לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 411 משרות

We seek an experienced offensive security leader to build and lead the Product Red Team. This newly established function emulates real-world attacks against synthetic customer instances to identify vulnerabilities, misconfigurations, and design gaps before external threat actors or researchers discover them.
This role requires an operator who has led offensive security operations in high-consequence environments-covert intelligence or military settings preferred-with proven ability to establish operational standards, navigate ambiguous mission parameters, and influence cross-functional stakeholders around complex security trade-offs.
You will build upon this team's charter, engagement frameworks, and rules of engagement with other teams. You will help drive our product security and response posture through adversary emulation, vulnerability research, exploit development, and collaboration with other offensive and defensive teams.
Key Responsibilities:
Establish Operations Objectives, Policies & Procedures:
Own Product Red Team's operation objectives and engagement selection criteria in alignment with product security roadmap and risk register, CISO directives, and company priorities.
Expand upon rules of engagement, threat actor emulation standards, testing policies, and protocols.
Establish operational security procedures for covert operations, detection evasion, and incident response protocols.
Create escalation procedures and approval frameworks for high-risk engagements.
Own campaign selection processes, engagement proposal templates, and findings documentation and readout standards.
Define Engagement Framework & Success Metrics:
Design and implement engagement types: vulnerability risk assessment, product security assessments, and ongoing adversarial campaigns.
Establish and report on technical and operational success metrics: kill chain coverage, remediation velocity, and detection engineering insights.
Create reporting templates-technical findings, executive briefings, engineering recommendations-that drive actionable remediation.
Define boundaries and operational testing windows in coordination with product engineering and detection engineering teams.
Lead Offensive Operations Team:
Build team capability across threat actor emulation, exploit development, persistence mechanisms, supply chain security, and AI-specific attack vectors (prompt injection, model manipulation, data poisoning).
Mentor team on operational security tradecraft, documentation discipline, and risk management under ambiguous conditions.
Support team members in their time zones, spanning from US West Coast to India.

We seek a Senior Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities:
Triage and Resolve Bug Bounty Reports:
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication:
Act as our primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards:
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.

We are looking for a Staff Security Engineer to be a core contributor on this team.
Security R&D operates in two complementary modes: open contribution to product engineering - writing code alongside product teams where security expertise adds value - and developing its own security capabilities, including internal tooling, externally facing product features, AI-powered security automation, and third-party integrations.
This is a new team being stood up in Petah Tikva, Israel, co-located with our AI Security Research team. You will help shape the teams engineering practices and technical foundation from day one.
This role reports to the Sr. Engineering Manager, Security R&D.
What You Will Do
Build Security Capabilities:
Design and develop security tooling, automation, and platform services that operate at our enterprise scale.
Contribute code directly into our viceNow product engineering codebases, embedding security capabilities where they have the highest impact.
Build AI-powered security automation by integrating in-house models and third-party services into production workflows.
Leverage our platform - Agent Framework runtime, ACL enforcement, data layer, and workflow engine - to create security capabilities that external vendors cannot match.

As a Mobile Threat Analyst at our company, you will use your internet-fluency, online resourcefulness, broad areas of interest, technical skills, AI-driven methodologies, and hacker-like thinking to solve puzzles and lawfully access difficult-to-come-by open-source data from the deep web. Responsibilities include:
*  data mining and advanced analysis - conducting high-level Open Source Intelligence
* Collaboration with technical teams
* Analyzing malicious activities online, getting to their sources & distribution methods
* Analyzing large, complex datasets using statistical, scripting, and AI-based techniques.
* Researching new online platforms to discover methods for automating data collection.
* Monitoring third-party websites, forums, messaging app channels, dark web communities, and emerging platforms to uncover malicious activities.
* Translating analytical findings into actionable recommendations for detection systems and enforcement strategies.
* Generate intelligence reports often regarding highly technical concepts and TTPs.

As a Security Data Analyst within our R&D team, you will shape how we understand data, uncover trends, and drive strategic decisions across . Working closely with cross-functional teams, you will turn complex datasets into actionable insights that directly influence our business growth and product direction.

Your Chain of Impact:

Identify, analyze, and interpret trends or patterns in complex datasets to uncover actionable insights.
Develop scalable data processes and infrastructure to support internal stakeholders.
Build and maintain dashboards, reports, and KPIs to monitor and improve company performance.
Translate business questions into analytical models and craft compelling data visualizations that tell the story.
Partner with cross-functional teams to understand business needs and design data-driven solutions.

As a Security Researcher, you will be responsible for leading in-depth research into emerging blockchain threats and vulnerabilities and developing real-time detection and mitigation capabilities in close collaboration with our engineering and product teams.

Key Responsibilities

Conduct in-depth security research on blockchain protocols, smart contracts, and decentralized applications.
Identify and analyze security vulnerabilities, exploits, and attack vectors in Web3 protocols.
Collaborate with the engineering team to integrate detection capabilities into our on-chain exploit detection system.
Create proof-of-concept (PoC) exploits and simulations to help test and validate threat scenarios.
Stay current with emerging threats, new technologies, and industry best practices in information security..

We are seeking an experienced Researcher to join our team dedicated to Android malware research. This role presents an exciting opportunity to conduct comprehensive malware analysis, detect emerging threats, and contribute to our understanding of the Android threat landscape.
The ideal candidate demonstrates a positive, proactive attitude and excels as a reliable team player with strong technical skills in Android malware analysis.
Key Responsibilities:
Conduct in-depth Android malware research and reverse engineering
Detect and document emerging Android malware trends and attack vectors
Analyze Android applications for malicious behavior
Write detection rules and develop automation processes for Android malware identification
Collaborate with team members and share knowledge across departments
Perform static and dynamic analysis of Android malware samples
Document findings and contribute to threat intelligence reports.

We are looking for an Android Security Research Team Leader to manage a team of super-talented malware researchers and reverse engineers. Our teams help top-level companies improve their security mechanisms using our insights on the latest malware trends, adversarial shifts, and new techniques. Combining intelligence, sophisticated forensics, and data science helps us catch the most relevant and up-to-date threats and threat actors.
What will you do?
Lead and mentor a team of security researchers across multiple projects
Own long-term malware and security research of a variety of Android frameworks, technologies, and domains
Detect large-scale malware campaigns and help bring their operations down
Review and enhance your team's research reports and code
Collaborate with other teams throughout the organization
This role is a management position with 40% hands-on technical work
Find the bad guys - take them down.

We are seeking a highly motivated and technically proficient Senior Penetration Tester to join our security research division. This role is dedicated to performing advanced offensive security assessments against the biggest companies in the world
You need to be independent, attentive to details, organized, eager to learn new things, and like to research and solve problems
What youll do:
Lead and execute comprehensive, technically rigorous penetration tests targeting complex web applications, modern API architectures, and enterprise systems for organizations with significant global presence.
Engage in sophisticated Red Team projects, including the identification of undisclosed API endpoints, development of novel bypass techniques for established security controls, and lateral movement within target environments.
Contribute substantively to the design, development, and maintenance of proprietary internal security tools and automation frameworks to enhance the efficacy and efficiency of offensive operations.