לוח משרות דרושים, לחיפוש זה נמצאו 2,376 משרות

The Security Operations & Coordination Manager serves as the operational backbone of the Security Operations function, ensuring the seamless planning, coordination, execution, and oversight of all departmental activities.
This role is responsible for translating strategic operational objectives into executable plans, coordinating resources, managing vendors, maintaining operational readiness, and supporting leadership throughout every phase of an operation.
Acting as the central coordination point between headquarters, field personnel, vendors, executives, and external stakeholders, the position ensures that every operation is fully prepared, efficiently managed, and supported in real time while maintaining the highest standards of confidentiality, professionalism, and operational excellence.

Your responsibilities will include:

Lead the operational planning and coordination of all security activities prior to execution, ensuring readiness across personnel, logistics, vendors, and supporting functions.
Coordinate operational plans, timelines, contingency measures, and communication processes before, during, and after each activity.
Serve as the primary operational coordination point between headquarters, field teams, executives, and external stakeholders.
Provide real-time operational support during ongoing activities, acting as an operational command and coordination function to monitor execution, facilitate decision making, and respond to changing operational requirements.
Prepare operational contingency plans and ensure readiness for multiple scenarios, maintaining business continuity and operational resilience.
Manage all external vendors and service providers supporting the Security Department, including performance oversight, operational coordination, contractual follow-up, and service quality.
Manage the departments operational budget, including planning, tracking expenditures, cost control, and coordination with relevant internal departments.
Support the Head of Security Operations in managing departmental priorities, strategic initiatives, executive coordination, and daily operational activities.
Coordinate cross-functional activities with internal business units to ensure operational alignment and timely execution.
Maintain accurate operational documentation, reporting, schedules, and departmental records while ensuring proper handling of confidential information.
Ensure compliance with organizational standards, legal requirements, internal procedures, and security governance.
Support continuous improvement initiatives by identifying opportunities to optimize operational processes, coordination mechanisms, and departmental efficiency.
Assume responsibilities similar to the Security Operations Manager role, with a primary focus on operational coordination, planning, administration, and command support rather than physical field execution.

This role is responsible for leading the organizations security architecture across corporate networks and cloud environments, ensuring secure design and implementation of enterprise infrastructure at scale.

The ideal candidate combines deep expertise in network and cloud security with strong leadership capabilities. You will define and drive security architecture across hybrid environments, working closely with IT, Infrastructure, Network, DevOps, and Security teams to ensure robust, scalable, and resilient security controls.

Your responsibilities will include:

Lead and manage the security architecture domain, including security architects and/or senior engineers.
Define and maintain security architecture standards, guidelines, and reference designs across corporate and cloud environments.
Act as the primary authority on enterprise security architecture across networks, identity, endpoints, and cloud platforms.
Design and evolve secure enterprise network architectures, including segmentation, Zero Trust, and hybrid connectivity.
Define and enforce security controls for corporate networks, data centers, and remote access solutions (ZTNA, proxies, NAC).
Lead architecture and selection of network security technologies (e.g., firewalls, secure gateways, access control solutions).
Lead security architecture across cloud platforms and hybrid environments.
Define secure reference architectures for cloud networking, identity, and workload protection.
Ensure proper implementation of cloud security controls, including IAM, segmentation, encryption, and monitoring.
Define security architecture for endpoints and identity, including EDR/XDR, device hardening, SSO, MFA, and privileged access.
Ensure secure baseline configurations and access control mechanisms across corporate and cloud environments.
Identify architectural risks and security gaps and drive mitigation strategies across infrastructure and cloud environments.
Establish and enforce architecture review processes and governance for new systems and changes.
Collaborate with SOC, Vulnerability Management, IT, and Infrastructure teams to improve overall security posture.
Contribute to the cyber security strategy and roadmap, including adoption of modern models such as Zero Trust.

As a Cloud Security Lead (Cloud Security Architecture & Hardening) , you will design, implement, and enhance the security of our mission-critical cloud infrastructure and the Enterprise Browser by establishing robust security architectures, implementing proactive hardening controls, and driving continuous operational excellence. You will play a critical role in safeguarding our cloud environment, shaping the foundational security posture through precision, innovation, and design foresight.

Key Responsibilities

Cloud Security Architecture & Hardening: Design and enforce security baselines, configurations, and reference architectures across our multi-cloud footprint (AWS/GCP/Azure). Evaluate new cloud services and features for security implications and create hardened deployment standards for IaaS, PaaS, and serverless components.
Security Engineering & Automation: Develop and deploy security-as-code solutions, integrating security controls directly into CI/CD pipelines and leveraging Infrastructure-as-Code (IaC) tools to ensure continuous configuration integrity and compliance. Develop custom automation for detection, alerting, and triage workflows, leveraging cloud SDKs and APIs.
Cloud Security Monitoring & Observability: Design, implement, and maintain cloud-native security monitoring solutions (e.g., utilizing services like CloudTrail, GuardDuty, Security Command Center) to ensure comprehensive visibility across the cloud control plane and data plane.
Incident Triage & Response: Support the security team in investigating and responding to critical security events and vulnerabilities, creating runbooks, and contributing to post-incident remediation and architectural improvements.
Security Enablement & Awareness: Collaborate with product, engineering, and IT teams to improve security awareness, deliver training, and drive adoption of security best practices across , specifically for IaaS, PaaS, and secure DevOps practices.

As a SecOps Lead , you will own the core of the security operations function: detection, response, automation, and the processes that connect them. You will guide incident response from first alert through post-mortem, keeping efforts structured and stakeholders informed along the way. You will shape how the team detects, triages, and resolves, and communicate that work clearly to leadership, engineering, and customers.

This is a hands-on role with broad ownership. You should be comfortable writing a detection rule, coordinating a live incident, and walking stakeholders through a post-incident review.

Key Responsibilities

Lead Incident Response: Own the end-to-end incident response lifecycle across infrastructure and enterprise browser platform, driving investigations, coordinating responders, and ensuring timely resolution and post-incident improvements.
Own the IR Framework: Build, maintain, and continuously improve incident response processes, including runbooks, severity definitions, escalation paths, on-call procedures, and communication standards.
Drive Detection Engineering: Design, implement, and continuously improve high-fidelity detections across SIEM, EDR, cloud, and endpoint security platforms, closing visibility gaps and strengthening detection coverage.
Automate Security Operations: Build automation and AI-driven workflows that streamline triage, investigation, enrichment, and response, reducing manual effort and improving operational efficiency.
Threat Hunting & Research: Proactively hunt for threats, leverage threat intelligence, and identify emerging attack techniques relevant to modern enterprise environments.
Own Security Operations: Serve as the technical owner for Security Operations within Product Security, driving strategy, setting best practices, and continuously improving detection and response capabilities.
Partner Across Engineering: Collaborate closely with Engineering, IT, Infrastructure, and Compliance teams to embed security into new services, infrastructure changes, FedRAMP initiatives, and customer-facing security requirements.
Communicate During Incidents: Provide clear, timely communication throughout incident response, keeping technical teams, leadership, and stakeholders aligned on impact, progress, risks, and next steps.

we create user-friendly experiences that drive positive outcomes for all parties involved.

With a team based in Tel Aviv and New York, we have been growing rapidly, supporting hundreds of thousands of consumers on their journey to financial resilience and building partnerships with top creditors and fintech companies.

How Youll Spend Your Time
Own IT operations globally - manage user accounts, devices, and office IT infrastructure across Israel and US sites. Handle onboarding/offboarding workflows, device management (MDM), and day-to-day help desk support.
Manage vendors and subscriptions - build and run vendor assessment and procurement processes in collaboration with Compliance and Finance. Control enterprise SaaS subscriptions and evaluate new tools.
Lead security operations - oversee SOC, audit logging, vendor risk assessments, and security questionnaires for sales prospects. Work alongside Compliance and the CTO to maintain and improve the companys security posture.
Drive process and structure - build the workflows, documentation, and policies that turn a reactive IT function into a proactive one.
Communicate with leadership - present security priorities, budget requests, and risk assessments to executives. Prioritize pragmatically and build buy-in across the organization.
Drive growth - think strategically about how IT scales with the company, and take ownership of building the team and resources needed over time.

we are looking for a WAF Security Specialist.
What You'll Do:
Create - Produce production WAF rules across providers for high-impact CVEs and customer findings - driving the Copilot harness on most of them, writing the expression yourself on the hard ones (no public PoC, exploitable path reasoned out of a patch diff, urgent customer coverage). Your rules ship, and they set the bar generated rules are measured against.
**Optimize -**Tighten generated rules for real production constraints: WCU and rule-capacity budgets, latency, provider expression limits, and the anchoring required for a rule that fires against all traffic behind a shared Web ACL - not just the vulnerable app.
Validate - Own the adversarial pass. Build exploit variants the PoC doesn't cover, hunt bypasses in our own rules, and run the false-positive side seriously - verifying against how the legitimate client actually behaves on the wire, not against an assumption.
Monitor - Watch deployed rules in production: false-positive signals, hit patterns, coverage drift as managed rulesets shift underneath us, and the log→block promotion decision. Retire what no longer earns its capacity.
Make it reproducible - Turn every finding into a regression test. Build and curate the golden CVE datasets and scoring rubrics that gate whether a new Copilot version ships.
Set the coverage line. Judge which CVEs are genuinely WAF-mitigatable and which aren't, and make the call on what enters and leaves our managed rulesets - with the reasoning written down.