לוח משרות דרושים, לחיפוש זה נמצאו 2,484 משרות

Requirements:
Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum of 7 years of experience in application security, with at least 3 years in a leadership role.
Proven experience in implementing and managing SSDLC frameworks.
In-depth knowledge of security frameworks and methodologies.
Strong understanding of threat modeling methodologies, secure coding practices and common vulnerabilities (e.g., OWASP Top Ten).
Proficiency in programming languages such as Java, Python, C#, or similar.
Experience in implementing security tools and technologies such as ASPM, SAST, DAST in complex and high-scale environment.
Excellent communication and leadership skills, with the ability and passion to drive change across the organization.
Relevant certifications such as CISSP, CISM, or CSSLP are desirable.
Proven experience in a similar role at another leading software development company.

Requirements:
4+ years in security research, including cloud, web, or API security.
Experience in detection engineering and building or working with detection-driven security products.
Strong coding and data analytics skills in scripting and programming languages such as Python, JavaScript and bash, and proficiency with SQL-like queries.
Solid grasp of security principles, cloud security, and runtime defense.
Curiosity, creativity, and a self-driven approach to research.
Experience tinkering with LLMs and AI security - a strong plus.

Requirements:
5-7 Years of AppSec Experience-Must!
Broad Security Horizon: A deep understanding of the modern security landscape, including Identity (OIDC, OAuth, IAM), Supply Chain security, and Cloud-native architectures-Must
Technical Versatility: Strong code review skills and proficiency in at least one major language (Python, TypeScript, etc.). You should be comfortable navigating complex microservices and CI/CD pipelines (GitHub Actions, ArgoCD)-Must
Adversarial Intuition: You have a hacker heart-experience in pentesting or security research helps you anticipate risks before they manifest.
Strategic Communication: You can translate complex security concepts into a roadmap that engineers and stakeholders actually want to follow.
Youre a Great Fit If
You see a manual task and immediately think about how to automate it with a script or an LLM.
You enjoy the challenge of securing industry-novel risks that dont have a best practice handbook yet.
You value simplicity in design and believe that security should be a developer enabler, not a blocker.
You thrive in fast-paced environments where status quo is a dirty word.

Requirements:
2+ years of specialized experience in the following domains:

Cyber Threat Intelligence

Digital Risk Monitoring

Third-party Risk Management

Requirements:
BSc in Software Engineering\Computer Science or related fields.
3+ years of experience in information security, network security, incident response or similar role.
Deep technical understanding of network fundamentals and common internet protocol.
Comprehensive understanding of system and security controls in operating system.
Familiarity with cloud services, firewalls, threat detection.
Advantages
Certification such as CISSP, CCNA, CISO, CISA.

Requirements:
Minimum of 3 years of experience in GRC, and information security.
Strong knowledge of regulatory requirements and industry standards (e.g., GDPR, ISO 27001).
Experience in responding to customer due diligence requests.
Experience in conducting security audits such as SOC 2 and ISO 27000 family.
Experienced with leading GRC platforms, covering third-party risk management, audit management, and security awareness programs.
Excellent analytical, attention to detail, problem-solving, and communication skills.
We are looking for a passionate candidate who can work independently and collaboratively as part of a team in a fast-paced environment.
Relevant certifications such as CISSP, CISM, or CRISC are preferred.
Highly advantageous experience with:
ISO 42001 compliance, including implementation, documentation, and audit coordination.
Payment Card Industry (PCI) standards.
Business Continuity Management.
Developing GRC platform automations, integrations, and workflows.

Requirements:
Required Qualifications
At least one year of management experience.
At least 5 years of security research experience.
At least 3 years of Linux security research experience.
At least 3 years of experience in Linux internals (both user and kernel) and research.
At least 3 years of experience with reverse engineering (both static and dynamic) as well as assembly.
At least 2 years of programming experience in C/C++/Rust.
Experience with leading projects, working with other teams, and meeting high-quality standards and deadlines.
High research and coding standards and ability to think ahead of possible pitfalls and issues.
Hands-on approach
Passion for working with people: recruiting, leading, mentoring, and helping them grow.
Excellent communication skills with the ability to present research results, processes, and ideas clearly and concisely.
The ability to work under pressure with strict deadlines and to prioritize projects.
Ability to take initiative and work under pressure.
Strong attention to detail.
A 'play-to-win' attitude.
Preferred Qualifications
Experience with writing eBPF applications.
Experience finding your own vulnerabilities and figuring out how to exploit them.

Requirements:
Excellent communication skills for client interactions and teamwork.
Proactive approach to problem-solving, with the ability to prioritize issues effectively and manage multiple client environments.

Requirements:
10+ years in cybersecurity, with significant incident response management experience.
Proven experience leading large-scale, cross-company cyber incidents, including incidents involving:
Multiple engineering and operational teams
Executive leadership and board-level visibility
Demonstrated experience acting as Incident Commander or equivalent role during major security events for at least 15 incidents in the past 5 years.
Strong understanding of:
Cloud and SaaS architectures
Identity, access control, and infrastructure security
Detection and response technologies (SIEM, EDR, cloud-native tools)
Offensive background
Ability to translate technical facts into business impact and risk-based decisions.
Critical Skills & Attributes
Crisis leadership: Calm, decisive, and structured under extreme pressure.
Authority without ego: Able to lead across departments without formal reporting lines.
Executive communication: Clear, concise, and credible with senior leadership.
Systems thinker: Understands how technical, human, and process failures compound during incidents.
Bias for action: Moves quickly while maintaining discipline and documentation.
Analytical thinking: Attention to details and ability to connect multiple dots into a concise and accurate picture.
Previous experience at Mandiant, Sygnia, CrowdStrike, Unit 42, or similar elite IR teams
Experience in crypto, fintech, custody, payments, or highly regulated environments
Hands-on background in forensics, threat hunting, or security engineering
Nice to Have
Experience in crypto, fintech, cloud infrastructure, or highly regulated environments
Experience supporting regulatory notifications and post-incident audits
Background in forensics, threat intelligence, or security engineering
Familiarity with NIST, ISO 27035, or similar incident response frameworks (practical application, not

Requirements:
2+ years of managerial experience as a team leader and/or tech lead
At least 2 years of experience in incident response, SOC operations, or a related cybersecurity role
Strong knowledge of networking fundamentals and the MITRE ATTACK framework
Experienced in working across multiple interfaces, coordinating effectively between teams and stakeholders to ensure seamless execution
Programing/scripting experience in one or more languages, e.g., Python, Go, Ruby, Bash, PowerShell or Java
Experience with Big Data analysis platforms and security monitoring tools for log analysis and investigation
Practical experience with OSINT (Open-Source Intelligence) tools and methodologies for threat hunting, attribution or intelligence gathering
It would be great if you also have:
Experience responding to incidents in large-scale or complex environments
Hands-on experience with cloud-based infrastructure
Prior work in operational security or a related discipline.

Requirements:
1+ years of hands-on experience in AppSec or penetration testing, including proficiency with enterprise tools like Burp Suite, OWASP ZAP, or Acunetix.
Solid knowledge of networking concepts, the OSI model, and cloud infrastructure (AWS, Azure, or GCP).
Hands-on experience with Linux, Windows, Docker, Kubernetes, and a strong command of web protocols (HTTP/S, REST, GraphQL) and auth mechanisms (OAuth, SAML).
Proficiency in scripting languages such as Python, Bash, or Go to automate security tasks and interact directly with the codebase.
An analytical mindset with the ability to diagnose complex logs and scans to distinguish between tool failures, configuration issues, and valid security findings.
Self-motivated with the ability to work collaboratively and communicate high-stakes security concepts effectively across teams.
BONUS POINTS
Knowledge of AI/ML and how LLMs or reinforcement learning agents operate within a cybersecurity context.
SaaS and cloud experience with familiarity in AWS, Azure, or GCP environments and modern cloud-native architectures.
A red teaming background with experience in simulated adversarial attacks and bypassing standard WAF or security controls.

Requirements:
Vulnerability research and exploit development experience
Strong analytical and problem-solving skills
Knowledge of programming languages: Assembly, C and Python
Experience with reverse engineering tool
It would be great if you also have:
B.Sc. in Computer Science or equivalent
Relevant military experience
Knowledge of mobile devices internals/Linux kernel/Win internals.

Requirements:
Technical Expertise:
5+ years of hands-on experience in development of offensive attack components.
3+ years of Python experience, especially for integrating with native modules and supporting research workflows.
Experience developing stealthy and evasive attack components, including in-memory execution and user/kernel-mode tooling.
Familiarity with EDR evasion, API hooking, and direct system call manipulation.

Personal Attributes:
Passionate about offensive security and deep technical research.
Passionate about AI coding agents.
Self-motivated and capable of operating independently in high-trust environments.
Creative and methodical in problem solving, with a strong attention to detail.

Even BETTER if you have:
Deep knowledge of Windows/Linux APIs, security controls, and undocumented behaviors relevant to offensive security.
Experience with MITRE ATT&CK and implementing or simulating ATT&CK techniques.
Background in red teaming, adversary emulation, or APT simulation.
Prior contributions to offensive tooling or internal R&D platforms.
Understanding of modern threat actor TTPs and practical application in research environments.