לוח משרות דרושים הייטק אבטחת מידע / סייבר ברמת גן

we are seeking a dedicated and experienced Security Product Manager to join our journey to build the best application security solution in the market. The ideal candidate will leverage their extensive security and product management expertise to drive the development and enhancement of our security products. This role requires a strategic thinker with a deep understanding of security needs and market trends, who will work closely with cross-functional teams, from engineering to marketing, to ensure the delivery of high-quality security solutions to our clients.

Responsibilities
What Youll Be Doing

Own OX product definition for our application security capabilities - the core capabilities of the OX product.
Define the capabilities, from understanding the need to the detailed requirement, across each of our application security technologies.
Lead the product lifecycle from concept to launch, ensuring alignment with business objectives and customer needs.
Lead the product requirements definition. Collaborate with engineering, design, marketing, and sales teams to come up with a product that will lead the market.
Engage with customers to identify needs and to follow up on our feature adoption and acceptance.
Gather and analyze user feedback to drive product iterations and enhancements.
Conduct market and competitive analysis to identify opportunities for product innovation and improvement.
Maintain up-to-date knowledge of industry trends, security threats, and regulatory requirements.
Act as the primary point of contact for all product-related inquiries and issues.
Prepare and present product updates, performance metrics, and strategic recommendations to stakeholders.

We are looking for a SecOps Engineer.
The SecOps Engineer plays a critical role in the detection, analysis, and response to cybersecurity threats. This position is responsible for monitoring security systems, managing incidents, improving security tooling, and ensuring that the companys infrastructure and data remain protected from malicious actors.
The Role:
Threat Monitoring and Response
Monitor SIEM and EDR platforms for security events and anomalies.
Perform initial analysis and triage of security alerts to determine severity and impact.
Respond to incidents according to playbooks and escalate as necessary.
Security Tooling and Automation
Maintain and tune detection rules across security tools (SIEM, IDS/IPS, EDR).
Develop and improve scripts and automation to streamline incident response and reporting.
Assist with integration of security tooling with other systems (e.g., ticketing, monitoring).
Incident Management
Investigate security incidents to identify root cause, containment strategies, and remediation plans.
Work with cross-functional teams (IT, DevOps, Engineering) to resolve vulnerabilities or misconfigurations.
Vulnerability Management
Support regular scanning and analysis of vulnerabilities across endpoints, servers, and cloud environments.
Coordinate remediation efforts with infrastructure and application teams.
Documentation and Reporting
Maintain clear and concise documentation of incidents, findings, and improvements.
Generate periodic security metrics and incident reports.
Vendors and Tools
Help research new security tools and techniques to improve companys overall maturity
Assist with reviewing new and existing vendors
Go-To Market
Assist with responding to customer inquiries regarding company security posture / practices.

We are looking for a passionate Software Developer to join our AI & Secure Coding team. This role is ideal for a developer who wants to be at the forefront of innovation, building tools that merge AI capabilities with secure software development practices.
How will you make an impact?
In this role, you will be responsible for:
- Leading AI-driven initiatives by integrating LLMs, prompt engineering, and agent-based architectures into security tools.
- Developing and refining tools that empower developers to write secure code effortlessly.
- Collaborating closely with cross-functional teams to design and implement real-world solutions.
- Contributing to the MCP server and internal tooling.

Were seeking a Security Researcher with deep expertise in low-level Linux internals and eBPF-based detection development.

Your mission: analyze Linux malware and extract behavioral detections that expose attacker activity even in the most ephemeral cloud-native systems.

Team Nautilus, the threat research group, leads cutting-edge investigations into cloud-native threats from exposing stealthy, fileless malware like HeadCrab to building kernel-level defenses for containerized environments. Our work shapes open-source tools, influences cloud provider security, and protects workloads across the Fortune 500.


Core Responsibilities

Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems (Kubernetes, containers, serverless).

Build low-level behavioral detections using eBPF, focused on malware execution, privilege abuse, persistence, and evasion techniques.

Prototype observability and response capabilities at the kernel layer, contributing directly to tools like Tracee.

Analyze Linux malware and extract behavioral detections to inform threat detection logic and strengthen defensive capabilities.

Collaborate with engineering teams to translate research into production-grade detection pipelines and runtime protections.

Specialized Focus Areas:

Design and develop eBPF-based sensors that trace syscall activity, privilege escalation paths, network tampering, and stealthy behaviors.

Track emerging malware families targeting cloud-native infrastructure and extract TTPs from live samples and honeypot environments.

Contribute original research to the community through technical blogs, CVEs, conference presentations, or open-source code contributions.

Are you looking to launch a career in cybersecurity, risk management, or compliance? We are seeking a highly motivated, detail-oriented individual to join our Governance, Risk, and Compliance (GRC) team as a GRC Analyst Intern. In this role, you will gain hands-on experience supporting company-wide compliance initiatives, managing customer and vendor security inquiries, and contributing to key risk and assurance processes.

Responsibilities:

Assist in responding to Requests for Information (RFIs) from customers related to information security and privacy.

Support periodic vendor risk assessments.

Review vendor documentation and supporting evidence to assess security control effectiveness.

Collaborate with internal teams to ensure appropriate security and data protection controls are in place for third-party vendors.

Monitor vendors using our third-party risk management platform and follow up on remediation activities.

Assist with various internal compliance and security-related tasks, as needed.