לוח משרות דרושים מומחה מתודולוגיות הגנת סייבר

We are looking for a talented Application Security and Secure-SDLC Expert to be a part of our team. As an Application Security Expert, you will take an active role in security development lifecycle activities and penetration testing that will help evaluate our customers security level and improve it. A typical job could be breaking into a critical system of a Fortune 500 organization, analyzing the Secure-SDLC security gaps in a large department in a huge enterprise, and reverse engineering an application and encryption method in order to gain access to sensitive data.
Responsibilities:
Manage, evaluate, and improve the application security development lifecycle of our clients.
Identify, communicate, and drive the resolution of vulnerabilities.
Research and advocate for new application security solutions and technologies.
Continue to drive security evaluation earlier in the cycles through iterative security testing.
Operate as an incident responder for triage pertaining to web-based vulnerabilities.
Ensure customers security by hands-on penetration testing, hypothesizing threats, helping development teams remediate risks upfront, and executing secure implementation efforts.
Improve secure coding practices, application security requirements, automation, training, and metrics.

Our company needs a Cyber ​​security expert.

We are looking for a GRC Specialist team player to join our Security team. Location: Tel Aviv
You will lead GRC processes, perform internal audits and work with external auditors. You will represent our security posture in front of customers in RFIs and due diligence calls.
In this position you will: *Perform internal security audits and reviews, measuring the companys security posture and effectiveness of controls. *Work with the security team to assess the compliance gaps risk assessment and monitor remediation process. *Create and maintain security policies and procedures. *Prepare the company for external security audits and manage the external audits from the company side. *Answer customer questions and RFIs. *Perform security audits on vendors and contractors. *Responsible for managing our GRC Quantification tool. *Responsible for the security awareness training for employees, conducting company-facing training sessions, enrichment activities and performing dedicated sessions for specific departments and security drills.

XM Cyber is a leading hybrid cloud security company that’s changing the way organizations approach cyber risk. XM Cyber transforms exposure management by demonstrating how attackers leverage and combine misconfigurations, vulnerabilities, identity exposures, and more, across cloud and on-prem environments to compromise critical assets. With XM Cyber, you can see all the ways attackers might go, and all the best ways to stop them, pinpointing where to remediate exposures with a fraction of the effort. We are seeking a customer-facing Exposure Analyst to join our managed services team. As a Customer-Facing Security Analyst, you will play a critical role in delivering top-notch exposure remediation services to our clients and prospects. You will work closely with customers to assess, analyze, and mitigate exposures in their IT and cloud infrastructure, while providing expert guidance and maintaining strong client relationships. Responsibilities:
* Serve as the primary point of contact for our customers, establishing and maintaining strong relationships built on trust and exceptional customer service
* Conduct thorough assessments of customers' IT and cloud infrastructure to identify exposures, vulnerabilities, and potential security risks
* Configure, implement, and utilize XM Cyber platform to identify and prioritize exposures effectively
* Collaborate with cross-functional teams, including IT operations & devops teams to ensure timely and effective exposure remediation actions.
* Proactively monitor and track remediation progress, providing cadence updates and status reports to customers and addressing any concerns or questions
* Stay updated with the latest exposure management tools, techniques, and industry trends, and provide relevant recommendations to customers to strengthen their security posture