דרושים » אבטחת מידע וסייבר » Principal, IT and GRC

Requirements:
A Foundation in Engineering Leadership: 10+ years of technology experience, including a significant background in software engineering, solutions architecture, and DevSecOps/DevOps/SRE, with a deep understanding of how modern applications are designed, built, and deployed.
People Management Experience: 3+ years directly managing or formally leading technical teams, ideally including senior architects or principal-level engineers, with a track record of hiring, developing, and retaining strong technical talent.
Financial Services / Multi-Entity Experience: Prior experience providing security advisory in regulated environments, multi-entity corporate structures, or financial technology platforms is preferred.
Deep Application Security Expertise: 5+ years in application, product, or cloud security architecture, with the ability to evaluate and guide architectural mitigations for OWASP Top 10 and design-level vulnerabilities in a microservices architecture.
Cloud Security Architecture: Demonstrated experience defining architecture patterns and conducting security assessments in cloud-native platforms, specifically Google Cloud Platform (GCP); familiarity with AWS or Azure is beneficial.
Expertise in Securing Distributed Systems: Strong understanding of security design patterns for microservices architectures, containerized environments (Kubernetes), and event-driven systems, including API gateways, service mesh concepts, secrets management, and network policies.
Pragmatic Threat Modeling Expertise: Proven background leading and overseeing architectural threat modeling exercises (e.g., STRIDE or similar frameworks) across cloud-native and distributed environments, and translating theoretical threats into actionable architecture guardrails and engineering requirements.
Emerging Technologies: Familiarity with secure architecture considerations for Generative AI integration, agentic workflows, and modern data platform architectures.
Excellent Communication and Influence: Exceptional ability to articulate complex technical risks and solutions to both senior engineers and executive stakeholders to drive consensus and prioritization.
Budget and Vendor Management: Experience managing team budgets and evaluating security tooling or vendor relationships is a plus.
Relevant security, application security, and security architecture certifications (e.g., CISSP, CSSLP, GIAC) are beneficial.

Requirements:
Youll Do It Using

8+ years of IT experience in a global technology or SaaS company, with at least 5 years in a people management role.

Hands-on experience with cloud infrastructure (AWS, Azure, or GCP), ITSM platforms (ServiceNow or Jira Service Management), endpoint management tools (Jamf / Kandji, Intune), and IAM solutions (Okta, Azure AD).

Strong understanding of information security frameworks (SOC 2, ISO 27001, NIST) and proven experience managing security operations, incident response, and risk management.

Strong project management and people leadership skills; proven ability to drive IT initiatives end-to-end, manage vendors, and deliver on schedule and within budget.

Familiarity with AI-powered tools (Claude, Microsoft Copilot, etc) and automation platforms like n8n; curiosity and agility to evaluate and adopt emerging technologies within an IT operations context.

B.Sc. in Computer Science, Information Systems, or a related field, or equivalent practical experience; relevant certifications (CISSP, CISM, ITIL, or AWS/Azure) are an advantage.


Youll Excel By

Working effectively in a fast-paced, growing, and global environment.

Bringing a creative, structured, and proactive approach to problem solving.

Communicating clearly and professionally with different audiences.

Being well-organized, independent, collaborative, and accountable.

Requirements:
Must Have
* Experience in one of the following fields:
* - Anti-bot detection/research
* - Proxy detection/research
* - Web scraping development/detection/prevention
* Experience in technical CTI threat hunting - databases, IPv4/IPv6 intelligence,
* Experience with threat hunting platforms: VirusTotal, UrlScan, Greyhat Warfare, Shodan
* Experience in analyzing threat groups and actors using OSINT, WEBINT methodologies
* Darkweb and Cybercrime intelligence experience
* Strong English communication skills: ability to clearly communicate intelligence by writing reports, or briefing clients and other stakeholders
* Must have demonstrated experience in gathering and evaluating internet information from social media, chats and darknet forums
* Great verbal and written communication skills Nice to Have
* Scripting (Python, BASH, and/or equivalent)
* Experience in operating threat intelligence collection platforms: Intel471, Recorded Future, CyberSixgill, Flashpoint and/or equivalent
* Foreign language proficiency

Requirements:
Experience: 2-3 years of proven experience in an IT Help Desk, Technical Support, or similar IT operations role.
Platform Expertise: Strong administration and troubleshooting skills for macOS, supported by a solid working knowledge of Windows.
Core Systems: Hands-on experience administrating Google Workspace and cloud directory/identity platforms (experience with JumpCloud is a major advantage).
Security & MDM: Familiarity with deploying and managing endpoint security agents (SentinelOne) and using MDM solutions to enforce device policies.
Basic Networking: Understanding of core networking concepts relevant to end-user support (e.g., VPNs, Wi-Fi, DNS, basic TCP/IP).
Self-Learner: You have strong troubleshooting instincts and a proven ability to independently research, learn, and master new technologies.
Service-Oriented: You bring a customer-first mindset, patience, and a positive, helpful attitude to every interaction.
Excellent Communicator: You possess excellent English skills (both written and spoken) to effectively support team members and write clear technical documentation.

Requirements:
Required Skills & Experience:
* 3+ years of experience in intelligence analysis, CTI, or fraud detection.
* Strong understanding of OPSEC principles.
* Strong knowledge of web intelligence (WEBINT) and OSINT, including social media, apps, and the dark web.
* Strong analytical, communication, and reporting skills.
* Proactive, creative, and quick to learn new tools and practices.
* Fluent in English (additional languages are a plus).
* Comfortable with sensitive content. Advantage:
* Experience in conducting red team exercises on online platforms to uncover potential abuse methods and bypass mechanisms
* Experience with multiple languages.
* Platform familiarity: Hands-on experience with social media, apps, and forums.
* Experience with automation tools or scripting.

Requirements:
2+ years of experience in IT Support, Help Desk, Desktop Support, or a similar technical role
Hands-on experience supporting Windows and macOS
Experience configuring laptops, installing software, and troubleshooting end-user issues
Familiarity with Microsoft 365, Outlook, Teams, OneDrive, and SharePoint
Basic knowledge of networking fundamentals (TCP/IP, DNS, DHCP, Wi-Fi, VPN)
Familiarity with Microsoft Intune, Entra ID, or Active Directory is a strong advantage
Understanding of endpoint security, antivirus solutions, software updates, and device management
Strong customer-service mindset with excellent communication skills in English
Organized, detail-oriented, and eager to learn new technologies
Ability to prioritize multiple requests while delivering a great employee experience

Requirements:
Required Skills & Experience
* 5+ years of experience in intelligence analysis, CTI, fraud detection, security research, or a similar technical investigative role.
* 2+ years of experience leading or mentoring analysts, either in a formal management role or as a technical/ team lead.
* Proven ability to manage multiple projects, set priorities, and deliver under tight timelines.
* Strong understanding of OPSEC principles and experience implementing them at a team level.
* Strong knowledge of WEBINT and OSINT, including social media, apps, and the dark web.
* Comfortable working with technical environments, logs, APIs, automation, and investigative tooling.
* Fluent in English (additional languages are a plus).

Requirements:
2+ years of experience in leading software development teams.
5+ years of hands-on experience in backend development using high-level programming languages.
Strong ownership (accountability), high independence, and ability to manage multiple stakeholders.
Proven ability to guide technical decisions and solutions for complex systems.
Nice to Have:
Proven experience with microservices architecture.
Background in cybersecurity / Endpoint Agent development.
experience delivering customer-value-driven products in fast-paced startup environments.

Requirements:
Required Skills & Experience:
3+ years of experience in intelligence analysis, CTI, fraud detection, security research, or a similar technical investigative role.
Strong understanding of OPSEC principles.
Strong knowledge of WEBINT and OSINT, including social media, apps, and the dark web.
Comfortable working with technical environments, logs, APIs, automation, and investigative tooling.
Ability to troubleshoot technical issues and rapidly learn new technologies, tools, and research methodologies.
Strong analytical, communication, and reporting skills.
Proactive, creative, and quick to learn new tools and practices.
Fluent in English (additional languages are a plus).
Comfortable with sensitive content.
Advantage:
Experience conducting red team exercises on online platforms to identify abuse methods and bypass mechanisms.
Experience with scripting or programming (e.g., Python, JavaScript, or similar) to support research and automation.
Experience developing or maintaining research infrastructure, automation pipelines, or investigative tooling.
Familiarity with cloud environments, virtualization, or containerized environments.
Platform familiarity: Hands-on experience with social media, apps, and forums.
Experience working with APIs, web technologies, or automation frameworks.
Experience with multiple languages.

Requirements:
4+ years of experience in security research with a strong focus on Linux-based systems.
B.Sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background.
Deep, practical understanding of Linux internals (processes, syscalls, memory, networking, filesystems).
Strong experience with malware analysis and reverse engineering in Linux environments.
Proficiency in C and Python for low-level research, tooling, and prototyping.
Proven ability to analyze attacker behavior and design corresponding detection or mitigation strategies.
Strong familiarity with cloud-native technologies, including containers, Kubernetes, and container runtimes.
Excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.