct research on emerging products, services, protocols, and standards relative to the information security arena.
Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations
Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc..
Ability to work well with other technology areas to deploy security technologies.
Customer service-oriented
Strong work ethic and sense of urgency
Develop and maintain security architecture diagrams, documentation, and standards.

Required Sr Software Engineer -Email Security (Cortex)
Job Summary:
In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. Thats why most of our teams work from the office full time, with flexibility when its needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes.
As a Software engineer on our Email Security team, you will play a key role in shaping and delivering a cutting-edge email security solution within the Cortex platform. Your responsibilities will include designing and developing an infrastructure capable of supporting billions of events per second, collecting, storing, processing, analyzing, detecting threats and making them accessible, visible and actionable for users while seamlessly integrating with the industrys leading cyber-security products. You will design and build a highly available, reliable, and secure solution that adheres to the highest standards. Beyond development, your crucial role involves meaningful cross-organizational collaboration, driving a significant impact to ensure the success of our product. Our Cortex engineering group, primarily based in the TLV office, allows us to operate at a high pace with short decision-making loops. In this role, you will need to demonstrate creativity, innovation and deep knowledge in backend engineering, conducting research to find new technologies. A can-do approach, a passion for excellence and a commitment to continuous improvement are essential qualities for success in this position.
Key Responsibilities:
Take ownership of a brand new product, driving its development from concept and design to full implementation
Focus on meaningful, high impact work, building major parts of a groundbreaking new product
Build a new offering designed to operate at massive scale
Dive into new cutting-edge technologies, researching and integrating them to enhance the products capabilities.

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Staff Software Engineer in the Detection Platform group, you will be responsible for defining and evolving the architecture of the cloud-native systems that power our AI SIEM detection, hunting, and response capabilities, including large-scale real-time detection engines, stateful detection engines, anomaly detections, ML pipelines, agentic SOC and threat-hunting capabilities. You will participate in the design and execution of backend systems that process billions of events and several petabytes of data daily and serve tens of thousands of security specialists at enterprise and government customers worldwide.

Were looking for driven and talented people like you to join our R&D team and our mission to change the future of cloud security.

As a Senior Software Engineer on the KSPM team, you will join a mission-critical group building and scaling one of the companys core and fastest-growing security products. Our team enables customers to secure their Kubernetes environments across every major cloud provider, delivering deep visibility into cluster misconfigs, RBAC risk, admission control, compliance drift and container vulnerabilities.

In this role you will design the backend services and data models that discover, onboard, scan, and represent K8s workloads, APIs, and configurations at scale. You will own core services end-to-end, drive architectural improvements and partner with security researchers to turn complex threat vectors into actionable insights.

We are looking for backend engineers who care deeply about software design, cloud-native infrastructure, and container security. This is a high-impact role with real ownership - lead features end-to-end, mentor teammates, and help shape the technical direction of our KSPM offering.

What Youll Do:
Design & build at scale: Design, implement, and maintain scalable backend services that discover, onboard, scan, and analyze Kubernetes environments across multi-cloud and managed clusters.
Model K8s security: Map and represent Kubernetes resources as clean data models that surface misconfigurations, exposure risks, and compliance violations.
Integrate detection engines: Integrate and evolve detection engines for container vulnerabilities, secrets, RBAC risks, misconfigurations, and compliance frameworks.
Collaborate on research & product: Partner with security researchers and product managers to translate novel findings and complex requirements into impactful features.
Design for quality: Write clean, well-tested code in Python or Go, with thoughtful abstractions and APIs that keep the system correct and maintainable as it grows.
Lead & mentor: Lead design discussions and code reviews that uphold high engineering and security standards across the team.
Own it end-to-end: Own features through their full lifecycle - from technical specification and design through implementation, testing, and release.

We're hiring a Detection Engineering & Response Lead to build and run our D&R capability from the ground up. You'll own the detection engineering, threat intelligence, and incident response functions across Cloud - and lead a small, growing team of analysts and engineers.

This is a lead engineering role responsible for detection development, handling the most complex security incidents, forensics, and shaping the D&R strategy.

What youll do
Lead detection development: maintain low false-positive and false-negative rates. Work closely with alerts consumers (20+ teams) to keep noise low and signal high, ensuring they can act quickly without missing genuine threats.

Architect and operate detection coverage across our cloud and bare-metal environments

Build and extend our internal D&R tools and pipelines - onboard new logs, build and automate response runbooks.

Integrate threat intelligence into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure

Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews and controlling critical action items are closed to prevent future possible incidents.

Partner with Compliance and Engineering teams to detect real threats while meeting the needs of both engineers and regulators.

Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates, etc.

Build and maintain Security Incident Response program: people, processes, tools.

Build tools, runbooks, and on-call processes that scale as the company grows.

Appdome's mission is to protect every mobile app in the world and the people who use them. We are the leader in AI-native mobile business protection, providing cyber and fraud teams with an agentic platform that builds, monitors, and maintains security defenses in Android and iOS apps — with no SDKs, no coding, and no disruption to engineering cycles.
Our platform delivers over 400 security, anti-fraud, anti-bot, and API protection capabilities, powered by deep learning models trained on a decade of mobile defense data and trillions of live threat events. From build time to runtime, Appdome's AI Agents help mobile brands detect, investigate, and respond to threats faster than ever — recognized as the best AI Platform for Cyber Resilience at RSA Conference 2026 for the second consecutive year. Leading financial, healthcare, m-commerce, and B2B brands rely on Appdome to secure over 50,000 mobile apps and protect more than 1 billion end users globally.
Appdome is an Equal Opportunity Employer. We are committed to diversity, equity, and inclusion in our workplace. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. All qualified applicants will receive consideration for employment without regard to any of these characteristics.
About the Role We are looking for a talented Software Engineer to join Appdome's Identity Group. You will take part in building advanced fraud detection capabilities, working closely with security researchers and data teams to develop cutting-edge solutions that protect hundreds of millions of mobile devices.
Responsibilities
* Design and develop core components of fraud detection systems from early prototyping through production-ready releases.
* Build scalable backend services and distributed systems that process data at scale.
* Work with large-scale datasets and collaborate with data teams to create actionable signals and features.
* Write high-performance, production-quality code in C and C++ optimized for reliability and performance.
* Take ideas from rapid proof-of-concept through to production, tackling complex engineering challenges across the full development lifecycle.

We are seeking a Software Engineer to join our core development team. You will design, build, and ship the platform that powers discovery, session-aware detection, policy governance, and runtime enforcement across workstations, SaaS, and cloud. You will work on scalable, low-latency services that process agent activity in real time and enforce security policies without slowing builders down. This role requires strong engineering fundamentals, a focus on system reliability, and an interest in the unique challenges of agentic security.

Responsibilities
Design and Implement Services: Design, develop, and deploy scalable backend services and APIs for the Security platform (customer and admin APIs, detection ingestion, aggregation, and control-plane services).

Build Core Features: Implement features for agent/MCP/skill discovery, session and intent-aware detection, policies, and runtime enforcement across coding agents and enterprise AI platforms.

Optimize Runtime Protection: Maintain and optimize high-throughput detection and enforcement pipelines that operate at enterprise scale (ingestion, detectors, verdicts, and policy dispatch).

Integrate with Platforms: Build and deepen integrations with coding agents, SaaS AI platforms, identity providers, EDR, SIEM, and outbound action systems to ingest telemetry and enforce controls.

Ensure Reliability: Focus on code quality, performance, monitoring, and stability through robust testing, CI/CD, and operational excellence.

Collaborate with Research: Partner with the AI Security Research team to turn findings, signatures, and heuristics into production-ready detectors and enforcement logic.

Contribute to Architecture: Participate in technical design and architectural reviews across our codebases, agents, and event-driven backend services.

Stay Current: Continuously learn and apply new technologies, development methodologies, and security best practices.

Key Responsibilities
We are looking for a passionate Software Developer to join our WAF SaaS Platform team, where we build, evolve, and operate our companys cloud-native WAF SaaS product.
In this role, you will develop new SaaS product capabilities while also building and operating the cloud infrastructure that powers the platform. You will work across backend services, Kubernetes environments, automation, CI/CD, monitoring, and, when needed, frontend components.
We are looking for a strong team player with a high sense of ownership, a get-things-done mindset, and the willingness to contribute across all areas of development - from UI and backend to DevOps and cloud infrastructure.
Major Responsibilities
Develop new features and capabilities for our companys WAF SaaS product, with a focus on backend services, cloud infrastructure, and DevOps-oriented development
Design, build, and maintain cloud-native infrastructure that supports customer environments, production workloads, and global SaaS deployments
Take part in creating and operating new POPs, improving customer environment provisioning, and evolving the platforms scalability and availability
Develop SaaS product capabilities such as certificate management, CDN-related flows, DDoS-related capabilities, onboarding flows, and other customer-facing platform features
Work with cloud services, CI/CD pipelines, monitoring, logging, and automation tools
Take end-to-end ownership of features and infrastructure components, from design and implementation through deployment, observability, support, and production operation
Build and maintain dashboards, alerts, and operational tools, using data and metrics to improve reliability, performance, and product decisions
Collaborate closely with developers, DevOps engineers, product managers, security researchers, support teams, and other stakeholders
Support production environments, investigate customer issues, and understand the real-world impact of features, bugs, and infrastructure changes.