לוח משרות דרושים הייטק אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 192 משרות

The Senior Product Manager will play a key role in the product life cycle with an emphasis on customer requirements, as well as generating and defining the product vision. The Senior Product Manager will work closely with multiple departments, including product management, engineering, UX/UI, sales, customer support, finance, and marketing, to ensure customer requirements are met.

This is an exciting opportunity to join a fast-growing, innovative company, be part of a strong team, and lead a product that solves a high-profile problem in the Cloud Security space. You will be joining the companys product team and leading a significant domain.


Your Opportunity:
Own and lead the vision, strategy, and execution for the Cloud Threat Detection domain, driving end-to-end product development of threat detections and stories, AI risk assessment, eBPF agent, container runtime protection and more. to help customers reduce risk and achieve continuous cloud compliance

Engage directly with customers and prospects to gather insights, validate assumptions, and ensure product decisions align with real-world security challenges.

Collaborate cross-functionally with engineering, design, and research teams to deliver high-impact features and platform capabilities

Drive both inbound and outbound product efforts

Define product strategy and roadmap

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.



While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.

Key Responsibilities

Application Security & Secure Engineering

Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security

Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance

DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.

We are seeking an experienced Incident Response Global Manager based in Israel to lead and coordinate cyber incident response operations across multiple regions.
This role is responsible for managing high-impact security incidents, overseeing global IR delivery, and ensuring seamless collaboration across a follow-the-sun model. The ideal candidate will combine strong technical expertise with leadership and stakeholder management skills.
Major Responsibilities
Lead and manage end-to-end incident response engagements for global clients
Coordinate cross-regional IR teams to ensure 24/7 coverage and effective escalation
Act as the primary point of contact for customers during critical incidents
Oversee incident investigations, containment, eradication, and recovery efforts
Develop and refine IR processes, playbooks, and best practices
Support proactive services such as readiness assessments and tabletop exercises
Provide executive-level reporting and post-incident analysis
Mentor and develop IR team members across regions.

The Exposure Management Research Group at our company Software Technologies is expanding. We are looking for an experienced Offensive Security Researcher to join our newly formed AEV Team and lead the offensive side of our Agentic Exposure Validation (AEV) research.
About the group
The Exposure Management Research Group is the research arm behind our company's Exposure Management platform. The platform helps organizations see and reduce their risk from the outside in, across their external attack surface, threat intelligence, and digital risk. The group brings together vulnerability researchers, threat intelligence analysts, phishing researchers, and data scientists. Together, we track threat actors and campaigns, analyze vulnerabilities and active exploitation, and turn that research into detections, intelligence, and validation capabilities that serve thousands of customers worldwide. Our work relies heavily on data science, machine learning, and agentic AI to operate at scale.
About the position
Exposure validation goes beyond identifying that a vulnerability exists. Its purpose is to show whether an attacker could actually exploit that vulnerability, and how far they could get. In this position, you are responsible for bringing real offensive expertise into our AEV capability, which runs on an agentic AI system that validates exposures across our customers' environments.
You conduct hands-on offensive research, define the exploitation methodologies the system follows, and set the standard for what a validated, customer-ready finding looks like. You also work closely with our threat intelligence and detection teams, so that proven attack paths turn into protections for our customers.
This is a research position with direct product impact. It combines practical red team work with shaping how an AI-driven platform conducts, reasons about, and reports offensive activity.
What you'll do
Design and run offensive research against external attack surfaces: web applications, APIs, cloud-exposed services, identity, and edge infrastructure
Turn single findings into demonstrated impact through exploit chaining, lateral movement, and blast-radius analysis
Write and maintain the exploitation methodologies and attack hypotheses our agentic AEV engine runs on
Review agent runs and findings. Separate proven impact from claimed impact, and turn the gaps you find into better prompts, methods, and guardrails
Set the bar for customer-ready findings: a clear impact story, a reproducible chain, and remediation guidance a security team can act on
Work with threat intelligence researchers to turn in-the-wild attacker behavior (named actors, active campaigns, newly exploited vulnerabilities) into validation plays
Help close the purple loop by turning proven attack paths into detection and protection logic, and working with detection engineering on coverage
Contribute to the team's research output, including internal knowledge sharing and, where it fits, external publications and talks.

We're looking for a Security Operations (SecOps) specialist to take ownership of our security infrastructure and operations as we scale. In this hands-on, high-impact role, youll play a crucial role in managing the infrastructure, services and service providers that help keep secure from outside attacks and insider threats, along with managing our information compliance programs.
Responsibilities:
Support and lead our security programs, both internal and with 3rd party vendors.
Lead incident response simulations and continuous vulnerability remediation efforts, optimizing our observability and alerting frameworks.
Support the design and maintenance of resilient, scalable cloud infrastructure, ensuring security is baked into the foundation.
Work closely with company leadership to ensure adoption of security best practices.
Work closely with R&D teams to help them shift security testing left into the early phases of development.
Monitor, detect, and respond to security alerts and infrastructure anomalies, optimizing our logging, tracing, and alerting frameworks.
Conduct regular reviews of security tools and infrastructure such as endpoint security, malware detection, firewall logs, and the like.
Collaborate with our CISO to implement and automate controls supporting fintech/insurtech compliance and data privacy standards (PII protection, SOC2).

We are looking for a security programmer to help us build the next generation AI container network security system.
This role sits at the intersection of systems programming, network security, and cloud-native infrastructure.
What You'll Do
Help design and implement traffic inspection and prevention components that run in-line within Kubernetes clusters (as a DaemonSet, sidecar, or CNI-integrated component)
Build or contribute to protocol parsers and signature/rule-matching engines
Contribute to an AI-assisted signature generation pipeline
Work with the Linux networking stack to intercept and act on traffic with acceptable latency overhead
Help ensure the data path is efficient enough to run under the resource budgets typical of Kubernetes workloads
Collaborate with detection research and cloud security teams to translate threat intelligence into enforceable rules and behaviors.

We are looking for a Malware Group Manager to lead our endpoint protection and file security teams.
Someone with a passion for stopping malware where it lands, whether it comes through an email, or from the web, and for building the protections that keep our customers safe. Someone who wants to shape research and detection strategy across multiple teams, understand how attackers operate, and stay ahead of fast-moving threats, including zero-day attacks.
Our teams work across a rich stack: endpoint protection engines, file analysis and sandboxing, reverse engineering, and big data pipelines that turn raw telemetry into actionable threat intelligence and protections.
In this position you will lead several teams, set the technical and research, and make sure we deliver detection that works at scale.
Key Responsibilities
Lead and grow multiple teams and across endpoint protection and file security, and own the group's roadmap
Drive the group's AI transformation - bring GenAI and machine learning into how we research threats, build detection, and speed up our work
Set research and detection strategy, and align it with product and business goals
Drive endpoint and file protection capabilities that stop known and zero-day threats
Build a strong engineering and research culture and develop the next generation of leaders on your teams, and tooling to support them.

We are looking for a Project Manager to be responsible for:
Manage development projects across the Workforce AI Security area - endpoint clients, browser extension, cloud services, and AI/agentic security capabilities
Be part of an R&D group targeting competitive and successful products in one of the fastest-moving security markets
Manage the project full cycle - from ideas through requirements, high-level plan, design, execution and alpha, ending in a release
Own the content, focusing on addressing real customer needs and emerging AI threats
Own the quality by leading the interactions with QA
Lead the project plan, drive its productive execution and address challenges as they arise
Manage interactions with external parties within the projects - other R&D areas, security research, product management, and customer-facing teams
Manage the development processes across the area
Work directly with POC and design-partner customers, turn their feedback into product direction, and help shape where the platform goes next
Track the AI security landscape - new AI applications, agent platforms, and attack techniques - and translate it into concrete project scope.

we are looking for a team leader for the Advanced Threat Intelligence team. To investigate top-tier intrusions and nation-state attacks.
The Threat Intelligence group, key member of our company Research, leads the threat research, engages with customers, improves threat coverage and develops novel detection technologies.
Our research makes an impact! The team works closely with product development teams, customers, research partners, law enforcement and the media to make a difference.
Working with us will allow you access to data sources and visibility to the most advanced nation-state attacks. We are looking for people who are creative, proactive, team players and independent.
Major Responsibilities
Managing a team of technological researchers and building a vision for the team
Responsibility on gathering Intelligence on cyber and malware campaigns in the wild
Conducting research and analysis of APT attacks
Producing information that is introduced into our company Threat Cloud and leads to detection of additional malware campaigns
Analyzing data from various sources, including OSINT, security logs, honeypot and others
Creating opportunities for engagement with customers, partners and law enforcement organizations
Developing content for external publications and industry conferences.

The Threat Landscape Operations team is a key part of our company Research. It is responsible for conducting threat research and developing some of our companys major research assets.
The team focuses on analyzing and tracking cybercrime, developments in AI, hacktivist activity, and emerging adversary trends. Its research supports strategic and operational intelligence, thought leadership, and the development of advanced security technologies.
Working with us will give you access to unique data sources and visibility into some of the worlds most advanced cyberattacks. You will lead exciting research projects for public release, customers, and internal stakeholders.
We are looking for an experienced, proactive, and independent team leader who can lead dynamic, in-depth research and shape the teams long-term vision.
Major Responsibilities
Lead a team of experienced Dark Web and OSINT researchers and define the teams vision, priorities, and research strategy.
Develop innovative research content for external publication.
Own major research projects and assets, including the Annual Security Report and Annual AI Security Report.
Gather and analyze intelligence on cyberattacks to build a comprehensive picture of the threat landscape for internal stakeholders and public reporting.
Build, maintain, and continuously evaluate a diverse set of reliable intelligence sources.
Identify emerging trends, malware, threat actors, and significant intelligence developments at an early stage.
Collaborate with researchers and internal stakeholders to contextualize findings and improve threat coverage.
Maintain high analytical and research standards, including rigorous sourcing, attribution, and methodology.

our company Infinity External Risk Management, otherwise known as Cyberint, continuously reduces external cyber risk by managing and mitigating an array of external cyber security threats with one unified solution.
We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers.
Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams.

our company Infinity External Risk Management, otherwise known as Cyberint, continuously reduces external cyber risk by managing and mitigating an array of external cyber security threats with one unified solution.
We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers.
Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams.

At our company, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
This is where innovation meets real-world impact. Youll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
Were proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
What really sets our company apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
If youre excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.
Key Responsibilities
We are looking for an experienced malware researcher to lead our Endpoint Research & Protection team , someone with a passion for investigating cyber threats across every stage of the infection chain and a desire to understand real-world attacks.
In this position, you will use your expertise in malware analysis, Windows internals, and threat hunting to analyze and create threat detections based on data from our company's various products.
Responsibilities
Lead a team of malware researchers
Respond to high-profile attacks, understand them, and create relevant protections
Release protections for our customers and monitor detections
Investigate our broad sensor data to find leads and interesting cases of targeted attacks and campaigns
Automate daily processes to increase the team's efficiency
Run deep investigations into our company products and lead enhancements in security and UX
Present your work in different forums, including to stakeholders and strategic customers and at security conferences
Publish marketing and technical blogs about the team's interesting findings.