לוח משרות דרושים הייטק אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 214 משרות

we are looking for a Security Analyst to join our team and help customers strengthen their cloud security posture. In this role, you'll investigate security findings, analyze cloud environments, identify security risks, and provide customers with clear, actionable recommendations.
You'll work closely with Customer Success, Product, and R&D to improve our platform, enhance detection capabilities, and help shape the future of AI-driven cloud security.
If you're passionate about cybersecurity, enjoy solving complex security challenges, and want to make an impact in a fast-growing startup, we'd love to hear from you.

Responsibilities
Investigate security findings, customer environments, and cloud security risks.
Analyze Application Security, API Security, and Product Security vulnerabilities.
Review and tune security detections to improve accuracy and reduce false positives.
Stay up to date with emerging threats, attack techniques, and malware trends.
Respond to customer questions and provide clear, actionable security guidance.
Create concise investigation reports and security recommendations for customers.
Work closely with Customer Success and participate in customer calls when needed.
Collaborate with Product and R&D to improve platform capabilities, investigation workflows, and detection quality.

we are looking for a Security Researcher to join our core R&D team and help build the next generation of cloud runtime protection.
In this role, you'll research vulnerabilities, attack techniques, and emerging threats, turning your findings into real product capabilities through clean, efficient code. You'll work on low-level systems, offensive security research, and help develop the technologies that protect enterprise cloud environments.
If you're passionate about building security products that make a real impact, we'd love to hear from you!

Responsibilities
Research emerging attack techniques, vulnerabilities, and adversary behaviors.
Design and develop new security capabilities to identify sophisticated threats.
Perform reverse engineering and in-depth analysis of malware, exploits, and attack techniques.
Collaborate closely with Product and Engineering teams to translate research into product capabilities.
Build research tools, prototypes, and automation to support security investigations.
Research emerging threats and translate relevant findings into new product capabilities.
Improve detection quality by analyzing false positives, false negatives, and attacker behavior.
Contribute to technical discussions, knowledge sharing, and security best practices across the company.

We're looking for a Technical Account Manager (TAM) to serve as the deep technical partner for our largest and most strategic accounts. You'll be working closely with our dev, product, and support teams, while building strong, trust-based relationships with customers' security engineers and executives alike. This is a hands-on, highly technical role for someone who can go deep into a customer's environment, infrastructure, and tech stack, and who's comfortable both in the weeds with engineers and in the room with executives.

Key Responsibilities

Serve as the primary technical point of contact for our largest and most strategic accounts
Build deep, trust-based relationships with customers by developing a thorough understanding of their workflows, teams, infrastructure, environments, and tech stack
Travel to customer sites to strengthen relationships and support technical initiatives on the ground
Partner closely with the customer's security, platform, and engineering teams to drive adoption and resolve complex technical challenges
Work hand-in-hand with our internal dev, product, and support teams (based in Israel) to advocate for customer needs and drive resolution of technical issues
Provide deep technical guidance on runtime security solution which runs within customers environments.
Communicate effectively across technical and executive stakeholders, translating deep technical detail into business impact for leadership
Proactively identify risks and opportunities within accounts, partnering with Customer Success and Sales on account strategy
Build strong relationships with CISOs, security engineers, and other technical stakeholders within customer organizations

We're looking for a GRC Specialist to own and drive our compliance and authorization programs, with a strong emphasis on FedRAMP and NIST 800-53. This is a hands-on governance, risk, and compliance role for someone who can build and run a federal-grade compliance program from the ground up and manage it through continuous monitoring and reauthorization cycles.

U.S. citizenship is required for this role due to FedRAMP and federal customer requirements.

Key Responsibilities

Own the FedRAMP process end-to-end: System Security Plan (SSP) development and maintenance, POA&M tracking and remediation, control implementation statements, and continuous monitoring (ConMon) deliverables
Serve as primary point of contact for 3PAO assessments, coordinating testing, evidence collection, and finding resolution
Maintain compliance programs across SOC 2 Type II and ISO 27001
Respond to customers security questionnaires, and support sales enablement with SSPs, control narratives, and other security documentation
Partner with engineering, GTM, and leadership to ensure controls are implemented, evidenced, and operating effectively
Monitor changes to FedRAMP requirements, NIST guidance, and federal compliance obligations, and translate them into actionable program updates

As an AI Security Researcher , you will play a key role in shaping the future of modern runtime AI security. You will investigate how real-world attacks unfold across AI-enabled applications, agents, tools, executed in cloud environments, and turn those insights into innovative, production-grade security capabilities across our AI Security Posture Management (AI-SPM) and AI Detection & Response (AI-DR) products.

This role is ideal for a deeply technical researcher who is driven to understand AI attacks at their core - not just identify suspicious prompts or surface-level indicators. You will research how prompt injection, tool misuse, agent drift, model abuse, and other emerging AI attack techniques translate into real runtime behavior and security impact. You will then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work in production.

Specifically, you will:

Research real-world attacks targeting models, agents, MCP/tooling ecosystems, RAG applications, and AI-enabled production systems.
Drive research end-to-end - explore, design, develop, validate, and deploy detection logic and protections based on runtime telemetry, exploit PoCs, technical analysis, and threat intelligence.
Shape AI-SPM capabilities by identifying what telemetry, signals, and modeling are required to continuously discover AI components, classify AI behavior, map risk, and detect unsafe or anomalous usage in production.
Shape AI-DR capabilities by researching how to detect AI-driven attacks, prove runtime impact, establish causality, and distinguish failed attempts from real compromise.
Work closely with engineering and product teams to turn deep technical research into practical security capabilities that deliver clear customer value.

As a Security Researcher , you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities.

This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work.

Specifically, you will:

Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems.
Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs.
Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection.
Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats.
Work closely with engineering and product teams to turn research into practical security capabilities.

As a Security Researcher, you'll own and evolve the core of the platform: the frameworks and logics that turn fragmented, cross-surface identity data into precise, high-signal insight. You'll work directly with real-world data to find emerging attack patterns, reason about privilege and exposure, and convert what you learn into intelligence that tells customers what's actually risky - and what to do about it.
Identity is also the fastest-moving attack surface in the enterprise right now. The explosion of non-human identities and autonomous AI agents is rewriting what "who has access to what" even means, and you'll be at the front of it - defining how discovers, scores, governs and secures these identities before the rest of the market has a vocabulary for the risk.
You'll also shape voice in the field. Through original research, published findings, and technical thought leadership, you'll influence how practitioners and analysts understand identity risk as the perimeter dissolves.

What you will Do:
Drive research end-to-end - from hypothesis and exploration all the way through to the intelligence and logic that ship into the platform and makes impact on our customers.
Translate deep expertise in identity and security into the analytical engine that drives how reasons about risk, governance, and access decisions across organizations.
Create and own knowledge - the content, logic and intelligence behind every insight made, while setting and maintaining the quality, accuracy depth and coverage of the platform.
Pioneer approach at the cutting edge of a category being reinvented - as the identity foundations are rebuilt for a new world
Shape the field's understanding of identity through original research and technical thought leadership, while raising the research bar across the team and delivering top-tier value to our customers.

As a Vulnerability Researcher, you'll build first-principles understanding of the technologies and systems you investigate, then go looking for what's wrong with them: the flawed assumptions baked into established paradigms, the gap between how a system is meant to behave and how it actually behaves, and the novel vulnerabilities and exploitation techniques no one has named yet. This is hands-on, deep technical work - reverse-engineering, breaking, and finding what's exploitable before an attacker does.
What you will Do:

Hunt for what established security paradigms miss: flawed assumptions, gaps between specified and actual behavior, and novel vulnerability classes and exploitation techniques that don't yet have names.

Reverse-engineer and deeply understand systems, protocols, and architectures at the implementation level - developing a precise understanding of how they actually work, rather than what their designers intended.

Develop hypotheses and convert them into working proof-of-concept exploits that demonstrate real-world risk before attackers do.

Own research threads end-to-end, from an early exploration, developing and following hunches all the way through to a proof of concept, responsible disclosure or publication, following the evidence wherever it leads without waiting for a defined playbook.

Ground understanding of exploitability in attacker reality - when research surfaces findings relevant to how the platform models identity attack surface across human and non-human identities, bring that signal in.

Promote standing in the security community through original research, CVEs, and technical thought leadership that advances the field and earns trust on its merits.

we are looking for a Senior Security Analyst to join our research team. In this role, you will help uncover critical security risks in cloud, SaaS, and AI environments, with a strong focus on AI Agents & Non-Human Identity (NHI) Security.

You will own hands-on security research across active customer POCs, conducting deep-dive security research on their environments, identifying vulnerabilities, surfacing real risks, and delivering clear remediation steps. Utilizing cutting-edge platform alongside hands-on manual research, you will translate complex security gaps into high-impact insights and executive reports, helping shape the way organizations secure machine and AI-driven identities at scale.

What We Do
The Frontier of Identity Security: a pioneering startup in the AI Agent & Non-Human Identity (NHI) security space.
Research-Driven Value: Our team focuses on IAM security across cloud, SaaS, and GenAI/AI Agent infrastructures, working hands-on with customer environments.
Customer Journey Partners: Analysts play a critical role in POCs, uncovering misconfigurations and building actionable Security Reports that move deals and guide customers toward a stronger security posture.
Cross-Functional Impact: Youll bridge the gap between technical research and business value, collaborating with Product, Engineering, and Sales to drive product enhancements and help close strategic deals.
Your Responsibilities
Lead Security Research in POCs: Conduct hands-on security analysis of customer environments using platform, manual techniques, and advanced AI tools to optimize your research workflow.
Manual Environment Analysis: Deep-dive into customer architectures using APIs, access keys, and to expose weaknesses in IAM, machine identities, and AI agent permissions.
Deliver Actionable Insights: turn complex findings into high-level, impactful Security Reports that outline significant risks and provide clear, step-by-step remediation guidance.
Drive Product & Sales Excellence: Collaborate with Product and Engineering teams to share insights from the field and help improve the platform.
Partner with Sales teams to review environmental reports and confidently present security findings to customer stakeholders.
Stay Ahead of the Curve: Continuously track emerging risks in cloud security trends, IAM vulnerabilities, and emerging threats related to AI agents and automation.

As an AI researcher, you'll be at the forefront of researching advanced frontier model capabilities and agent behavior, and help shape the future of AI security evaluation and mitigation. In this role, you will advance the frontier knowledge of AI and agentic frameworks, methods of assessing their ability, and mitigations for dangerous capabilities.

Representative projects:

Researching capability elicitation methods to enhance model performance in evaluations.

Researching methodologies to assess generalization and coverage in model capabilities evaluation frameworks.

Contributing to academic publications and delivering research findings to customers.

Creating unique solutions to mitigate scenarios of AI loss of control or misalignment.

Advising and supporting the development of the products were building.

As a cyber researcher , you will be at the forefront of research on AI security. You will engage with questions such as how to protect the weights of an advanced model against cyber threats, and how to evaluate cyber capabilities such as AIs ability to exploit vulnerabilities, carry out network attacks, and develop malware. This role sits at a unique intersection of cybersecurity expertise and AI capabilities, where your background in vulnerability and security research will help shape the future of AI security.

As a research engineer , you'll be at the forefront of building systems to evaluate and secure frontier AI models. You'll work on infrastructure and experiments to assess model capabilities, implement agent frameworks, and develop mitigations for advanced AI systems. Your role will involve creating robust evaluation pipelines, developing security-focused testing frameworks, and building tools that help understand and mitigate risks related to frontier models. Youll have a chance to understand the research context and your codes impact and contribute as a meaningful part of a growing team.

Representative projects:

Building a tool to continuously evaluate models and mitigate their risks. From designing the APIs for frontier labs, to building analysis and visualization tools that summarize 10,000+ transcripts into specific conclusions.

Designing and building challenges that measure a models ability to evade discovery, allowing us to see if models can operate on remote systems while avoiding detection by common defensive security tools.

Developing controlled environment frameworks for more secure use of frontier models.

Designing and building agents that improve a models ability to complete complex tasks. Includes many potential avenues, such as incorporating SOTA prompting practices, creating tools for task delegation, and more.

Publishing your research and/or delivering research to our customers.

Were looking for a Security Engineer to help architect and scale security foundations as we grow, working closely with our CISO to execute the security roadmap. This is a high-impact, hands-on, role designing security from the ground up across cloud infrastructure, identity, application security, monitoring, and internal security operations. Youll partner with exceptional engineers and security researchers and help shape long-term security strategy

Representative Responsibilities:

Build, deploy and own security infrastructure and internal security operations

Design and maintain security controls across cloud infrastructure, SaaS applications, and internal systems

Partner closely with Engineering to improve security across platforms, infrastructure, and development workflows

Develop and improve security monitoring, alerting, vulnerability management, and incident response processes

Manage identity and access systems and access control policies

Manage endpoint MDM (Mobile Device Management) and laptop devices.

Lead security and compliance initiatives such as SOC2, ISO27001, or similar frameworks

Establish and maintain company-wide security policies, standards, and best practices

Evaluate, implement, and manage security technologies and tooling

Serve as the security subject matter expert across the company

Help drive a strong security culture across teams

Required Head Of Security - Base44
Job Description
As Head of Security for Base44, you'll lead and implement security strategies, ensuring robust protection for our products, clients, and internal systems. With a dotted-line to the CISO, you'll serve as Base44's primary security authority while ensuring full alignment with our corporate security standards, policies, and enterprise-grade compliance requirements.
In your day-to-day, you will:
Design, architect, and implement security features directly into our product codebase
leading pre-sales security engagements meetings, executive security discussions, CISO-level reviews, and vendor security assessments while representing the company's security posture.
Set standards and best practices across R&D and product teams as the sole internal authority for security
Work closely with CISO and the broader Security departments to align Base44's security posture with corporate policies, compliance frameworks, and enterprise requirements.

we are looking for a Security Architect.
Providing an identity security platform to some of the most sensitive organizations in the world, product security is key in Security. As a Product Security Architect, you will be responsible for designing, shaping, and evolving the security architecture of all of our SaaS services. Youll be focused on proactively reducing security risks by performing architectural reviews, providing guidance and governance for security programs, owning application security training all through close collaboration with development and DevOps teams.
What youll do:
Security Architecture & Design
Security Reviews and Threat Modeling
Application Security Training
SDLC Security
Establish and provide guidance around application security and DevSecOps security programs