דרושים » אבטחת מידע וסייבר » Intelligence Infrastructure Expert

Requirements:
We are looking for a tech-savvy, proactive, and mission-driven expert with a Can Do! approach and the following skills and qualities: Must Have:
* Background in Intelligence or equivalent.
* Proven OSINT/ WEBINT/ Cyber HUMINT expertise and experience conducting operational investigations in web and mobile environments.
* Exceptional presentation and people skills, with customer-facing or B2B/Tech/Sales experience as a plus.
* Excellent written and verbal communication skills in English (mandatory); additional languages are a significant advantage. Nice to Have:
* Familiarity with digital marketing, mobile and cyber threat ecosystems, or AdTech (strong advantage).
* Strong trend analysis capabilities and a sharp ability to identify evolving methodologies of online threat actors.
* A proactive, fast learner with curiosity, adaptability, and out-of-the-box thinking.
* Solid online security orientation and ability to learn and adopt new intelligence tools quickly.
* Tech-driven mindset, with experience in data or technology-oriented organizations.
* Comfortable with scripts and AI tooling to accelerate collection and surface leads.
* Working knowledge of how technical underground campaigns operate, methods, TTPs, and the terminology of technical underground activity understood from the threat actor's side, not only the analyst's

Requirements:
Required Skills & Experience:
* 3+ years of experience in intelligence analysis, CTI, or fraud detection.
* Strong understanding of OPSEC principles.
* Strong knowledge of web intelligence (WEBINT) and OSINT, including social media, apps, and the dark web.
* Strong analytical, communication, and reporting skills.
* Proactive, creative, and quick to learn new tools and practices.
* Fluent in English (additional languages are a plus).
* Comfortable with sensitive content. Advantage:
* Experience in conducting red team exercises on online platforms to uncover potential abuse methods and bypass mechanisms
* Experience with multiple languages.
* Platform familiarity: Hands-on experience with social media, apps, and forums.
* Experience with automation tools or scripting.

Requirements:
Professional Experience & Education
Sector Expertise: Minimum of 4+ years of experience in IT and Cyber Risk, Audit, and/or GRC specifically within a regulated financial institution.
Academic Foundation: Formally educated in Business, Computer Science, Information Systems, Engineering, or equivalent professional experience.
Regulatory & Framework Mastery
Framework Proficiency: Deep understanding of a broad set of risk methodologies, frameworks, and practices-including NIST CSF, COBIT, ISO 2700x standards, CIS, COSO, ITIL, and PCI-DSS.
Regulatory Knowledge: Comprehensive understanding of the Canadian regulatory environment (OSFI and CIRO) and global assurance frameworks (SOC 1/2).
Governance Development: Proven experience in developing, updating, and reviewing high-level Governance documents, including policies, standards, and procedures.
Control Design & Risk Methodology
Lifecycle Oversight: Extensive experience performing complex risk assessments and designing robust controls.
AI and Automation: Proficiency in advanced Prompt Engineering for Generative AI models to accelerate GRC artifacts (e.g., summarizing SOC reports).
Technical Literacy: Strong knowledge of technology platforms, including Operating Systems and Databases.

Requirements:
A Foundation in Engineering Leadership: 10+ years of technology experience, including a significant background in software engineering, solutions architecture, and DevSecOps/DevOps/SRE, with a deep understanding of how modern applications are designed, built, and deployed.
People Management Experience: 3+ years directly managing or formally leading technical teams, ideally including senior architects or principal-level engineers, with a track record of hiring, developing, and retaining strong technical talent.
Financial Services / Multi-Entity Experience: Prior experience providing security advisory in regulated environments, multi-entity corporate structures, or financial technology platforms is preferred.
Deep Application Security Expertise: 5+ years in application, product, or cloud security architecture, with the ability to evaluate and guide architectural mitigations for OWASP Top 10 and design-level vulnerabilities in a microservices architecture.
Cloud Security Architecture: Demonstrated experience defining architecture patterns and conducting security assessments in cloud-native platforms, specifically Google Cloud Platform (GCP); familiarity with AWS or Azure is beneficial.
Expertise in Securing Distributed Systems: Strong understanding of security design patterns for microservices architectures, containerized environments (Kubernetes), and event-driven systems, including API gateways, service mesh concepts, secrets management, and network policies.
Pragmatic Threat Modeling Expertise: Proven background leading and overseeing architectural threat modeling exercises (e.g., STRIDE or similar frameworks) across cloud-native and distributed environments, and translating theoretical threats into actionable architecture guardrails and engineering requirements.
Emerging Technologies: Familiarity with secure architecture considerations for Generative AI integration, agentic workflows, and modern data platform architectures.
Excellent Communication and Influence: Exceptional ability to articulate complex technical risks and solutions to both senior engineers and executive stakeholders to drive consensus and prioritization.
Budget and Vendor Management: Experience managing team budgets and evaluating security tooling or vendor relationships is a plus.
Relevant security, application security, and security architecture certifications (e.g., CISSP, CSSLP, GIAC) are beneficial.

Requirements:
2+ years of experience in leading software development teams.
5+ years of hands-on experience in backend development using high-level programming languages.
Strong ownership (accountability), high independence, and ability to manage multiple stakeholders.
Proven ability to guide technical decisions and solutions for complex systems.
Nice to Have:
Proven experience with microservices architecture.
Background in cybersecurity / Endpoint Agent development.
experience delivering customer-value-driven products in fast-paced startup environments.

Requirements:
4+ years of experience in security research with a strong focus on Linux -based systems.
b.sc. in Computer Science or equivalent experience from a military, academic, or advanced technical background.
deep, practical understanding of Linux internals (processes, syscalls, memory, networking, filesystems).
strong experience with malware analysis and reverse engineering in Linux environments.
proficiency in C and Python for low-level research, tooling, and prototyping.
proven ability to analyze attacker behavior and design corresponding detection or mitigation strategies.
strong familiarity with cloud-native technologies, including containers, kubernetes, and container runtimes.
excellent communication skills, with the ability to explain complex technical findings clearly and influence stakeholders.

Requirements:
10+ years in Information Systems, Enterprise Applications, or Business Systems, including 3+ years leading teams.
Proven experience managing teams across locations and owning systems across multiple business functions.
Hands-on knowledge of system integrations, APIs, workflow automation, and integration platforms such as Workato.
Experience leading system implementations (at least one full ERP, CPQ, or quote-to-cash rollout), defining technology roadmaps, and managing vendors.
Experience building a data platform or reporting layer, including shared metric definitions.
Practical experience putting AI tools and agents to work in business processes.
Experience with internal controls and audit readiness (SOX or similar) in a multi-entity, multi-currency company.
Strong stakeholder management and communication skills.
Strategic thinking combined with a hands-on approach: you can build a workflow yourself, not only manage people who do.