לוח משרות דרושים, לחיפוש זה נמצאו 2,376 משרות

we are revolutionizing legal tech with an AI-powered Legal Intelligence Platform trusted by some of the world's fastest-growing companies including Wiz, Socure, and Fiverr.
We integrate seamlessly with Salesforce and other systems to help in-house legal teams accelerate negotiations, reduce risk, and unlock institutional knowledge through automated workflows.
We're solving complex problems at the intersection of AI and legal operations. Join us as we scale our impact globally.
About the Role
We're looking for a Head of Security to own security end-to-end at our company- from the architecture of our product to the systems our own team runs on.
We handle some of the most sensitive documents our customers have, and our buyers' security teams scrutinize us accordingly.
You'll be our first dedicated security hire and the sole internal authority on the subject: setting the standards our engineers build against, owning our compliance posture, and sitting across the table from customer CISOs to defend it.
This is a hands-on role with real strategic weight - if you want to build a security function from scratch at a company where security is a deal-maker, we want to hear from you.
What You'll Do
Design, architect, and implement security directly into our product and codebase
Own our internal security posture: corporate IT, access management, endpoint, and employee security practices
Lead customer-facing security engagements - pre-sales security reviews, CISO-level discussions, security questionnaires, and enterprise assessments - representing our company's posture to buyers who evaluate us seriously
Own our compliance program end-to-end, including audits, evidence, and vendor risk
Set security standards and best practices across R&D and product as the internal authority on the subject
Build the security review process for how we ship AI features - threat modeling around LLMs, agentic workflows, and customer data boundaries
Partner with DevOps and engineering on cloud security, secure architecture, and incident readiness
Grow the security function as we scale, from process to headcount.

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.
While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.
Key Responsibilities:
Application Security & Secure Engineering:
Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting our core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security:
Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance:
DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.

Were looking for a visionary Application Security leader to architect and champion the future of secure engineering at our company. You will spearhead our strategy for building resilient, AI-powered systems while enabling developers to innovate with velocity and confidence. Together, we will keep the up-market momentum and continuously improve security as a major part of our value proposition.
Youll Own:
The strategy, architecture, and execution of Application Security across our companys engineering organization.
Leading the Application Security function within the Platform Security organization, reporting to the Director of Platform Security.
The Secure SDLC program, including secure design reviews, threat modeling, and security automation.
Security architecture for AI-powered features, agentic workflows, and data-driven systems.
Application security risk management, vulnerability tracking, and remediation programs.
Leading, mentoring, and growing a high-performing Application Security Engineering team.
our companys Bug Bounty program.
Incident response procedures that relate to the Platform.
A Security Champions program across R&D.
Youll Solve:
Enabling developers to build secure products at scale by designing and operating security foundations embedded throughout the SDLC.
Ensuring security is built into the design and delivery of all products while enabling rapid innovation and engineering velocity.
Building security capabilities embedded directly into engineering workflows, including reusable frameworks, libraries, and guardrails.
Partnering with Engineering, Product, Infrastructure, and AI Platform teams to ensure security design.
Balancing security rigor with engineering velocity in a fast-paced environment.
Youll Impact:
Enabling developers to build secure products at scale.
Driving a measurable reduction in application risk through engineering improvements.
Establishing architectural guardrails for data protection, authorization, and runtime controls in AI systems.
Influencing engineering decisions through deep technical collaboration and trust.
Defining the security approach for AI-powered features and LLM integrations.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.

We are seeking a seasoned security leader to manage a high-caliber research team focused on the security of Identity, SaaS, and Cloud ecosystems. In this role, you will provide technical mentorship and strategic vision, guiding research into service risk profiling and adversarial TTPs analysis. You will be the bridge between cutting-edge research and product innovation, ensuring our findings translate into high-impact security outcomes to stay ahead of modern adversaries.
Key Responsibilities
Define the research roadmap for Identity, SaaS, and Cloud risks, ensuring the team's outputs align with the evolving threat landscape and company goals.
Lead and grow a diverse team of security researchers, providing the technical guidance and career development necessary to maintain a world-class research organization.
Leverage your experience in a product-focused environment to ensure research outcomes directly influence service security strategies and customer-facing solutions.
Oversee the execution of high-fidelity attack simulations and TTP deconstruction, ensuring the 'how-to' of secure service usage is clearly defined and actionable.
Partner with Engineering, Product Management, and Threat Intel teams to transform raw research into robust mitigation strategies and resilient service blueprints.
Represent the team's research internally and externally, positioning the organization as a premier authority on Identity-centric and Cloud security.

In this position, you will have the autonomy to choose the best tools for the job, manage our corporate environment from the ground up, and have a direct impact on protecting the financial data of global enterprises while ensuring our team has the best technical tools to succeed.

What youll do
IT Operations & Employee Experience

Youll work closely with the CTO, engineering, and business teams, combining hands-on execution with real ownership and impact.
Manage corporate SaaS platforms, identity management (SSO), and Google Workspace.
Compliance & audits (SOC2, PCI)
Acting as the security point of contact for customers, auditors, and internal teams
Act as the primary technical point of contact for all employees, providing hands-on support and troubleshooting.
Deploy and operate endpoint security and management tools (EDR, MDM, DLP) across a distributed workforce.
Cloud & Infrastructure Security

Improve and maintain the security posture of our AWS/GCP-based cloud infrastructure.
Operate cloud security platforms, such as Upwind / Wiz / Oligo, or similar solutions to prioritize and remediate risks.
Design and enforce secure access controls and least-privilege IAM policies.
Investigate cloud security alerts and support incident response.
Application Security

Integrate security into the SDLC and CI/CD pipelines by automating SAST, SCA, and secret scanning.
Secure containerized workloads (Kubernetes / EKS) focusing on runtime protection and image hardening.
Provide guidelines and safeguards for AI-powered development processes and AI models within our SaaS platform.
Compliance & Security Culture

Support SOC2 and PCI DSS compliance initiatives and audit readiness.
Serve as the primary security focal point for external auditors.
Contribute to security awareness and best practices across the company, explaining the rationale behind security requirements.

Required Threat Hunting and IR
As a Threat Hunting and IR, you will:
Proactively hunt threats, contain breaches and reduce organizational impact
Investigate, analyze and respond to security events and incidents, performing in-depth technical analysis to determine root cause and impact
Design, develop, and maintain security detections, alerts and monitoring capabilities across enterprise and cloud environments
Perform security assessments and red team exercises
Conduct network, protocol and technical research to identify emerging threats, attack techniques and defensive opportunities
Analyze network traffic, system logs, endpoint telemetry and security events to identify suspicious activity and security gaps
Conduct threat intelligence and OSINT research using internal and external data sources to identify threats and improve detection capabilities
Partner with Engineering, Infrastructure, and Architecture teams to embed security-by-design principles into new products and services
Develop automation and tooling to improve security monitoring, investigations and operational efficiency.

Required Data Center Security Manager (English, Hebrew)
About the job
As a Data Center Security Manager, you deliver full pieces of a project and make significant contributions with minimal guidance. You use your knowledge of security technology, data analysis, and data visualization to plan efforts of a team responsible for small to medium sized initiatives by delivering value-added perspectives and influencing project direction. You contribute to cross-team collaborations, identify and recommend multiple creative ways to solve defined problems. You also demonstrate the behaviors expected of as captured in our cultural pillars, and you engage in community contributions to improve and sustain our culture and operations, making it a better place to work.
In this role, you will take ownership of key activities including security budgeting, and manage physical security vendor operations to ensure high-performance service delivery.
You will partner closely with cross-functional teams to implement security policies, lead investigations, and proactively mitigate operational risks. You will direct responses to active security incidents, coordinate critical event workflows, and serve as the primary, authoritative liaison with public safety officials and law enforcement.
Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of our platforms, we make our product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.
Responsibilities
Implement established compliance processes aligned with Compliance, Strategy, and Risk Management (CSRM) policies, standards, guidelines, and relevant legal or regulatory requirements.
Manage the security related costs through budget, forecasting, and invoice control for the assigned campus, assist management with financial analysis and input to financial decisions for security requirements.
Provide after-hours on-call management support and participate in emergent, large-scale event response or crisis management when needed.
Be responsible for the compliance, security and risk management program at the data center campus or related infrastructure which includes managing site security incidents, escalations, guard contract management and all other physical security related issues.

We are looking for a Security Lead to join our companys R&D organization, taking a central, cross-functional role in shaping the security posture of our products. This role combines deep hands-on expertise with cross-organizational leadership, working closely with senior leaders to shape and implement security strategy across all product lines. You will lead end-to-end security initiatives, influence engineering practices at scale, and play a critical role in ensuring our products meet the highest security standards.
Key Responsibilities
Lead security in the R&D organization by professionalism and cooperation across our company
Maintain and develop the Secure Development Life Cycle of all our companys Products Organization, work with R&D, QA, Sales, Support, external researchers, and customers to make the cyber landscape a safer place.
Conduct architectural security reviews and threat modeling for R&D
Full triage for our company's VDP and BBP reports, including analyzing reports, calculating severities and communications with reporters.
Define and develop security training to implement cross organization
Be a first responder in security incidents, including leading and defining actions to resolution
Manage and monitor our company's SCA, SAST, DAST tools.

We are looking for a highly proactive and experienced Operations Manager to help lead the operational evolution in content moderation of the Trust & Safety (T&S) department. This role sits at the intersection of moderation operations, product, technology, data, policy and external vendors. The person will be responsible not only for maintaining existing operations, but for identifying gaps, building scalable solutions and driving complex T&S initiatives from problem definition through implementation. This is a role for someone who is comfortable with ambiguity, operates with a high degree of independence and naturally takes ownership. We are looking for someone who does not wait for a fully defined task or process, but can identify what needs to happen, build the plan, align the right stakeholders and move the work forward.

What am I going to do?:

* Own complex Trust & Safety operational initiatives from definition through execution, rollout and measurement.
* Lead operational aspects of new moderation technologies, external vendor integrations and tooling improvements, including solutions such as automated and AI-assisted moderation.
* Act as the operational owner for integrations: define requirements, identify dependencies, coordinate Product, Engineering, data, Policy, Legal and vendor stakeholders, manage timelines and drive decisions to closure.
* Translate T&S problems and policy requirements into scalable operational workflows, enforcement logic, rules, tooling requirements and implementation plans.
* Continuously identify operational gaps, inefficiencies and emerging abuse trends and proactively propose solutions rather than waiting for predefined projects.
* Build and improve moderation workflows across automation and human review, balancing accuracy, operational efficiency, user impact and business needs.
* Own relationships with relevant moderation and T&S vendors, including implementation, performance management, escalation and ongoing optimization.
* Drive cross-functional projects involving Policy, Product, Engineering, data Science, Legal, Customer Care, QA and Training.
* Support incident and escalation management when operational or platform-integrity risks require rapid cross-functional response.
* Help shape the longer-term operating model and capabilities of the Trust & Safety function.

Equal opportunities:
At our company, we know that talent has no single face. We welcome talent from everywhere and everyone because it makes everything we build better. Need accommodations? Just ask. And if this role excites you but you don't tick every box, apply anyway. The best people rarely fit the mold exactly.