לוח משרות דרושים, לחיפוש זה נמצאו 2,485 משרות

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.
While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.
Key Responsibilities
Application Security & Secure Engineering:
Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting our core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security:
Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance:
DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.

We are looking for a CISO to turn expertise, initiative, and bold thinking into real impact on the next generation of AI-driven financial crime detection.
As CISO, you will define and execute our global security strategy across both internal and product environments, serving as the primary security authority in front of customers, regulators, and auditors.
If you combine strong security leadership and cloud-native technical expertise with deep understanding of enterprise sales cycles and regulatory standards, and if you are motivated by directly influencing customer trust and enabling the world's largest financial institutions to adopt cutting-edge AI-driven solutions with confidence, we could be your next challenge.
Responsibilities:
Define and lead a comprehensive, business-aligned security program that supports growth while mitigating global risk.
Act as the primary interface with customer CISOs, auditors, and regulators, leading security discussions, due diligence processes, and enabling successful deal closures.
Partner with Engineering and DevOps to secure our cloud-native architecture across AWS, Azure, or GCP, including Kubernetes environments, ensuring enterprise-grade resilience.
Embed security-by-design across the development lifecycle, including AI and ML models and data pipelines.
Own and drive compliance with global standards including ISO 27001, SOC 2, NIST, GDPR, and DORA.
Oversee modern security tooling and practices across IAM, SIEM, DLP, CASB, CSPM, and emerging AI security domains.
Lead incident response, business continuity, and cyber resilience planning, including executive-level simulations and ransomware readiness.
Own vendor risk management and ensure end-to-end security resilience across the ecosystem.

The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as One.
This role is offered as a hybrid with expectations to come to the office in the Tel Aviv office in Israel at least 3 days per week. We are only able to accept applications for those based in Israel and have sponsorship to live and work in Israel.
What you'll do:
At our company, we empower people to be their best selves and do their best work. The Security Analyst role strengthens our ability to detect and respond to emerging mobile threats. With increasing mobile attacks and zero-day exploits, we need dedicated analysts to proactively protect our customers and expand detection coverage. As the analysts team has grown, this role now allows for broader coverage of emerging mobile threats and enables analysts to take on more diverse responsibilities. The expanded scope supports comprehensive threat research, detection development, and incident response, ensuring work is thorough,
prioritized, and aligned with evolving security challenges.
What you can expect to do in this role:
Research new ways to detect malicious activity on using a wide variety of custom-built tooling.
Participate on research how to protect users from 0-day attacks.
Perform analysis of detections according to the assignment to determine accuracy and precisions and tune detections accordingly based on results.
Stay up to date on the latest malware trends and design detections accordingly.
Support sales and marketing by timely information about emerging threats and trends.
Analyze device logs and search for malicious signs.
Write and manage detection patterns and algorithms to detect malicious mobile threats in Android and iOS devices.
Perform other duties and special projects as assigned.

Planning, defining, and implementing cyber defense architecture within the division, ensuring alignment with operational. requirements, regulations, and technologies.
Accompanying technological projects, risk analysis, defining security controls, and leading defense solutions in both on-premise and cloud environments.
Conducting Security Design Reviews for systems and infrastructure.
Evaluating and implementing new information security technologies.
Analyzing cyber risks and recommending protective controls.
Writing architecture documents, standards, procedures, and guidelines.
Leading segmentation, Zero Trust, and secure access concepts.
Addressing regulatory requirements and information security standards.
Collaborating with IT, communication, DevOps, cloud, and development teams.
place of employment: center
scope of hours: 100 hours.