לוח משרות דרושים מהנדס סייבר בתל אביב יפו, לחיפוש זה נמצאו 26 משרות

As a Senior SOC Engineer within Unit 42 at Palo Alto Networks, you will drive the creation, validation, and optimization of custom detection rules and automated playbooks across our global customer base. Acting as a trusted advisor, you will collaborate closely with clients to maximize their security posture using Cortex XSIAM and Unit 42 expertise. This highly analytical role leverages your deep understanding of detection lifecycles, proactive automation, and threat intelligence to secure enterprise environments. You will architect end-to-end security lifecycles that seamlessly connect data ingestion with high-fidelity detection engineering.
Key Responsibilities
Own the full lifecycle of custom detections and response automations, deploying them as high-fidelity Cortex XSIAM correlation rules and playbooks through a rigorous engineering process of development, testing, staging, and soft implementation.
Drive the continuous refinement of correlation rules to ensure strict standards for performance, accuracy, and operational relevance.
Translate Unit 42 threat intelligence research and emerging adversary TTPs into actionable, robust detection logic.
Champion proactive automation by engineering sophisticated playbooks to resolve emerging security challenges and optimize operational workflows ahead of demand.
Architect the end-to-end security lifecycle within Cortex XSIAM, seamlessly connecting data ingestion, high-fidelity detection engineering, and sophisticated response automation.

We are looking for a Senior Network & Security Engineer to join our dynamic IT team.
Design, deploy, and operate enterprise and datacenter network infrastructure.
Manage and troubleshoot LAN, WAN, WLAN, VPN, and security environments.
Configure and maintain routers, switches, firewalls, load balancers, and related infrastructure.
Design and implement scalable network architectures based on modern cloud and hyperscale principles.
Drive network automation using Python, Golang, Shell, or similar technologies.
Build and enhance self-service infrastructure platforms supporting engineering and lab environments.
Monitor network performance, availability, and security using automated monitoring and alerting systems.
Collaborate closely with Infrastructure, Security, and Engineering teams to implement security controls and best practices.
Participate in architecture reviews, capacity planning, disaster recovery, and operational excellence initiatives.
Mentor team members and contribute to technical leadership across.

We are looking for a Senior Product Security Engineer to join our Product Security team and help strengthen security across our products and software development lifecycle.
The role is hands-on and engineering-focused, working closely with development and product teams to identify security risks, improve application security, and implement practical security solutions throughout the development lifecycle.
In this role, you will be responsible for:
Work closely with development and product teams on application and product security throughout the software development lifecycle.
Perform hands-on security reviews of applications, APIs, services, and code.
Identify, investigate, validate, and assess product security vulnerabilities and security findings.
Provide practical remediation guidance and work with development teams through remediation.
Perform threat modeling and security analysis for new and existing product capabilities.
Work with application security tools and technologies including SAST, SCA, DAST, API Security, WAF, and related security controls.
Improve and automate Product Security processes, tooling, and security checks across the development lifecycle.
Assess security across modern application environments including web applications, APIs, microservices, containers, Kubernetes, and cloud-native services.
Support secure coding practices and provide practical security guidance to development teams.
Support vulnerability disclosure and Bug Bounty activities, including technical validation, risk assessment, and remediation follow-up.
Contribute to the continuous improvement of Product Security practices and capabilities across our engineering organization.

We seek a dynamic and experienced Cyber Security Engineer to join us! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.
In this role, you will be responsible for:
Design, implement, and maintain security architectures and controls across the organization's Cloud, SaaS, AI, and Corporate environments.
Secure enterprise infrastructure by strengthening cloud security, protecting sensitive data, managing identity and access, and continuously improving the organization's security posture.
Deploy, operate, and optimize enterprise security technologies across Identity, Endpoint, Network, Email, Cloud, SaaS, Data Protection, and Security Operations domains.
Identify, prioritize, and remediate security risks, vulnerabilities, cloud exposures, and SaaS security findings.
Lead end-to-end security projects across multiple teams, collaborating with Engineering, DevOps, IT, and Security Operations to implement scalable security solutions and drive automation.
Support the secure adoption of AI technologies while ensuring security controls align with industry best practices and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls.

We are looking for a Product Security Engineer to join our Product Security team and help strengthen security across our products and software development lifecycle.
The role is hands-on and engineering-focused, working closely with development and product teams to identify security risks, improve application security, and implement practical security solutions throughout the development lifecycle.
In this role, you will be responsible for:
Work closely with development and product teams on application and product security throughout the software development lifecycle.
Perform hands-on security reviews of applications, APIs, services, and code.
Identify, investigate, validate, and assess product security vulnerabilities and security findings.
Provide practical remediation guidance and work with development teams through remediation.
Perform threat modeling and security analysis for new and existing product capabilities.
Work with application security tools and technologies including SAST, SCA, DAST, API Security, WAF, and related security controls.
Improve and automate Product Security processes, tooling, and security checks across the development lifecycle.
Assess security across modern application environments including web applications, APIs, microservices, containers, Kubernetes, and cloud-native services.
Support secure coding practices and provide practical security guidance to development teams.
Support vulnerability disclosure and Bug Bounty activities, including technical validation, risk assessment, and remediation follow-up.
Contribute to the continuous improvement of Product Security practices and capabilities across our engineering organization.

We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations
You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders.
Key Responsibilities:
Microsoft 365 Tenant Administration:
Administer and maintain enterprise-scale M365 tenants, including configuration, governance, and operational support.
Oversee service health, usage reporting, licensing, and user lifecycle management.
Maintain documentation of configurations, workflows, and operational procedures.
Microsoft Intune / Endpoint Management (Full Scope)
Own all aspects of Intune administration, including:
Device enrolment (Windows, macOS, iOS/iPadOS, Android)
Configuration profiles, compliance policies, and security baselines
Autopilot provisioning, device naming policies, and lifecycle
Conditional Access integration with device compliance
Endpoint security policies (AV, firewall, ASR rules, BitLocker, etc.)
Identity & Access Management (Entra ID / SSO):
Manage and secure Microsoft Entra ID (Azure AD) for identity, authentication, and access governance.
Configure and maintain SSO integrations with SaaS applications using SAML/OAuth/OIDC.
Implement and optimize:
Conditional Access policies
MFA enforcement and authentication methods policy
Privileged Identity Management
Identity Protection policies (risk-based controls)
Security & Threat Protection:
Deploy and manage Microsoft Defender stack relevant to the organization
Integrate and manage endpoint security posture with non-Microsoft EDR platforms, such as Sentinel One/CrowdStrike
Collaborate with Security teams to implement detection and response workflows, ensure coverage, and align with organizational policy.
Messaging & Collaboration:
Exchange Online:
Administer Exchange Online policies and configurations
Implement email security best practices and support incident response when needed.
Microsoft Teams:
Administer Teams policies and governance - Teams lifecycle policy, app permissions, meeting policies; External access and guest collaboration settings

We are looking for proactive, analytical, talented people to join the Security Content team.
As a Research Engineer (Security Network & Apps), you will add content to our security and network products such as NGWF, CASB, DLP, and more.
Using agentic AI tools (Claude code, Cursor) and modern big data analysis frameworks (Redash, Athena), and network and web analysis tools to analyze network protocols and application traffic.
Joining us is an excellent opportunity for network security enthusiasts who are passionate about the future of Networking and Security.
Responsibilities:
Research and analyze network and application behavior as part of our Networks security products (NGFW, CASB, DLP, and more).
Lead cross-team projects to deliver product development outcomes in partnership with Engineering and Product.
Focus on the customers impact and understand the business perspective.
Suggest and conduct new research vectors.
Work with AI tools and coding agents to automate your work and improve efficiency.
Utilize Catos Data Warehouse with big-data technologies to support your work.

We are looking for a high-energy, talented people to join the Security team. As a Security Engineer, you will take part in product content development and build logics and signatures to mitigate emerging security threats. Your work outcome will feed our Cloud security products such as the IPS and Suspicious Activity Monitoring with the latest protections. You will analyze protocols and investigate various attacks utilizing network analysis tools and modern data analysis frameworks. Joining us is an excellent opportunity for network security enthusiasts who are passionate about the future of Networking and Security.
Responsibilities:
Research and analyze new threats and develop product content such as IPS signatures and logic to provide the best protection for our customers.
Enhance product accuracy and its ability to detect new threats in the dynamically-changed security landscape.
Monitor your work using different monitoring tools and methods over the cloud.
Utilize our Data Warehouse with big-data technologies to support your work.

we are looking for a Security Engineer.
The Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption - governing AI assistants, coding agents, and MCP integrations while keeping employees productive. You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team.
What You'll Be Doing:
Operate and maintain our corporate security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controls
Experience hardening endpoints and enforcing device policy via MDM/EDR - security baselines, disk encryption, local admin restrictions, and USB/peripheral controls
Monitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, and SaaS
Maintain identity security controls - SSO/MFA coverage, privileged access, joiner/mover/leaver, and access reviews
Secure our SaaS footprint - security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platforms
Implement and maintain DLP controls across email, endpoints, and SaaS
Run endpoint patching and vulnerability management, and coordinate remediation with owning teams
Run POCs and rollouts of IT security tools - evaluating vendors, testing controls, and deploying them in collaboration with IT and external vendors
Secure the company's use of AI tools - implement guardrails for AI assistants, coding agents, and MCP integrations, and build detections for AI-specific threats such as prompt injection and data exfiltration via connectors

As a Senior Research Scientist, AI & Data Systems at Eon Research, you will conduct applied research at the intersection of AI, data systems, and large-scale storage. you will explore challenging technical problems, publish research in leading peer-reviewed venues, file patents, and translate research breakthroughs into production-ready product capabilities.

This role is ideal for a researcher with a strong publication record, deep expertise in a relevant research area, and experience bringing research into real-world products.

Research Areas
Query Processing and Query Engines: Query optimization and execution over columnar and lakehouse formats, including Apache Iceberg and Parquet, as well as approximate query processing using sketches and synopses.

Storage Systems: Deduplication, compression, and data layout optimization for large-scale storage.

Data Integration and Discovery: Entity resolution, schema matching, table joinability, and data discovery, including the use of LLMs as judges.

Information Retrieval and RAG: Retrieval-augmented generation over enterprise data, including emails, documents, and databases.

LLM Evaluation and Benchmarking: Evaluation frameworks and benchmarks for LLM agents working with enterprise data.

LLMs for Software Engineering: CI failure diagnosis, automated debugging, and program repair.

We are looking for an AI AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AI AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You wont just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. You will also be responsible for working closely under the AppSec Architect.
This role is based out of our Tel-Aviv site and will report to the AppSec Architect
What you will be responsible for:
Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents.
Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams.
Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines.
Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often.
Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
Document: Draft requirement documents for security products and innovative technologies.

Required Cyber Field Engineer
If you want to grow your skills, make an impact, and be part of an innovative team, this is the place for you.
About The role:
As a Cyber Field Engineer (CFE), you'll sit at the intersection of cutting-edge AI-driven security technology and real customer impact. You'll be the trusted expert who helps some of the world's most security-mature organizations understand exactly how an attacker could compromise their environment - and how to close that gap before it's exploited. This is a hands-on, high-visibility role for someone who wants to work at the frontier of offensive security and applied AI.
Roles and Responsibilities:
Develop deep expertise in the platform and represent it professionally in front of customers
Lead technical sessions with customers, guiding them through findings and remediation best practices
Serve as a trusted product expert, supporting customer education and long-term relationship success
Identify opportunities to expand our engagement with customers, in collaboration with the Sales team
Bring field insights back to internal teams to help continuously improve our platform and services
Stay current with the evolving cybersecurity and AI threat landscape
Travel regularly across the country to meet customers on-site as part of the role
Embrace a dynamic, evolving scope of work - typical of a fast-growing, category-leading company.

Senior hands-on offensive security professional responsible for delivering complex, objective-driven Red Team and Adversary Simulation engagements for local and global clients. The role combines deep technical execution with the ability to independently take ownership of Red Team projects, including threat-informed adversary emulation, covert Red Team operations, Purple Team exercises, attack path analysis, and advanced penetration testing across enterprise, cloud, application, identity, and hybrid environments. The position requires strong offensive tradecraft, sound technical judgment, and the ability to manage assigned engagements from planning through delivery, while contributing to reusable tooling, knowledge sharing, technical quality, and client advisory. It requires the ability to translate realistic attack scenarios into clear insights that improve clients prevention, detection, response, and overall cyber resilience.
Job description
Take ownership of assigned Red Team, adversary emulation, Purple Team, and threat-led offensive security engagements, from planning and rules of engagement through execution, reporting, and client debrief.
Emulate realistic threat actors and execute multi-stage attack chains, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command and control, defense evasion, and achievement of agreed business objectives.
Design threat-informed scenarios and map adversary tactics, techniques, and procedures to MITRE ATT&CK and other relevant threat-led testing frameworks.
Assess enterprise environments across Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms, identity systems, and hybrid infrastructure, chaining weaknesses into realistic attack paths and business impact.
Develop, customize, and maintain offensive tooling, scripts, payloads, command-and-control infrastructure, and operational tradecraft while applying appropriate safety and operational-security controls.
Work closely with SOC, detection engineering, incident response, and security architecture teams to validate detection and response capabilities and translate observed gaps into actionable improvements.
Communicate directly with clients, present technical and executive results, and provide risk-based recommendations aligned with the clients threat landscape and business priorities.
Contribute to technical quality reviews, knowledge sharing, research initiatives, reusable methodologies, and the continued development of the teams Red Team capabilities.

As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory.
You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support our company's ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide.
What Makes This Role Unique at our company
Clinical AI with real-world patient impact - our company operates in an environment where security is not only about protecting systems and data. Security decisions can affect clinical workflows, care-team coordination, customer trust, and patient safety.
Highly sensitive healthcare data - You will help protect medical imaging data, clinical metadata, PHI/PII, customer environments, and AI-driven workflows that require strong privacy, access control, data protection, and auditability.
Security for AI/ML and medical imaging systems - The role extends beyond traditional AppSec into AI/ML security, data pipeline protection, inference integrity, model-related risks, and misuse scenarios in clinical workflows.
Complex healthcare integrations - our company integrates with hospital systems and healthcare workflows that may include PACS, EHR, VNA, RIS/worklists, scheduling systems, and communication platforms. You will help secure the data flows, authentication models, APIs, and deployment patterns behind these integrations.
Engineering-driven security in a regulated environment - This is not a checkbox compliance role. However, because our company operates in healthcare and clinical AI, security must be practical, evidence-based, and aligned with regulatory, customer, and quality expectations.
Cloud-native scale and production ownership - You will work with modern cloud infrastructure, Kubernetes, containers, CI/CD pipelines, identity and access management, observability, vulnerability management, and software supply-chain controls.
Responsibilities
Secure product and clinical workflows end-to-end - Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features.
Drive secure-by-design architecture - Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling.
Strengthen cloud-native security - Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management.
Embed security into the development lifecycle - Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls.

Shape the Future of AI Infrastructure with our company
This is a rare opportunity to join one of the fastest-growing infrastructure companies in tech history, right at the epicenter of the AI revolution.
Recognized by Forbes as "the future of the market," our company is building the foundational enterprise software powering the AI era. We engineer platforms that capture, catalog, refine, and protect massive datasets across data centers, edge, and cloud, making real-time analytics, AI training, and inference simpler and faster than ever before.
Our explosive growth is fueled by relentless engineering innovation, a customer-first mindset, and a team of fearless company ronauts who thrive on solving computing's hardest problems. Join us at this pivotal moment in technology history and make a lasting impact on how the world processes data.
We are looking for a hands-on, forward-thinking Security Engineer to join our growing security team. In this role, you will lead offensive security initiatives, build internal automation using modern workflows and AI agents, and manage cloud and infrastructure risks. You will conduct penetration tests across our architecture, analyze deep protocol flaws, write custom tooling, and take security findings from discovery all the way to resolution.
Core Responsibilities:
Penetration Testing & AI Automation: Conduct comprehensive penetration tests across all components of our architecture-ranging from Web APIs down to S3 protocols-and design systems to automate routine pentesting using AI tools.
Protocol & Flaw Analysis: Leverage a deep understanding of network and application protocols to identify architectural and implementation flaws, using AI prompts and modern tooling to uncover edge-case security risks.
Tooling & Process Automation: Write custom internal security tools and leverage AI agents to automate repetitive tasks, incident responses, and continuous security workflows.
Secondary Responsibilities:
Cloud Security Monitoring: Monitor and manage cloud security posture using CNAPP (Cloud-Native Application Protection Platform) tools, maintaining oversight of our cloud infrastructure and containerized environments.
Vulnerability Management & Remediation: Run and maintain regular SAST and DAST scans across operating systems, Docker containers, and source code. Own security findings from discovery through code remediation and validation.
Jira & Delivery Tracking: Manage, prioritize, and promote security Jira tickets through the full lifecycle-from initial triage and assignment through to final delivery and verification.