לוח משרות דרושים מומחה אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 103 משרות

This role is responsible for leading the organizations security architecture across corporate networks and cloud environments, ensuring secure design and implementation of enterprise infrastructure at scale.

The ideal candidate combines deep expertise in network and cloud security with strong leadership capabilities. You will define and drive security architecture across hybrid environments, working closely with IT, Infrastructure, Network, DevOps, and Security teams to ensure robust, scalable, and resilient security controls.

Your responsibilities will include:

Lead and manage the security architecture domain, including security architects and/or senior engineers.
Define and maintain security architecture standards, guidelines, and reference designs across corporate and cloud environments.
Act as the primary authority on enterprise security architecture across networks, identity, endpoints, and cloud platforms.
Design and evolve secure enterprise network architectures, including segmentation, Zero Trust, and hybrid connectivity.
Define and enforce security controls for corporate networks, data centers, and remote access solutions (ZTNA, proxies, NAC).
Lead architecture and selection of network security technologies (e.g., firewalls, secure gateways, access control solutions).
Lead security architecture across cloud platforms and hybrid environments.
Define secure reference architectures for cloud networking, identity, and workload protection.
Ensure proper implementation of cloud security controls, including IAM, segmentation, encryption, and monitoring.
Define security architecture for endpoints and identity, including EDR/XDR, device hardening, SSO, MFA, and privileged access.
Ensure secure baseline configurations and access control mechanisms across corporate and cloud environments.
Identify architectural risks and security gaps and drive mitigation strategies across infrastructure and cloud environments.
Establish and enforce architecture review processes and governance for new systems and changes.
Collaborate with SOC, Vulnerability Management, IT, and Infrastructure teams to improve overall security posture.
Contribute to the cyber security strategy and roadmap, including adoption of modern models such as Zero Trust.

We are looking for a skilled Security Automation Engineer to join our SOC Automation team and play a key role in building and scaling automation across Security Operations. This is a hands-on role - you will design, develop, and integrate automation solutions across SIEM, EDR, and other security platforms, contributing to our SOAR capabilities from the ground up.

You will work in a technologically rich environment, integrating with a wide range of security and infrastructure systems across the network - a unique opportunity to build automation at scale in a greenfield setting, with real influence over the architecture and tooling decisions.

We are especially interested in candidates who are curious about leveraging AI and intelligent agents to help evolve next-generation automation and response workflows - and who want to be a driving voice in how we apply those technologies.

Your responsibilities will include:

Automation development

Design and develop automation workflows for incident response and SOC operations
Identify and eliminate manual processes through scalable automation
Build reusable components and maintainable automation patterns
Engineering & integration

Develop integrations using REST APIs, webhooks, and event-driven architectures
Write high-quality, maintainable Python for automation and orchestration
Implement data parsing, enrichment, and transformation across multiple systems
SOAR & platform buildout

Lead or actively contribute to the evaluation, selection, and implementation of SOAR/automation platforms
Design the automation architecture and integration strategy for the team
Build automation capabilities in a greenfield environment - your decisions will shape the foundation
SOC collaboration

Work closely with SOC analysts and incident responders to translate operational needs into automation solutions
Improve end-to-end detection and response workflows through close partnership with the team
AI & innovation

Actively build and evaluate AI/LLM and agent-based workflows applied to security automation
Prototype AI-assisted enrichment, triage, and response solutions and drive them toward production

We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO.

This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them.

You will be responsible for implementing, managing, integrating and maintaining security systems across the organizations IT landscape. The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices.

Your responsibilities will include:

Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security.
Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms.
Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments.
Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation.
Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes.
Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy.
Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows.
Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices.

The Security Operations & Coordination Manager serves as the operational backbone of the Security Operations function, ensuring the seamless planning, coordination, execution, and oversight of all departmental activities.
This role is responsible for translating strategic operational objectives into executable plans, coordinating resources, managing vendors, maintaining operational readiness, and supporting leadership throughout every phase of an operation.
Acting as the central coordination point between headquarters, field personnel, vendors, executives, and external stakeholders, the position ensures that every operation is fully prepared, efficiently managed, and supported in real time while maintaining the highest standards of confidentiality, professionalism, and operational excellence.

Your responsibilities will include:

Lead the operational planning and coordination of all security activities prior to execution, ensuring readiness across personnel, logistics, vendors, and supporting functions.
Coordinate operational plans, timelines, contingency measures, and communication processes before, during, and after each activity.
Serve as the primary operational coordination point between headquarters, field teams, executives, and external stakeholders.
Provide real-time operational support during ongoing activities, acting as an operational command and coordination function to monitor execution, facilitate decision making, and respond to changing operational requirements.
Prepare operational contingency plans and ensure readiness for multiple scenarios, maintaining business continuity and operational resilience.
Manage all external vendors and service providers supporting the Security Department, including performance oversight, operational coordination, contractual follow-up, and service quality.
Manage the departments operational budget, including planning, tracking expenditures, cost control, and coordination with relevant internal departments.
Support the Head of Security Operations in managing departmental priorities, strategic initiatives, executive coordination, and daily operational activities.
Coordinate cross-functional activities with internal business units to ensure operational alignment and timely execution.
Maintain accurate operational documentation, reporting, schedules, and departmental records while ensuring proper handling of confidential information.
Ensure compliance with organizational standards, legal requirements, internal procedures, and security governance.
Support continuous improvement initiatives by identifying opportunities to optimize operational processes, coordination mechanisms, and departmental efficiency.
Assume responsibilities similar to the Security Operations Manager role, with a primary focus on operational coordination, planning, administration, and command support rather than physical field execution.

The Security Operations & Coordination Manager serves as the operational backbone of the Security Operations function, ensuring the seamless planning, coordination, execution, and oversight of all departmental activities.
This role is responsible for translating strategic operational objectives into executable plans, coordinating resources, managing vendors, maintaining operational readiness, and supporting leadership throughout every phase of an operation.
Acting as the central coordination point between headquarters, field personnel, vendors, executives, and external stakeholders, the position ensures that every operation is fully prepared, efficiently managed, and supported in real time while maintaining the highest standards of confidentiality, professionalism, and operational excellence.

Your responsibilities will include:

Lead the operational planning and coordination of all security activities prior to execution, ensuring readiness across personnel, logistics, vendors, and supporting functions.
Coordinate operational plans, timelines, contingency measures, and communication processes before, during, and after each activity.
Serve as the primary operational coordination point between headquarters, field teams, executives, and external stakeholders.
Provide real-time operational support during ongoing activities, acting as an operational command and coordination function to monitor execution, facilitate decision making, and respond to changing operational requirements.
Prepare operational contingency plans and ensure readiness for multiple scenarios, maintaining business continuity and operational resilience.
Manage all external vendors and service providers supporting the Security Department, including performance oversight, operational coordination, contractual follow-up, and service quality.
Manage the departments operational budget, including planning, tracking expenditures, cost control, and coordination with relevant internal departments.
Support the Head of Security Operations in managing departmental priorities, strategic initiatives, executive coordination, and daily operational activities.
Coordinate cross-functional activities with internal business units to ensure operational alignment and timely execution.
Maintain accurate operational documentation, reporting, schedules, and departmental records while ensuring proper handling of confidential information.
Ensure compliance with organizational standards, legal requirements, internal procedures, and security governance.
Support continuous improvement initiatives by identifying opportunities to optimize operational processes, coordination mechanisms, and departmental efficiency.
Assume responsibilities similar to the Security Operations Manager role, with a primary focus on operational coordination, planning, administration, and command support rather than physical field execution.

This is a senior, hands-on individual-contributor role with end-to-end ownership of security risk assessments, the security risk register, remediation tracking, risk acceptance, and risk reporting. The successful candidate will work closely with engineering, cloud infrastructure, product, security, compliance, legal, and business teams to ensure that material risks are identified early, assessed consistently, and driven toward clear treatment decisions.

The role requires strong judgment, technical understanding, and the ability to influence stakeholders without relying on formal authority.

Your responsibilities will include

Risk Assessment

Lead security risk assessments for infrastructure, cloud environments, products, applications, business processes, and major technology changes.
Conduct risk assessments for new initiatives, systems, and significant changes, including supporting M&A-related risk assessment work alongside the due diligence team.
Evaluate the design and effectiveness of controls and identify residual risk following mitigation.
Identify emerging and systemic risks that may affect multiple services, regions, or business functions.
Risk Register & Tracking

Maintain the security risk register: log new risks, update status, track owners, and follow items through to remediation or formal risk acceptance.
Support the ongoing refinement of risk assessment and risk register processes, contributing improvements as the practice matures.
Coordinate with other GRC functions on findings and gap assessments that carry risk implications, and independently determine whether a given finding warrants a risk register entry.
Metrics & Reporting

Maintain and improve security risk assessment, scoring, prioritization, and acceptance processes.
Define and monitor meaningful Key Risk Indicators and risk trends.
Translate complex technical risks into clear business impact for senior leadership and governance forums.
Prepare risk reporting that supports security posture reviews, strategic decision-making, and Board-level reporting.
Support auditors, customers, and internal stakeholders on security risk management matters.
Cross-Functional Coordination

Work closely with other GRC functions to ensure risk assessments reflect current operating reality.
Partner with engineering and business stakeholders to embed risk thinking into day-to-day decisions, building trust through clear, practical communication rather than formal authority.
Build trusted relationships with risk and remediation owners while maintaining independent and objective judgment.

We are looking for an Senior/Staff Application Security Engineer who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC.

What you will do
Build and maintain Application Security Posture Management (ASPM) at the Company scale.
Automate and support SAST, SCA tools, etc as part of CI/CD pipelines.
Improving SAST, secrets detection rules. Keeping false positive rate low.
Identify, analyze, and remediate application security vulnerabilities.
Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
Develop and maintain secure coding guidelines for development teams.
Conduct, run threat modeling and risk assessments for new and existing applications.
Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc.
Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.

We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations
You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders.

We are backed by top-tier global investors including Sequoia Capital, Ribbit Capital, and Cyberstarts-firms known for supporting the most innovative and influential companies in technology and cybersecurity.
As a Security Researcher at Blockaid, you will be responsible for leading in-depth research into emerging blockchain threats and vulnerabilities and developing real-time detection and mitigation capabilities in close collaboration with our engineering and product teams.
Key Responsibilities:
Conduct in-depth security research on blockchain protocols, smart contracts, and decentralized applications.
Identify and analyze security vulnerabilities, exploits, and attack vectors in Web3 protocols.
Collaborate with the engineering team to integrate detection capabilities into our on-chain exploit detection system.
Create proof-of-concept (PoC) exploits and simulations to help test and validate threat scenarios.
Stay current with emerging threats, new technologies, and industry best practices in information security..

We are looking for a highly skilled, technical, and multidisciplinary Deputy CISO to join our Bank's Information Security team. Reporting directly to the CISO, this key position serves as a right-hand lead in shaping technological strategy, managing risk, and implementing security policy. The role operates as a Senior Individual Contributor (IC) requiring high independence and real-world hands-on capabilities, and a strong 'all hands on deck' mindset.
Responsibilities
Strategic & Tech Partnership: Collaborate with the CISO and CIO to design security architecture, implement advanced solutions, and lead end-to-end tech projects.
Cloud Security & DevSecOps: Guide development teams, define secure cloud architectures, and enforce SSDF.
Hands-on Execution: Evaluate and deploy security technologies, analyze cyber/infrastructure incidents, and write/review code and scripts.
GRC & Banking Compliance: Lead GRC end-to-end, manage external pen-testing vendors, handle third-party/supply chain risk, ensure compliance with Bank of Israel regulations, and support audits.

we create user-friendly experiences that drive positive outcomes for all parties involved.

With a team based in Tel Aviv and New York, we have been growing rapidly, supporting hundreds of thousands of consumers on their journey to financial resilience and building partnerships with top creditors and fintech companies.

How Youll Spend Your Time
Own IT operations globally - manage user accounts, devices, and office IT infrastructure across Israel and US sites. Handle onboarding/offboarding workflows, device management (MDM), and day-to-day help desk support.
Manage vendors and subscriptions - build and run vendor assessment and procurement processes in collaboration with Compliance and Finance. Control enterprise SaaS subscriptions and evaluate new tools.
Lead security operations - oversee SOC, audit logging, vendor risk assessments, and security questionnaires for sales prospects. Work alongside Compliance and the CTO to maintain and improve the companys security posture.
Drive process and structure - build the workflows, documentation, and policies that turn a reactive IT function into a proactive one.
Communicate with leadership - present security priorities, budget requests, and risk assessments to executives. Prioritize pragmatically and build buy-in across the organization.
Drive growth - think strategically about how IT scales with the company, and take ownership of building the team and resources needed over time.

we are looking for a SecOps Detection & Response.
As a Security Operations Analyst, Detection & Response, you will help protect Aidocs cloud environments, products, corporate systems, and sensitive healthcare data by investigating SIEM alerts, supporting incident response, and improving the quality of security monitoring.

This is a hands-on security operations role for someone who can analyze security signals, understand real risk, communicate clearly, and help the organization respond quickly and effectively to security events.

You will work closely with real production environments, where accurate investigation, clear documentation, and practical escalation are critical to protecting sensitive healthcare data, customer trust, and the reliability of clinical AI platform.
Responsibilities:
Own the end-to-end investigation of SIEM alerts across cloud, product, identity, endpoint, and SaaS environments: analyze the relevant evidence, separate false positives from real threats, and prioritize cases based on risk and impact.
Escalate high-risk findings with a clear summary of what happened, what is affected, why it matters, and what actions are required.
Support incident response by collecting evidence, assisting with containment, tracking remediation, and maintaining clear investigation records for internal reviews, compliance needs, and post-incident learning.
Improve SIEM rules, dashboards, alert logic, playbooks, telemetry coverage, and detection quality to reduce noise and strengthen security monitoring.
Work with Security, IT, DevOps, R&D, Product Security, and Compliance teams to resolve issues and improve security operations.

We are seeking a GRC Specialist (Governance, Risk, and Compliance) to join our growing GRC Team. This is a fantastic opportunity to be part of a growing team and support the company as it grows and matures. If you're a team player, self-driven, creative thinker, passionate about cybersecurity, and capable of blending a process-oriented mindset with a tech-oriented outlook, we are looking for you!

As a GRC specialist you will...
Maintain internal and external trust platforms, supporting ongoing customer due diligence activities including audits, questionnaires, and reviewing security contractual requirements.
Provide training and guidance to sales teams on compliance-related matters and develop tools and resources to enable the Sales Team to efficiently respond to compliance inquiries from prospective and existing customers.
Collaborate with cross-functional teams to support and enhance the overall GRC program.
Ensure company policies, procedures, and controls are aligned with regulatory requirements and industry standards.
Proactively gather customer feedback and stay abreast of industry trends to adapt and mature the GRC program accordingly.
Implement improvements and updates to the program, based on regulatory changes and customer requirements.
Participate in risk assessment and risk management processes.