לוח משרות דרושים מומחה אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 80 משרות

Requirements:
2+ years of experience in a team leader or tech lead position.
4+ years in security research, with hands-on experience in at least 2 of the following domains: cloud, web, API, identity, or supply chain security - and a solid working familiarity with the rest.
Strong coding and data analytics skills in Python, JavaScript, and Bash, with proficiency in SQL-like queries.
Proven experience building detection mechanisms as part of a security product or detection engineering practice.
Hands-on experience working with AI models in production - including agentic AI systems and LLMs - this is a must.
Experience with the full ML lifecycle, and building machine learning or deep learning models - a significant advantage.
High comfort with ambiguity - ability to define direction and execute without predefined guidelines.
Curiosity, creativity, and a self-driven approach to research and leadership.
sense of urgency in shaping the AI security landscape for the entire security community

Requirements:
4+ years in security research, including cloud, web, or API security.
Experience in detection engineering and building or working with detection-driven security products.
Strong coding and data analytics skills in scripting and programming languages such as Python, JavaScript and bash, and proficiency with SQL-like queries.
Solid grasp of security principles, cloud security, and runtime defense.
Curiosity, creativity, and a self-driven approach to research.
Experience tinkering with LLMs and AI security - a strong plus.

Requirements:
5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) addressing, escalating, and managing security incidents and creating incident reports.
Extensive experience in managing the lifecycle of security incidents in a global, 24/7 production environment..
Collaborating with various cross-organizational stakeholders to drive incident response and remediation.
Development of common runbooks for most frequent or critical incident types.
Strong development fundamentals with experience delivering and maintaining production-grade code.
Coding & Scripting: Hands-on programming experience (Python, Bash, etc.) with proven ability to build automation processes.
Proven expertise in attack and mitigation methods within Cloud and SaaS environments
Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.
Problem solver, an in-depth thinker with a growth mindset.
Excellent communication skills and ability to work collaboratively with other teams
Preferred Qualifications
Bachelors degree in Computer Science, Information Technology, or related field
Solid understanding of LLM concepts and architectures, with hands-on experience applying them in practice.

Requirements:
10+ years in cybersecurity, with significant incident response management experience.
Proven experience leading large-scale, cross-company cyber incidents, including incidents involving:
Multiple engineering and operational teams
Executive leadership and board-level visibility
Demonstrated experience acting as Incident Commander or equivalent role during major security events for at least 15 incidents in the past 5 years.
Strong understanding of:
Cloud and SaaS architectures
Identity, access control, and infrastructure security
Detection and response technologies (SIEM, EDR, cloud-native tools)
Offensive background
Ability to translate technical facts into business impact and risk-based decisions.
Critical Skills & Attributes
Crisis leadership: Calm, decisive, and structured under extreme pressure.
Authority without ego: Able to lead across departments without formal reporting lines.
Executive communication: Clear, concise, and credible with senior leadership.
Systems thinker: Understands how technical, human, and process failures compound during incidents.
Bias for action: Moves quickly while maintaining discipline and documentation.
Analytical thinking: Attention to details and ability to connect multiple dots into a concise and accurate picture.
Previous experience at Mandiant, Sygnia, CrowdStrike, Unit 42, or similar elite IR teams
Experience in crypto, fintech, custody, payments, or highly regulated environments
Hands-on background in forensics, threat hunting, or security engineering
Nice to Have
Experience in crypto, fintech, cloud infrastructure, or highly regulated environments
Experience supporting regulatory notifications and post-incident audits
Background in forensics, threat intelligence, or security engineering
Familiarity with NIST, ISO 27035, or similar incident response frameworks (practical application, not

Requirements:
5-7 Years of AppSec Experience-Must!
Broad Security Horizon: A deep understanding of the modern security landscape, including Identity (OIDC, OAuth, IAM), Supply Chain security, and Cloud-native architectures-Must
Technical Versatility: Strong code review skills and proficiency in at least one major language (Python, TypeScript, etc.). You should be comfortable navigating complex microservices and CI/CD pipelines (GitHub Actions, ArgoCD)-Must
Adversarial Intuition: You have a hacker heart-experience in pentesting or security research helps you anticipate risks before they manifest.
Strategic Communication: You can translate complex security concepts into a roadmap that engineers and stakeholders actually want to follow.
Youre a Great Fit If
You see a manual task and immediately think about how to automate it with a script or an LLM.
You enjoy the challenge of securing industry-novel risks that dont have a best practice handbook yet.
You value simplicity in design and believe that security should be a developer enabler, not a blocker.
You thrive in fast-paced environments where status quo is a dirty word.

Requirements:
Technical background with experience in Microsoft Azure and Office365 Security - Must
Familiarity with Azure security tools (Defender, Sentinel, Conditional Access, Entra ID) - Preferred
Familiarity with Office365 security (Teams, Intune, Purview, CASB, Zero Trust) - Preferred
Understanding of AI security concepts (data protection, model risks) - Advantage
Knowledge of networking and network security - Advantage
Experience with automation tools (Terraform, Ansible or similar) - Advantage
Relevant certifications (e.g., SC-900, SC-200, AZ-500) - Advantage
Fluent English - written and spoken
The position is open for all genders as well as people with disabilities.

Requirements:
7+ years of experience in cyber security, with significant hands-on experience in threat intelligence research focused on APTs or state-linked actors.
Detailed understanding of existing APT groups historical activities, TTPs, motivations, and targeting patterns.
Strong investigative mindset, high level of intellectual curiosity, and comfort working with incomplete or ambiguous data.
Proficiency in infrastructure research, including WHOIS, passive DNS, SSL certificate analysis, BGP/ASN data, and platforms such as Censys and VirusTotal.
Strong written and verbal communication skills, with experience producing clear and concise threat intelligence reports or briefs.
Experience in software development and data analysis (e.g., Python, Jupyter, or similar) to support investigations and hypothesis testing.
Experience researching or defending government or critical infrastructure organizations- Advantage.