לוח משרות דרושים מומחה אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 99 משרות

we are looking for a WAF Security Specialist.
What You'll Do:
Create - Produce production WAF rules across providers for high-impact CVEs and customer findings - driving the Copilot harness on most of them, writing the expression yourself on the hard ones (no public PoC, exploitable path reasoned out of a patch diff, urgent customer coverage). Your rules ship, and they set the bar generated rules are measured against.
**Optimize -**Tighten generated rules for real production constraints: WCU and rule-capacity budgets, latency, provider expression limits, and the anchoring required for a rule that fires against all traffic behind a shared Web ACL - not just the vulnerable app.
Validate - Own the adversarial pass. Build exploit variants the PoC doesn't cover, hunt bypasses in our own rules, and run the false-positive side seriously - verifying against how the legitimate client actually behaves on the wire, not against an assumption.
Monitor - Watch deployed rules in production: false-positive signals, hit patterns, coverage drift as managed rulesets shift underneath us, and the log→block promotion decision. Retire what no longer earns its capacity.
Make it reproducible - Turn every finding into a regression test. Build and curate the golden CVE datasets and scoring rubrics that gate whether a new Copilot version ships.
Set the coverage line. Judge which CVEs are genuinely WAF-mitigatable and which aren't, and make the call on what enters and leaves our managed rulesets - with the reasoning written down.

Were looking for a Pentest Product Associate to join our Product team and help expand our power. In this pivotal role, you will be the primary operator of our cutting-edge AI-driven Dynamic Application Security Testing (DAST) agent while simultaneously innovating detection mechanisms for cloud-native technologies. You will bridge the gap between automated AI testing and cloud infrastructure, defining the "rules of engagement" for our agents to ensure they effectively simulate sophisticated attacks and accurately classify the modern attack surface.
Responsibilities:
Develop advanced detection algorithms to classify cloud technologies while fine-tuning the attack policies that define how our agents identify and exploit vulnerabilities.
Analyze cloud services, APIs, and log payloads to review complex attack paths, reducing false positives and ensuring compliance with industry standards.
Stay at the forefront of novel attack vectors and emerging cloud/API threats, translating new techniques into executable behaviors for the DAST engine.
Collaborate directly with Research, Backend, and R&D teams to turn operational insights into feature requests, positioning us as the market leader in vulnerability management.

e are currently seeking a dynamic Incident Response Analyst to contribute to the success of our rapidly growing business.



As an Incident Response Analyst, you will:

Investigate and respond to workspace security incidents across email, browser security and perimeter security domains.
Handle investigation requests submitted by customers
Perform targeted phishing analysis and investigation of new attack campaigns
Conduct threat hunting based on attack patterns, behaviors, and indicators
Build and improve detections based on new attack types, tactics, companies and trends
Collaborate with development and research teams to provide incident-driven insights, and develop new detection engines for identifying previously unknown attacks
Write professional blog posts based on incident investigations and attack trends, contributing to the companys research-driven content and public visibility
Work in rotating shifts as part of a 24/7 operation (including nights, weekends, and holidays)

We're looking for an IT Operations & Security Specialist to join our IT & Security team. IT operations will be your primary domain - keeping global infrastructure running, employees productive, and office environments stable across Israel, Europe, and the US - with security work (endpoint monitoring, SaaS risk assessments, access governance, and customer-facing security reviews) as a natural extension of that ownership.
What You'll Do
Deliver Tier 1 and Tier 2 global technical support on a shifted schedule, covering employees across Tel Aviv, Europe, and the US.
Own the full employee onboarding and offboarding lifecycle - device provisioning, access activation, and secure asset retrieval and revocation.
Administer the full identity lifecycle across the core SaaS stack (Okta, Google Workspace), enforcing role-based access controls and license hygiene.
Manage the global hardware lifecycle and asset register, from shipping logistics through secure offboarding and inventory tracking.
Own the office infrastructure environment - network hardware, physical security systems, cabling, and AV/video conferencing setups.
Execute customer-facing security questionnaires and vendor assessments as the operational point of contact for sales-driven security reviews.
Monitor and maintain endpoint health across EDR (CrowdStrike) and MDM (JumpCloud), flagging and remediating non-compliant devices.
Conduct security risk assessments on new SaaS applications and support SOC 2 / ISO 27001 compliance initiatives and audits.

we are revolutionizing legal tech with an AI-powered Legal Intelligence Platform trusted by some of the world's fastest-growing companies including Wiz, Socure, and Fiverr.
We integrate seamlessly with Salesforce and other systems to help in-house legal teams accelerate negotiations, reduce risk, and unlock institutional knowledge through automated workflows.
We're solving complex problems at the intersection of AI and legal operations. Join us as we scale our impact globally.
About the Role
We're looking for a Head of Security to own security end-to-end at our company- from the architecture of our product to the systems our own team runs on.
We handle some of the most sensitive documents our customers have, and our buyers' security teams scrutinize us accordingly.
You'll be our first dedicated security hire and the sole internal authority on the subject: setting the standards our engineers build against, owning our compliance posture, and sitting across the table from customer CISOs to defend it.
This is a hands-on role with real strategic weight - if you want to build a security function from scratch at a company where security is a deal-maker, we want to hear from you.
What You'll Do
Design, architect, and implement security directly into our product and codebase
Own our internal security posture: corporate IT, access management, endpoint, and employee security practices
Lead customer-facing security engagements - pre-sales security reviews, CISO-level discussions, security questionnaires, and enterprise assessments - representing our company's posture to buyers who evaluate us seriously
Own our compliance program end-to-end, including audits, evidence, and vendor risk
Set security standards and best practices across R&D and product as the internal authority on the subject
Build the security review process for how we ship AI features - threat modeling around LLMs, agentic workflows, and customer data boundaries
Partner with DevOps and engineering on cloud security, secure architecture, and incident readiness
Grow the security function as we scale, from process to headcount.

This hands-on, customer-facing role will lead SIEM and SecOps modernization, migration, and delivery engagements across multi-cloud environments, leveraging security platforms and cloud-native services across GCP, AWS, and Azure.

Responsibilities
Lead technical Pre-Sales activities, including discovery sessions, solution design, demos, and PoCs.
Translate customer requirements into practical Cloud Security and SecOps architectures.
Implement, configure, and integrate SIEM, SOAR, and CNAPP platforms.
Onboard data sources from cloud environments, firewalls, endpoints, applications, and other systems.
Build and optimize detection rules, parsers, queries, dashboards, and SOAR playbooks.
Tune alerts to improve accuracy and reduce false positives.
Lead production deployments and migrations from existing platforms.
Troubleshoot implementation issues and collaborate with customers and internal teams throughout the project lifecycle.
Ensure delivered solutions are stable, scalable, and aligned with customer needs.

Our team is looking for a Senior Backend Developer with a passion for solving complex scaling problems with a good understanding of efficient, forward-looking system design. Our desired candidate has a can-do attitude that will inspire and help us build rocket ships. om scratch'

What You'll Do


Shape the Core - Design, build, and scale the companys infrastructure at the heart of our product.
Raise the Bar - Continuously refine system architecture, set high technical standards, and push for engineering excellence.
Collaborate Across the Board - Work hand-in-hand with R&D, product, and other teams to deliver powerful cross-platform features.
Engineer for Scale - Architect and build features that thrive in the AI era.
Be a Force Multiplier - Drive improvements in our development processes, tools, and frameworks, so the whole team can move faster and smarter.

We are looking for highly capable Incident Response Expert. The Incident Response Expert role includes conducting in-depth forensic analysis, investigation and response to real-world cyber threats. A significant part of our investigations is performed onsite at the client location, in collaboration with the clients IT and security teams.
Main Responsibilities:
Participate in forensic and incident response investigations, including large scale sophisticated attacks, conduct log analysis, host and network-based forensics and malware analysis.
Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in clients networks; as well as security assessments and simulations.
Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
Utilize and develop tools and methodologies to improve our existing investigative and hunting technological stack.
Collaborate with IT and Security teams during investigations.
Generate and present a comprehensive and professional report of findings from investigations.

We are looking for talented hackers to join our unique Adversarial Tactics Department. As a Red Team Expert ,you will work with clients to build their resiliency, i.e their capability to prevent and to sustain attacks. You will also be involved in IR engagements with companies that were attacked by adversaries, learn new TTPs and apply those in Red and Purple team engagements.
Your responsibility as a Cyber consultant is to bring the attackers perspective to engagements. You will help design, create and execute Adversary Simulation exercises, and perform attacks against client services, platforms and infrastructure. This will include, among other things, identifying vulnerabilities through simulated external and internal attacks, validating and enhancing an organizations ability to respond and recover from targeted attacks and persistent adversaries.

our company builds the real-time 3D platform that powers games and interactive experiences, along with tools used across ads, automotive, aerospace, architecture, retail, energy, and government. Our Product Security team keeps that platform, and the software built on top of it, safe for millions of creators and their users.
We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems our company itself is building, including agentic tools and AI-assisted development workflows.
You will work directly with engineering teams across the US and EMEA.
What you will do
Lead threat modeling, secure design reviews, and penetration testing for our company products and services, from the engine and editor to cloud services, APIs, and internal platforms.
Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.
Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.
Secure our company's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.
Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.
Investigate and respond to application security incidents, including root cause analysis and durable corrective action.
Contribute to our company's secure development lifecycle and to compliance work.

We are seeking an AI Security Researcher to join Dashs core research team. Youll investigate how AI agents - spanning coding agents, SaaS AI platforms, cloud, and endpoints - can be abused, and design detections that stop threats before they cause impact. Each platform is different, yet they share common risk patterns across prompts, tools, MCP servers, skills, hooks, identity, and data movement. Your mission is to master both: uncovering unique attack surfaces while building universal, session- and intent-aware defenses. This role combines deep platform research, responsible security testing, and close collaboration with engineering to translate findings into production runtime protection. You will help define the field of Agentic Security.
Responsibilities:
Research agentic threats: Prompt injection, tool/plugin/MCP abuse, skill and hook misuse, rogue autonomy, identity misuse, data leakage, adversarial AI, and protocol exploitation across coding agents and enterprise AI platforms.
Develop runtime detections: Design detections for multiple environments (coding agents, SaaS AI, cloud, endpoints), leveraging platform hooks, APIs, telemetry, and native guardrails where available.
Analyze platform complexities: Deep-dive into architectures, permissions, workflows, and agent capabilities (MCP servers, Skills, plugins, extensions) while extracting cross-platform risk patterns.
Build scalable detection logic: Prototype and refine heuristics, signatures, and intent-aware detectors that hold up at enterprise scale with low friction for builders.
Investigate monitoring and enforcement boundaries: Push what platforms allow for visibility and control - hooks, plugins, configuration surfaces, inventory signals, and policy enforcement points.
Prototype PoCs: Validate attack paths end to end, then turn findings into production-ready signatures, heuristics, detectors, and runtime policies.
Collaborate with engineering: Embed research into Dashs detection pipelines, session-aware runtime protection, and policy/governance modules.
Stay ahead of the field: Track adversarial AI and agent security research, continuously evolving Dashs detection and enforcement coverage.

Required Director Application Security
About the Role:
As the Director of Product Security, you will spearhead our efforts to fortify and enhance the security posture of our products and runtime environments and play a critical leadership role in overseeing the design, implementation, and maintenance of security controls for the organizations complex product applications, platform, development and cloud infrastructure.
You will lead a team of security experts and collaborate closely with engineering, product, and other business units to ensure the security and integrity of our applications, platforms, cloud infrastructure, and code stack against current & evolving threats.
Your leadership will be instrumental in embedding security best practices throughout the development and operations pipeline, ensuring a secure and scalable product environment. You will also drive the strategy, development, and implementation of a comprehensive application security program across our cloud-based applications.
Reporting line: VP Security Engineering
What Youll Do:
Strategic Leadership and Team Management:
Strong leadership skills to develop and lead the strategic direction for the Application and Cloud Security teams.
Lead risk assessments, threat modeling, and secure design reviews of cloud platforms to proactively identify vulnerabilities and ensure compliance with security standards.
Oversee the design, implementation, and maintenance of security controls across multi-cloud environments (AWS, GCP, Azure) to protect infrastructure and applications.
Experience in collaborating with cross-functional teams, including engineering, product management, and customer support, to embed security into product development and all aspects of cloud deployments.

we are looking for a Senior Web Security Researcher.
As a Senior Web Security Researcher at Nimble, you will spearhead our efforts in the research domain, driving our cutting-edge data gathering solutions. You will work on complex technical challenges at the intersection of browser internals, reverse engineering, and large-scale data gathering. You will analyze and break down advanced client-side protection mechanisms, dive into large and complex codebases such as Chromium, and develop high-performance, cross-platform capabilities that power our products.
This role is both hands-on and research-driven: youll be expected to investigate hard problems, turn insights into solutions, and help push the boundaries of whats possible in web data gathering.
What Youll be Doing:
Reverse-engineer and analyze advanced bot-detection systems, including JavaScript based mechanisms and API interaction flows.
Analyze and modify large-scale browser codebases that empower our products.
Apply a deep understanding of browser internals and architecture to improve stability, performance, and resistance to anti-automation measures.
Collaborate with researchers and developers to integrate findings into production solutions.
Provide technical guidance and mentorship within the research team.

We are looking for a talented Cloud Security Researcher to join our team in Israel. In this role, you will focus on hands-on research of cloud security risks, analyze misconfigurations, and translate findings into impactful product capabilities.
You will work closely with Research, Engineering, and Product teams to ensure that your research directly contributes to securing cloud environments at scale. This is a highly technical role suited for someone who enjoys deep diving into cloud systems, understanding how things work, and helping build solutions that prevent it.

Own ScaleOps' infrastructure end-to-end - our self-hosted product, its installation and onboarding flows, our SaaS platform, and AI infrastructure
Manage ScaleOps' cloud infrastructure across AWS, GCP, and Azure - networking, security, SSO, and compute
Work closely with customers on deployments and troubleshooting
Collaborate closely with backend, product, and R&D teams to support rapid feature delivery without compromising reliability
Identify and eliminate operational toil through automation and tooling improvements
Maintain security and compliance best practices across the infrastructure stack