לוח משרות דרושים מומחה אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 109 משרות

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research/ anti-bot defense/ web-scraping /threat hunting, with a proven ability to take initiative and conduct independent research with a track record of high-level results. In other words, not just an individual contributor, but a true talent that is seeking to make a mark in the industry. You will lead technical threat research, author analytical reports, and proactively monitor ongoing and emerging threats to keep us steps ahead of adversaries. Responsibilities
* Hunting, detecting, monitoring, and researching threats against Alice clients.
* Analysis of threat groups and TTPs across different fraudulent ecosystems.
* Researching and monitoring multiple sources through the clear, deep, and the dark web.
* Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients. Work closely with client account leads and stakeholders, as well as collaborating with fellow analysts to produce intelligence reports.
* Review, enrich and provide analyst tradecraft for other team members as part of the delivery process. Prepare assessments of current threats and trends based on collection, research and analysis of classified intelligence collected by the teams.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Our team is looking for a Senior Backend Developer with a passion for solving complex scaling problems with a good understanding of efficient, forward-looking system design. Our desired candidate has a can-do attitude that will inspire and help us build rocket ships. om scratch'

What You'll Do


Shape the Core - Design, build, and scale the companys infrastructure at the heart of our product.
Raise the Bar - Continuously refine system architecture, set high technical standards, and push for engineering excellence.
Collaborate Across the Board - Work hand-in-hand with R&D, product, and other teams to deliver powerful cross-platform features.
Engineer for Scale - Architect and build features that thrive in the AI era.
Be a Force Multiplier - Drive improvements in our development processes, tools, and frameworks, so the whole team can move faster and smarter.

The Senior Product Manager will play a key role in the product life cycle with an emphasis on customer requirements, as well as generating and defining the product vision. The Senior Product Manager will work closely with multiple departments, including product management, engineering, UX/UI, sales, customer support, finance, and marketing, to ensure customer requirements are met.

This is an exciting opportunity to join a fast-growing, innovative company, be part of a strong team, and lead a product that solves a high-profile problem in the Cloud Security space. You will be joining the companys product team and leading a significant domain.


Your Opportunity:
Own and lead the vision, strategy, and execution for the Cloud Threat Detection domain, driving end-to-end product development of threat detections and stories, AI risk assessment, eBPF agent, container runtime protection and more. to help customers reduce risk and achieve continuous cloud compliance

Engage directly with customers and prospects to gather insights, validate assumptions, and ensure product decisions align with real-world security challenges.

Collaborate cross-functionally with engineering, design, and research teams to deliver high-impact features and platform capabilities

Drive both inbound and outbound product efforts

Define product strategy and roadmap

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.



While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.

Key Responsibilities

Application Security & Secure Engineering

Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security

Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance

DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.

We're looking for a Security Operations (SecOps) specialist to take ownership of our security infrastructure and operations as we scale. In this hands-on, high-impact role, youll play a crucial role in managing the infrastructure, services and service providers that help keep secure from outside attacks and insider threats, along with managing our information compliance programs.
Responsibilities:
Support and lead our security programs, both internal and with 3rd party vendors.
Lead incident response simulations and continuous vulnerability remediation efforts, optimizing our observability and alerting frameworks.
Support the design and maintenance of resilient, scalable cloud infrastructure, ensuring security is baked into the foundation.
Work closely with company leadership to ensure adoption of security best practices.
Work closely with R&D teams to help them shift security testing left into the early phases of development.
Monitor, detect, and respond to security alerts and infrastructure anomalies, optimizing our logging, tracing, and alerting frameworks.
Conduct regular reviews of security tools and infrastructure such as endpoint security, malware detection, firewall logs, and the like.
Collaborate with our CISO to implement and automate controls supporting fintech/insurtech compliance and data privacy standards (PII protection, SOC2).

We are looking for a security programmer to help us build the next generation AI container network security system.
This role sits at the intersection of systems programming, network security, and cloud-native infrastructure.
What You'll Do
Help design and implement traffic inspection and prevention components that run in-line within Kubernetes clusters (as a DaemonSet, sidecar, or CNI-integrated component)
Build or contribute to protocol parsers and signature/rule-matching engines
Contribute to an AI-assisted signature generation pipeline
Work with the Linux networking stack to intercept and act on traffic with acceptable latency overhead
Help ensure the data path is efficient enough to run under the resource budgets typical of Kubernetes workloads
Collaborate with detection research and cloud security teams to translate threat intelligence into enforceable rules and behaviors.

We are looking for a Malware Group Manager to lead our endpoint protection and file security teams.
Someone with a passion for stopping malware where it lands, whether it comes through an email, or from the web, and for building the protections that keep our customers safe. Someone who wants to shape research and detection strategy across multiple teams, understand how attackers operate, and stay ahead of fast-moving threats, including zero-day attacks.
Our teams work across a rich stack: endpoint protection engines, file analysis and sandboxing, reverse engineering, and big data pipelines that turn raw telemetry into actionable threat intelligence and protections.
In this position you will lead several teams, set the technical and research, and make sure we deliver detection that works at scale.
Key Responsibilities
Lead and grow multiple teams and across endpoint protection and file security, and own the group's roadmap
Drive the group's AI transformation - bring GenAI and machine learning into how we research threats, build detection, and speed up our work
Set research and detection strategy, and align it with product and business goals
Drive endpoint and file protection capabilities that stop known and zero-day threats
Build a strong engineering and research culture and develop the next generation of leaders on your teams, and tooling to support them.

The Threat Landscape Operations team is a key part of our company Research. It is responsible for conducting threat research and developing some of our companys major research assets.
The team focuses on analyzing and tracking cybercrime, developments in AI, hacktivist activity, and emerging adversary trends. Its research supports strategic and operational intelligence, thought leadership, and the development of advanced security technologies.
Working with us will give you access to unique data sources and visibility into some of the worlds most advanced cyberattacks. You will lead exciting research projects for public release, customers, and internal stakeholders.
We are looking for an experienced, proactive, and independent team leader who can lead dynamic, in-depth research and shape the teams long-term vision.
Major Responsibilities
Lead a team of experienced Dark Web and OSINT researchers and define the teams vision, priorities, and research strategy.
Develop innovative research content for external publication.
Own major research projects and assets, including the Annual Security Report and Annual AI Security Report.
Gather and analyze intelligence on cyberattacks to build a comprehensive picture of the threat landscape for internal stakeholders and public reporting.
Build, maintain, and continuously evaluate a diverse set of reliable intelligence sources.
Identify emerging trends, malware, threat actors, and significant intelligence developments at an early stage.
Collaborate with researchers and internal stakeholders to contextualize findings and improve threat coverage.
Maintain high analytical and research standards, including rigorous sourcing, attribution, and methodology.

We are seeking a highly skilled and experienced Head of Application Security to join our dynamic team. This role is pivotal in driving the security of our software development lifecycle and ensuring the robustness of our applications against potential threats. The ideal candidate will have a strong background in secure software development practices, including SSDLC implementation, and a deep understanding of security risks & tools. This position reports directly to an R&D VP.
Key Responsibilities
Lead the application security team, providing strategic direction and mentorship.
Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework.
Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails.
Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities.
Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity.
Implement and manage security automation tools and processes to enhance the efficiency of security operations.
Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture.
Provide expert guidance on security architecture and design for new and existing applications.
Lead incident response efforts related to application security breaches and vulnerabilities.
Foster a culture of security awareness and continuous improvement within the organization.

We are looking for a Senior Fraud Analyst to serve as the technical cornerstone of our Fraud Prevention team.
In this role, you won't be managing a team; youll be managing the technical evolution of our fraud defenses. Reporting directly to the Fraud Prevention Director, you will act as a high-level individual contributor, bridging the gap between data science, engineering, and risk strategy. You will be responsible for pioneering the use of AI and advanced analytics to protect our community and ensure our platform remains the safest place for independent businesses to grow.
Here are a few of the things you'll do:
Technical Strategy & Architecture: Partner with the Fraud Prevention Director to define the long-term technical roadmap, moving toward an AI-first, autonomous fraud detection ecosystem.
AI & LLM Integration: Design and implement Generative AI agents and LLM-powered workflows to automate complex forensic investigations, reducing the time-to-detect for emerging fraud vectors.
Advanced Detection Modeling: Develop and prototype sophisticated ML models and graph-based heuristics to identify collusion, synthetic identities, and fraud rings.
Cross-Functional Technical Lead: Serve as the primary technical consultant to Product and Engineering, ensuring that new payment features (like RTP or international expansion) are built with scalable, AI-driven safeguards from day one.
Expert Forensics: Act as an escalation point on high-stakes, large-scale fraud attacks, utilizing advanced Python and network analytics to deconstruct and mitigate threats.
Data Excellence: Set the standard for the fraud teams technical stack. You will optimize our SQL/Python environments and ensure our data infrastructure is capable of supporting real-time AI inference.

Tetragon Threat Detection Engineers primarily focus on creating and maintaining

Tetragon runtime security policies, based on the latest threat intelligence, vulnerability disclosures, and their own research.

Policies can act either as a mitigation to known vulnerabilities or as monitoring and protection against unknown security issues.

What youll do:

Develop and maintain Tetragon runtime security policies to ensure customers have good visibility of suspicious activity on their infrastructure and are protected against the latest emerging threats

Help design frameworks and architectures that allow customers to easily consume policies and understand their overall security posture

Monitor vulnerability disclosures (CVEs) and the latest threat intelligence to develop Tetragon runtime security policies

Work with software engineers at Isovalent and Cisco to improve and enhance the capabilities of Tetragon security policies

Interact with solution architects and customers as necessary to support and deploy Tetragon security policies in production

Publish content and give talks based on your work

You will have a strong technical understanding of the nature of identified vulnerabilities, be able to clearly express the risk posed by these issues, and be able to evaluate the merits of proposed solutions. You will have a good understanding of security risk and be able to prioritize work accordingly.

While this role requires technical security proficiency, you will also leverage your people skills to partner with development, release, and other security teams at Cisco to ensure that we address vulnerabilities promptly, document our security posture clearly, and are following industry best practices in our products. You will advocate for security best practices across your interactions with your colleagues.

You will have a strong technical understanding of the nature of identified vulnerabilities, be able to clearly express the risk posed by these issues, and be able to evaluate the merits of proposed solutions. You will have a good understanding of security risk and be able to prioritize work accordingly.

While this role requires technical security proficiency, you will also leverage your people skills to partner with development, release, and other security teams at Cisco to ensure that we address vulnerabilities promptly, document our security posture clearly, and are following industry best practices in our products. You will advocate for security best practices across your interactions with your colleagues.

Technical Leadership: Provide authority guidance within the Splunk security domain, exhibiting deep expertise in SIEM, SOAR, and Observability integrations.

Strategic Advisory: Lead sophisticated, multi-functional security projects, acting as a trusted partner to CISO and IT leadership.

Solution Delivery: Lead the strategic planning, compose, and implementation of tailored Splunk security architectures to mitigate risk and maximize technology investments.

AI-Driven Security: Apply sophisticated AI and automation tools to optimize security operations, automate incident response, and improve detection efficacy.

Customer Management: Develop and maintain high-value relationships, ensuring technical alignment with customer security objectives.

Documentation Excellence: Define and implement documentation standards for sophisticated security deployments, ensuring transparency and structure for technical assets.

Authority Support: Build and apply advanced simulation environments; provide expert support for sophisticated security issues and platform challenges.

Mentorship & Growth: Build technical skills across the team, serving as a domain expert on Plan, Design, Implement, and Optimize (PDIO) methodologies.

Product Influence: Synthesize customer feedback to prioritize and advocate for Splunk product and service improvements.

Innovation: Apply expertise in security orchestration, automation, and AI Ops to deliver innovative, scalable customer outcomes.

Intellectual Capital: Lead the creation of digital assets, procedures, and standardized methodologies for Splunk security engagements.

multi-functional Partnership: Collaborate with Product Management to track security trends, influence service offers, and share actionable customer insights.