לוח משרות דרושים הייטק אבטחת מידע / סייבר בהרצליה, לחיפוש זה נמצאו 40 משרות

We are seeking a Principal Security Researcher to set the technical direction for a critical area of our identity protection charter, drive multi-quarter research agendas end-to-end, and raise the bar of the team through mentorship and influence. You will partner with engineering, PM, data science, and other research teams across us to shape strategy, and you will represent our research externally through publications, talks, and industry engagement. We expect our Principal researchers to fluently leverage Generative AI and to actively shape how the team applies it - turning AI assistance into a durable force multiplier across investigation, detection authoring, and customer protection at our scale.

Responsibilities

Set the technical direction for a major area of our identity protection research charter, owning the multi-quarter strategy from threat landscape framing to shipped detection and measurable customer protection impact.

Drive multiple concurrent end-to-end research initiatives, breaking ambiguous problems into tractable workstreams and unblocking the team on the hardest technical questions.

Lead deep investigation and research of data across identity and adjacent sources to surface novel threats, attacker tradecraft, and detection opportunities others miss.

Stay ahead of the evolving attacker landscape and design robust, sophisticated detection logics across the entire kill-chain - raising the bar on quality, coverage, and resilience to attacker evasion.

Influence across organizational boundaries - partner with product management, engineering, data science, and peer research teams to shape product strategy, define new identity protection capabilities, and align roadmaps on a data-driven foundation.

Mentor and grow other researchers (IC3-IC4), elevating the technical bar of the team through code/design review, research coaching, and apprenticeship on complex investigations.

Shape how the team and discipline leverage Generative AI - define patterns, evaluate tools, and build durable AI-assisted workflows that scale research throughput across data triage, hypothesis generation, code and KQL authoring, and detection synthesis.

Represent our Security externally through high-quality research publications, conference talks, blog posts, and engagement with the broader security research community.

we are looking for a GRC Security Specialist.
Cyber Security Governance protects the security of an organizations information systems and data by setting policies, monitoring compliance, and following defined procedures to identify, assess, and manage risks from external and internal threats. We are seeking a GRC Security Specialist to join our Cyber GRC Team . You will be joining a tight-knit and highly respected team of GRC experts who are central to security strategy. In this role, you will be at the heart of protecting our global financial platform, directly influencing the trust and safety of millions of users worldwide. As a GRC Security Specialist, you will be responsible for the following:
Glilot, Israel
Hybrid
Full-time
What you'll do:
Directly responsible for policies, procedures, and controls to assure compliance with applicable regulatory, legal, and audit requirements as well as good business practices.
Develop a Cyber security compliance strategy and approach and ensure compliance with contractual requirements and globally recognized standards and guidelines.
Identify regulatory, legislative, and industry-specific compliance requirements and define controls that can be used to meet those requirements.
Conduct and participate in periodic internal reviews or audits to ensure that compliance procedures are followed.
Oversee and evaluate compliance systems to ensure they function effectively.
Compile and present reports to management on compliance activities and progress.
Stay updated on industry developments, regulatory trends, and best practices to evaluate their potential impact on the organization.
Design and implement enhancements in compliance communication, monitoring, and enforcement mechanisms.
Develop and execute a compliance awareness program, including the creation and distribution of materials for all employees.
Partner with Legal and IT teams to manage data protection agreements and compliance initiatives.
Lead the development and execution of company-wide security awareness and training initiatives.
Assist in incident response planning and investigations when necessary.

You'll be joining our MDR Security Engineering team, whose mission is to help MDR scale, automate, and strengthen threat detection across a high-volume, global operation.

We are seeking a Senior Security Engineer, MDR Automation & Platform to serve as the engineering and development technical lead for our automation and orchestration platform. This role sits between engineering and security operations and will set the platforms technical direction, translate operational and security needs into technical designs, and lead decisions around architecture, scalability, reliability, and cost.

You will not develop the underlying product or build the infrastructure from scratch. Instead, you will understand the platform deeply, shape how it is designed and operated, and build or review the code behind its more complex integrations and workflow components. You will work closely with analysts, researchers, and engineers to ensure security-driven workflows for triage, enrichment, investigation, and response are scalable, reliable, and built according to strong engineering standards.

The ideal candidate combines strong engineering and development experience with a solid understanding of security operations. They have led the technical direction of an automation platform or similar system and can turn complex operational requirements into practical, scalable solutions.

Responsibilities
Drive the technical direction, architecture, and lifecycle of MDRs automation and orchestration platform, including SOAR, case management, integrations, and supporting workflow tooling.
Act as the engineering and development technical lead for the MDR Security Engineering team by reviewing designs and code, setting standards, and guiding technical decisions.
Design and build complex integrations, services, APIs, and workflow components, while guiding others in building and maintaining the broader platform.
Translate operational and security needs into clear technical designs and delivery plans in collaboration with analysts, IR, threat hunters, researchers, and engineering.
Make architecture, scalability, reliability, design, and cost decisions for the platform.
Design and shape SOAR playbooks and security-driven workflows for alert triage, enrichment, investigation, and response.
Identify high-impact, high-volume SOC processes and scale them through automation.
Establish strong engineering practices across version control, code review, testing, CI/CD, deployment, and observability.

We are seeking a talented and versatile Senior Threat Detection Engineer to work with us in Herzliya with expertise in iOS and Android security. As a key member of our engineering team, you will play a crucial role in designing and developing complex compromise detection solutions and providing advanced professional services to customers.

Responsibilities:
Design and develop mobile focused on-device and off-device malware and compromise detection solutions that enable forensic analysis, including infrastructure, features, classification logic, tools, proof of concepts, heuristics and signatures for Android and iOS devices.
Represent the Company in front of customers by providing advanced professional services including malware and indicator of compromise analysis, as well as professional training sessions.
Develop and implement components and features using C, C++, Python, JavaScript, Go, Rust and other programming languages as needed, while employing secure coding practices and ensuring optimal performance, responsiveness, and cross-platform compatibility in line with product specifications.
Represent the company in front of potential customers and partners by conducting technical demonstrations, participating in meetings and other pre and post sales engagements.
The position may require local and international travel.

We are seeking a talented and versatile Threat Detection Engineer to work with us in Herzliya with expertise in iOS and Android security. As a key member of our engineering team, you will play a crucial role in designing and developing complex compromise detection solutions and providing advanced professional services to customers.

Responsibilities:
Design and develop mobile focused on-device and off-device malware and compromise detection solutions that enable forensic analysis, including infrastructure, features, classification logic, tools, proof of concepts, heuristics and signatures for Android and iOS devices.
Represent the Company in front of customers by providing advanced professional services including malware and indicator of compromise analysis, as well as professional training sessions.
Develop and implement components and features using C, C++, Python, JavaScript, Go, Rust and other programming languages as needed, while employing secure coding practices and ensuring optimal performance, responsiveness, and cross-platform compatibility in line with product specifications.
Represent the company in front of potential customers and partners by conducting technical demonstrations, participating in meetings and other pre and post sales engagements.
The position may require local and international travel.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.

We are looking for a Junior Intelligence Analyst to join our team. In this role, you will combine investigative expertise, customer-facing engagement, and product knowledge to help customers maximize the value of our intelligence solutions. You will work closely with customers around the world, providing training, generating intelligence insights, and helping improve investigative methodologies and workflows.

You will:
Deliver product demonstrations, onboarding programs, workshops, and training sessions to customers and internal stakeholders worldwide.
Generate intelligence insights, investigations, and reports based on OSINT methodologies and analytical best practices.
Support customers in improving investigative workflows and achieving better operational outcomes through effective use of our solutions.
Drive product adoption and user engagement by identifying usage trends, friction points, and opportunities for improvement.
Participate in product validation activities, including beta testing and feedback collection, ensuring new capabilities meet operational needs.
Serve as a trusted advisor to customers while collaborating closely with Product Management, Customer Success, and Sales teams.
Act as a voice of the customer by sharing field insights, emerging trends, and user requirements that help shape product enhancements and strategy.

we are looking for a cyber architect team leader to join our crew!
The Cyber architecture team is part of professional services delivery department and is dedicated to helping drive customers cyber security maturity forward. This includes both conducting enterprise grade organizations white-box maturity assessments, reviewing design issues or security controls configuration as well as offering relevant mitigations to identified risk during a penetration test, executed by red teamers.
As a cyber architect team leader, you will be responsible for overseeing the teams activities, validating engagements quality, creating new services and initiatives which will help our customers advance their cyber security program and helm complexed assessments and mitigations discussions with our clients.
Responsibilities:
Lead and mentor a team of cyber experts, providing guidance and support on executing activities with clients.
Preform architecture reviews on designed or deployed environments, identifying security flaws and recommending mitigations plans.
Collaborate with other departments to drive forward both product and services.
Determine KPIs to track teams performance.
Create processes to validate delivery quality.
Escort, evaluate and improve our clients security posture by elevating their infrastructures resilience and implement best-practice organizational procedures.
Escort mitigation plans and design practical implementations for security issues.
Research and advocate for new security solutions and technologies.

we are looking for a talented Application Security Specialist to join our team. In this role, you will take an active part in application penetration testing, threat modeling, Secure SDLC activities, and AppSec initiatives that help evaluate and improve security posture. The position includes hands-on security testing of web, mobile, API, thick client, AI/LLM integrations, and MCP-based application components, identifying and validating vulnerabilities, assessing real business impact, supporting customers with clear remediation guidance, and contributing to application security processes, tools, and best practices.
Responsibilities:
Perform hands-on application penetration testing across web, mobile, API, thick client, AI/LLM integrations, and MCP-enabled application components.
Perform threat modeling and secure design reviews to identify risks early in the development lifecycle.
Support development teams with practical remediation guidance and secure implementation recommendations.
Perform Secure Software Development Lifecycle and secure coding training for developers.
Evaluate and improve customers application security development lifecycle, including secure coding practices, vulnerability management, remediation workflows, and security gates.
Participate in client-facing discussions, including assessment scoping, finding walkthroughs, remediation alignment, and retest updates.

our DFIR team is responsible for responding to our clients' cyber incidents and crises.
Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities:
Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
Perform incident response in a cloud environment (Azure, AWS etc.).
Perform digital forensics investigations
Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
Perform hunt-evil and find-evil activities for proactively detecting attacks
Work closely with our in-house red team, CTI, and cyber architect teams
Work closely with worldwide companies, CISOs, and technology experts

we are looking for a security architect to join our team! 
The cyber architecture team is part of professional services delivery department and is dedicated to helping drive customers' cybersecurity maturity forward. as a security architect you would be conducting enterprise level organizations' white-box risk assessments, reviewing design issues or security controls configuration, and offering relevant mitigations to identified risks during penetration testing, executed by red teamers.  
Responsibilities:
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Review designed or deployed environments, identifying security flaws and recommending mitigations plans
Review Implementation of technical security controls, identify gaps and offer practical mitigations.
Escort, evaluate and improve our clients security posture by elevating their infrastructure resilience and implement best-practice organizational procedures
Escort mitigation plans and design practical implementations for security issues e.g., firewall policies review, segmentation & segregation recommendations, Microsoft AD-tier Model implementation etc.
Research and advocate for new security solutions and technologies

we are looking for a Cyber Security Expert with hands-on experience in offensive security, possessing strong technical capabilities, in-depth knowledge of adversary simulation, and a passion for Red Team operations.
we are a cybersecurity firm specializing in advanced adversary simulation and offensive security testing. We deliver Red Team assessments for Fortune 500 companies, simulating sophisticated, real-world attacks across external, internal, cloud and Active Directory environments. Our services span both stealth-based Red Team operations and risk-focused assessments, covering a wide range of attack surfaces including on-premise and cloud environments.
Responsibilities:
Participate in Red Team assessments that simulate real-world threats and remain undetected by the client's defensive team. These stealth operations simulate advanced adversaries and require careful planning, execution, and OPSEC
Lead or co-lead portions of internal and external offensive assessments, including perimeter exploitation and post-exploitation in Active Directory
Perform Purple Team engagements to help clients improve their monitoring and detection capabilities while sharpening your own offensive skills
Document attack paths, risk analysis, technical findings and remediation guidance in detailed reports tailored to both technical and executive audiences.
Collaborate with the team to develop and maintain internal tooling, scripts, and documentation for offensive operations
Continuously research and test new techniques, tools, and attack paths to further enhance CYE's Red Team capabilities

we are seeking a Cybersecurity Architect (GRC & Risk) to join our cybersecurity architecture team. In this role, you will lead security governance, risk, and control assessments, conduct third-party due diligence, support maturity assessments, and drive mitigation and architectural review processes. Youll work closely with CISOs, security leaders, engineering teams, and customers to develop risk-focused methodologies and improve security frameworks. This position is best suited for candidates with a technical GRC, risk, or security assessment background who excel in analysis, interpretation, and structuring of security information.
Responsibilites:
Lead customer third‑party security due diligence assessments.
Lead mitigation workshops to translate penetration test and assessment findings into prioritized remediation workplans.
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Develop and refine security methodologies, processes, and architectural guidance.
Maintain internal documentation and ensure alignment between frameworks, processes, and practical implementation.
Analyze technical findings and map them to governance, risk, and control gaps.
Produce clear, structured reports and executive‑ready summaries for technical and non‑technical audiences.