לוח משרות דרושים, לחיפוש זה נמצאו 2,470 משרות

About us Think about literally anything in your house. Your shirt. Your phone. That random IKEA wrench thingamabob you still haven’t thrown away. Odds are, it all came from somewhere else. Freight is the invisible magic trick that makes the global economy work. And we’re the ones helping it work a little bit faster, smarter, and cheaper. Freightos (Nasdaq: CRGO) is the global booking and payment platform for the trillion-dollar freight industry. Hundreds of airlines and ocean liners, thousands of freight companies, and over ten thousand importers and exporters use our platform to move goods around the world faster and more efficiently. This matters. Efficient freight ultimately makes things cost a little bit less when you buy them in the store. We’ve been on a rocketship (freight ship?) of double-digit growth for years, and we’re nowhere near done. About the Role We are looking for a hybrid powerhouse - a DevSecOps. In this role, you will be the "Ghostbuster" of our systems, an elite specialist who ensures our platform is not only lightning-fast and reliable, but also hardened against any digital threat. You are the kind of person who locks every back door behind you while keeping the gate always open for customers worldwide. Responsibilities:
* Lead security architecture and design reviews to ensure new systems and platforms meet security, reliability, and scalability requirements.
* Develop, implement, and enforce technical security standards, secure baseline configurations, and infrastructure hardening guidelines.
* Own the reliability, availability, performance, and security of production systems across the organization.
* Design, implement, and optimize secure and scalable CI/CD pipelines, integrating security practices throughout the SDLC.
* Build and maintain automation tools and operational processes to improve deployment efficiency, system stability, and security posture.
* Enhance security and observability by implementing and managing monitoring, logging, alerting, and SIEM solutions across distributed systems.
* Lead and participate in incident response activities, including threat monitoring, on-call support, and continuous improvement of operational readiness processes.
* Conduct security assessments, vulnerability management, and compliance audits to identify and remediate risks.
* Promote a security-first engineering culture by mentoring teams on secure coding, infrastructure, and deployment best practices.
* Stay current with emerging threats, vulnerabilities, attack vectors, and industry best practices, and proactively integrate improvements into engineering and security processes.
* Participate in the on-call rotation , with availability to support a global environment.

Hybrid:
Yes

We help organizations reinvent themselves. Through data, technology, and strategic thinking, we lead transformation processes that reshape how organizations operate, make decisions, and grow. If youre looking to work in an environment that encourages initiative, challenges ideas, and creates real impact - this is the place for you. Integrity, excellence, and innovation are not just values - they are our standard. We are looking for a Cloud Security Engineer who combines strong technical skills with a client-facing mindset, to help design, secure, and evolve cloud environments for leading organizations. This role offers exposure to real-world enterprise challenges across Azure, Microsoft 365, and modern security architectures, with growing involvement in AI security topics. What youll do:
* Work hands-on with clients to design and secure Azure and Microsoft 365 environments
* Deliver cloud security solutions across identity, data protection, and monitoring
* Conduct security assessments and configuration reviews in enterprise environments
* Support architecture design and implementation of security controls
* Act as a trusted technical advisor for clients
* Take part in projects involving AI systems, focusing on risks, data protection, and security best practices
תת מחלקה:
יעוץ סייבר ואבטחת מידע

The CSO Office is seeking an Application Security Team Lead. In this role, you will manage an application security team that focuses on building and running tools to secure the application landscape at scale, as well as conducting vulnerability research. You will work closely with the R&D and DevOps teams and serve as the focal point for identifying and resolving complex security challenges. This is a hands-on Team Lead position, a development-focused role that ensures our products adhere to the stringent security requirements of our thousands of customers.
As an Application Security Team Lead, you will
Build, lead, and mentor a team of AppSec Engineers
Lead the development of Internal Security tools and AI agents
Design and implement SSDLC practices and automated security controls across the CI/CD pipeline
Build and operate scalable vulnerability management frameworks across cloud-native services and SaaS products
Integrate security into Agile and DevOps processes, including threat modeling, SAST, DAST, and SCA
Partner with development and DevOps teams to embed security early and often
Contribute to secure code reviews and assist with remediation strategies
Track, triage, and report vulnerabilities across product lines
Provide technical leadership and drive adoption of secure development best practices
Define and measure AppSec KPIs and drive continuous improvement.

Were looking for a Security Response Engineer with strong expertise in Web Application security to join our Advanced Security Response Team (ASRT).
The Advanced Security Response Team is dedicated to the first response for security incidents, focusing primarily on the operational aspects of web application security. This includes analyzing threats, suggesting immediate remediation and mitigation methods, and actively working to block attacks in real time.
The scope of activities spans network layers 3, 4, and 7, covering a broad spectrum of threats. This includes defending against DoS & DDoS attacks, brute-force attempts, scraping, filtering unwanted traffic, as well as initial analysis and mitigation of application attack vectors such as XSS, SQL injection (SQLi), and remote code execution.
Another important responsibility of the ASRT is managing false positives. The team will investigate root causes of these misfires, propose optimal solutions to prevent recurrence, and apply necessary changes.
The ASRT works closely with the first-tier support team, serving as the focal point for security-related events and incidents. Additionally, the team maintains a two-way communication channel with the Threat Research team to share findings, exchange consultation, and stay updated on current security policies.
As a member of the ASR team, the specialist is expected to have a strong working knowledge of web application security and the current threat landscape, combined with in-depth familiarity with security policies and processes. Proficiency with relevant tools and methodologies is required, and continuous learning in security-related topics is encouraged.
This is a full-time position that requires weekend availability and participation in a rotating weekend shift due to the real-time nature of security response.
Key Responsibility:
Investigate and respond to active web and network-based security incidents in real time.
Apply and validate mitigations for attacks such as SQLi, XSS, and DDoS.
Troubleshoot false positives and fine-tune security policies.
Collaborate with internal teams to share findings and continuously improve detection and response.
Clearly explain security events and impacts to both technical and non-technical audiences.
Stay up to date on emerging web attack techniques and response methods.
Participate in a rotating weekend/on-call schedule to ensure 24/7 protection for our customers.

Were looking for a Web Security Researcher to be part of a team of highly skilled professionals that include security researchers, data researchers, data scientists and software engineers who continuously hunt for threats, evaluate and develop new detection techniques, and share intel and attribution for cybercrime activity with the goal of protecting our customers while keeping the internet human.
What you'll do:
Play a lot with the web-browsers, trying to find differences in behavior between them.
Research and develop signal collection on both mobile and desktop, which enables detection and improve our protection
Find ways to detect automation, for example, tools like Selenium, Playwright or Puppeteer.
Understand customer specific requirements, deliver with impact and exceed customer expectations.
Discover adversary tactics, techniques, and procedures leveraged by bots.
Create and validate data insights to enhance detection excellence.
Share security research topics through blogs, research talks, knowledge base and external engagements including conference presentations, detailing your discoveries for internal and external sharing.
Find bad stuff on the internet, see if you can figure out how it is done, document it.
Red team, experiment, and develop new tactics for various kinds of fraud and to bypass our detection, no need to wait for an attack to be discovered and used by adversaries first.
Stay abreast of cyber security trends and events related to our mission.
Contribute high impact work that substantially benefits team level metrics and OKRs.
Develop techniques, tools and scripts to simplify yours and others work.

As VP of the Maritime Intelligence Operations Center (MIOC), you will lead flagship intelligence unit - the team that turns Maritime AI into the timely, decision-grade intelligence that shapes how governments, defense agencies, energy majors, and global financial institutions act on what is happening at sea.

You will own the agenda, the output, and the people. From sanctions evasion and dark fleet activity to live geopolitical events - Iran, the Red Sea, the Strait of Hormuz, the Russian shadow fleet - MIOC analysis is read by senior decision-makers in Israel and abroad, and increasingly drives the public narrative around maritime intelligence. You will continue to build the team, set the priorities, and make sure every report we publish raises the bar.

You will sit at the intersection of intelligence operations, product, and go-to-market - partnering closely with Product, R&D on tooling and platform requirements, with Marketing on the content engine, and with global subsidiaries to enable their cleared and in-market analytical work.

Core Responsibilities

1. Own and Operate the MIOC

Lead the Maritime Intelligence Operations Center end-to-end: people, process, output quality, and operational tempo.
Run an intelligence-grade operation capable of responding to breaking maritime and geopolitical events on demand.
Set the standards for tradecraft, sourcing, review, and quality control that make MIOC products trusted by the most demanding consumers.
2. Own the Intelligence Agenda

Define what MIOC researches and why - aligned to customer demand signals, geopolitical priorities, and strategic narrative.
Prioritize across recurring products (daily/weekly intelligence, situation rooms, deep-dive analyses) and event-driven rapid response.
Set the analytical methodology: sources, models, confidence levels, and how findings are corroborated and communicated.
3. Build Capacity - Hiring, Training, and Tradecraft

Recruit, develop, and retain a senior team of maritime, geopolitical, and intelligence analysts.
Build the training curriculum, career paths, and quality bar for analysts.
Scale the organization responsibly as demand grows - across functions, geographies, and time zones.

We are seeking a highly skilled and experienced Red Team Engineering Lead to manage a specialized attack team focused on developing offensive, production-ready attack capabilities. This is a research and development (R&D) role at the core of our offensive security efforts. You will be responsible for architecting and delivering advanced low-level attack components used in evasion techniques, red team tooling, and adversary simulations.
You will be hands-on in both leadership and development, guiding technical direction, mentoring engineers, and contributing code to offensive attack components.

The Impact You Will Have:
Lead the design, development, and deployment of production-grade offensive capabilities targeting application and OS CVEs exploits.
Develop attack components for Windows/Linux including OS-level evasion mechanisms.
Implement Python bindings to connect native low-level components with Python-based research tools and automation.
Research and develop bypass techniques for modern security controls.
Collaborate with the Research Team and other R&D stakeholders to implement and refine offensive concepts.
Provide technical mentorship and drive engineering best practices within the team.
Harness AI coding agents to streamline the above processes.