לוח משרות דרושים הייטק אבטחת מידע / סייבר בפתח תקווה, לחיפוש זה נמצאו 43 משרות

We're hiring a hands-on delivery engineer to take Cortex deployments from initial setup through production rollout and keep them running well afterward. You'll own the technical execution of Cortex projects for our customers: standing up the platform, onboarding data sources and endpoints, tuning detections, and building automation playbooks. Once a deployment goes live, you'll also pick up operational issues for it and for other customers.
Responsibilities:
Configure and deploy Cortex XDR, XSIAM, and XSOAR, translating architecture and design decisions into a working environment
Lead endpoint agent rollout, log source and data onboarding, and integration configuration across a customer's security and IT stack
Tune detection rules and correlation logic to reduce noise and align with each customer's environment and threat profile
Build and maintain XSOAR playbooks that automate response actions and reduce manual triage work
Troubleshoot production issues across the platform: agent health, ingestion failures, integration breakage, playbook errors, and detection gaps
Write clear documentation and runbooks
Escalate to Palo Alto support channels when an issue requires vendor involvement, and manage the case through to resolution
Validate a project's technical scope against the signed SOW before kickoff, and flag gaps or risks early

Seeking a highly motivated Internal Audit Manager to join our global Corporate Internal Audit team, focusing on IT Risks, Processes, Controls, and Enterprise AI Governance. The role involves conducting audits and advisory engagements, developing AI solutions for process review, and assessing risks related to AI and IT systems to support the company's rapid transformation.
Key Responsibilities
Lead technology audit and advisory engagements across various domains, including cybersecurity, infrastructure, applications, data management, IT transformation, and AI-related risks while advising on practical ways to strengthen governance, resilience, and risk management.
Drive governance and oversight of technology programs and emerging AI risks, including model governance, data governance and quality, privacy, security, and responsible AI.
Develop and implement audit methodologies to assess risks across the entire AI lifecycle, including model design, validation, explainability (XAI), bias, and the security posture of Generative and Agentic AI systems-while ensuring compliance with emerging regulations, ethical guidelines, and industry best practices.
Drive the integration of AI risk management into existing technology audit domains by providing expert advice on control design.
Promote innovation within the internal audit function by applying new tools and techniques, such as agentic AI, data analytics, and automation.
Collaborate with cross-functional teams, including Privacy, IT, Engineering, Finance and Infosec, to identify and address audit observations with timely corrective actions.
Lead research on technology risks and controls to formulate recommendations for process improvements and innovation.

Seeking a highly motivated Internal Audit Manager to join our global Corporate Internal Audit team, focusing on IT Risks, Processes, Controls, and Enterprise AI Governance. The role involves conducting audits and advisory engagements, developing AI solutions for process review, and assessing risks related to AI and IT systems to support the company's rapid transformation.
Key Responsibilities:
Lead technology audit and advisory engagements across various domains, including cybersecurity, infrastructure, applications, data management, IT transformation, and AI-related risks while advising on practical ways to strengthen governance, resilience, and risk management.
Drive governance and oversight of technology programs and emerging AI risks, including model governance, data governance and quality, privacy, security, and responsible AI.
Develop and implement audit methodologies to assess risks across the entire AI lifecycle, including model design, validation, explainability (XAI), bias, and the security posture of Generative and Agentic AI systems-while ensuring compliance with emerging regulations, ethical guidelines, and industry best practices.
Drive the integration of AI risk management into existing technology audit domains by providing expert advice on control design.
Promote innovation within the internal audit function by applying new tools and techniques, such as agentic AI, data analytics, and automation.
Collaborate with cross-functional teams, including Privacy, IT, Engineering, Finance and Infosec, to identify and address audit observations with timely corrective actions.
Lead research on technology risks and controls to formulate recommendations for process improvements and innovation.

Were looking for a Security Architect to join our companys Information Security department.
You will work closely with the Product, R&D, DevOps and IT teams and serve as the focal point for identifying and resolving complex security challenges and owning the secure design of internal applications and cloud infrastructure from the ground up.
This is a hands-on Architect position that ensures our company products and work environment adhere to the stringent security.
Responsibilities
Own security architecture reviews for internal applications, new features, and 3rd party integrations
Lead threat modeling sessions with R&D and Product teams throughout the SDLC
Define and maintain security design standards across authentication, authorization, networking, and application layers
Be the go-to expert for cloud security on AWS, including IAM, network segmentation, and workload protection
Embed security gates into existing agile and DevOps workflows without killing velocity
Work closely with DevOps and IT on secure-by-default cloud and corporate environment configurations
Lead risk-based remediation programs across architecture findings
Advise the CISO on evolving threats relevant to our stack and business model
Identify and propose capability improvements across the security architecture .

The Platform Product Management team is looking for a highly driven, experienced, and dynamic Cybersecurity Product Manager, to join our team and help shape the future of ADAS and Autonomous Driving systems.
The team is leading Platform Products and Features Requirements and Execution, E2E, across all teams and across projects.
In this role, you will be involved in defining the product roadmap, and the product release planning, tracking the execution and helping in removing blockers, work with customers outside and inside, to ensure the TTM and quality are met.
What will your job look like?
Serve as a Technical solution architect/product manager for ADAS and Autonomous Vehicle SW features and platforms.
Work closely with the Autonomous vehicle Cybersecurity architects and ensure Cybersecurity is addressed through implementation, Validation to production.
Be a key person in planning and execution of Cybersecurity activities.
Work directly with our customers' Cybersecurity teams on their Cybersecurity requirements and deliverables.
Generate and maintain accurate and up-to-date requirement documentation for both internal and external stakeholders.
Lead and facilitate product and platforms cybersecurity related discussions with clients and technology managers.
Actively help improving processes across different teams.

Our Radar Team develops cutting-edge radar technology for autonomous driving (AV) and advanced driver-assistance systems (ADAS). We are looking for a Cyber Security Architect to lead the design and implementation of robust embedded security solutions that protect our radar systems from cyber threats.
In this role, you will define security architecture for radar hardware, embedded software, and communication interfaces, ensuring compliance with automotive cybersecurity standards and safeguarding our mission-critical sensing technology.
Youll be part of a team shaping the future of autonomous driving. Our radar technology is a critical component in delivering safe, reliable, and intelligent mobility solutions. Youll work on innovative projects in a collaborative environment, with the opportunity to influence security strategy at a global scale.
What will your job look like:
Security Architecture Design - Develop and maintain end-to-end security architecture for radar systems, including hardware, firmware, and software components.
Threat Modeling & Risk Assessment (TARA) - Perform Threat Analysis and Risk Assessment for radar components, software modules, and communication channels; identify vulnerabilities and design mitigation strategies.
Secure Communication - Implement encryption, authentication, and integrity checks for radar data transmission between hardware and software layers.
Secure Software Design - Define and enforce security controls for APIs, middleware, and integration points between radar systems and other vehicle subsystems.
Compliance & Standards - Ensure radar systems meet ISO 21434, UNECE WP.29, and other relevant automotive cybersecurity regulations.
Collaboration with R&D - Work closely with radar engineers, embedded software developers, and system architects to embed security into the design process.
Incident Response Support - Provide architectural guidance during security incidents involving radar systems.
Technology Evaluation - Assess and recommend security tools, frameworks, and methodologies for radar-specific applications.

we are looking for a hands-on Security Operations Engineer to join our IT and Cybersecurity team.

You will take ownership of implementing, configuring, and operating security tools and controls across the organization. The role combines security operations, incident response, technical policy implementation, and compliance support.



Responsibilities
Implement, configure, and maintain security systems and policies.
Monitor and investigate security alerts and coordinate remediation.
Manage endpoint, identity, device, network, and cloud security controls.
Improve security coverage across endpoints, servers, users, and corporate systems.
Manage vulnerabilities and track remediation through completion.
Develop and maintain incident-response procedures and playbooks.
Translate security policies and regulatory requirements into technical controls.
Support security audits, evidence collection, risk assessments, and compliance activities.
Work closely with IT and R&D teams, business stakeholders, security vendors, and external providers.
Maintain security documentation, operational procedures, and management reports.

our company seeks a Senior Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities
Triage and Resolve Bug Bounty Reports
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication
Act as our company's primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.
Lead Advanced Security Work Beyond Triage
Conduct variant hunts to find related instances of reported vulnerabilities before they are discovered externally.
Perform original platform security research to surface issues ahead of external researchers.
Lead major product security incidents on the PSIRT side, coordinating response across teams under pressure.
Run forensic postmortems after significant incidents to determine how the issue reached production, including how design-level flaws bypassed release processes, and confirm that remediations hold.

This is a hands-on architecture role: deep research, secure systems design, and prototyping, applied across product lines with minimal direction and broad latitude to set the technical agenda. You will set platform-wide direction for securing the AI development lifecycle, define the security architecture, agents, and models operating within it, and represent our company's AI security point of view externally. You'll be a technical authority other engineers and other teams look to on emerging AI-specific threats, working in close partnership with the AI security research team - drawing on their findings and feeding real-world attack surfaces back into their agenda.
What you'll do
Own the security strategy and architecture for our Agentic AI ecosystem, LLMs, and models across product lines
Lead threat modeling for the most complex and novel GenAI/agentic surfaces: cross-agent autonomy, multi-agent tool orchestration, and emerging attack classes not yet standardised in the industry
Set the architectural standard for securing model/RAG/data pipelines platform-wide, including access-control and data-boundary models that other teams are expected to build against
Define what "secure-by-design" means for agentic systems at our company, and drive adoption across engineering orgs
Represent our company's AI security posture externally (standards bodies, industry publications, conferences) and internally to executive stakeholders
Mentor and technically guide engineers on AI-specific security work.

We are looking for an Information Security and Cyber Specialist with hands-on experience in information security systems to join the company’s Information Security team. The role includes responsibility for the operation and management of security systems, the investigation of information security incidents, and advanced technological areas within the Information Security Department.

Responsibilities:

* Monitoring, operation, and maintenance of information security systems.
* Handling and analyzing information security incidents at the Tier 2 level.
* Conducting initial and advanced investigations of cyber incidents.
* Working with IT and DevOps teams and external vendors.
* Writing procedures and technical documentation.
* Assisting with regulatory controls, risk assessments, and audits.
* In-depth knowledge of Microsoft 365 and Azure Security systems.
* Experience in managing and implementing EDR/XDR and SIEM systems and endpoint protection solutions.
* In-depth understanding of networking and Windows and Linux operating systems.
* Experience working with firewalls, VPN, NAC, and network security solutions.
* Ability to work independently, learn quickly, and maintain a system-wide perspective.