לוח משרות דרושים מומחה אבטחת מידע / סייבר

Research, identify, evaluate and implement the best solutions for security in production environment

Research, identify, evaluate and implement the best solutions for the platform code and services used by our developers

Work closely with development and system teams on all SDLC levels, performing security design reviews, threat modeling and penetration tests, while acting as a security mentor for developers

Investigate abnormal activity in production

Build creative tools and services to detect and solve cross-security issues

We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers.
Responsibilities:
Learning the customer needs and PIRs, configuring their tailored environments in our intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing our data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables
Drive cooperation & feedback loops with other teams

We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers.
Responsibilities:
Learning the customer needs and PIRs, configuring their tailored environments in our intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing our data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables
Drive cooperation & feedback loops with other teams

As the Director of Application Security, you will spearhead our efforts to fortify and enhance the security posture of our products and runtime environments.

You will lead a dynamic team of security professionals and collaborate closely with engineering, product, and other business units to ensure the security and integrity of our applications, platforms, cloud infrastructure, and code stack against current & evolving threats.

Your leadership will be instrumental in embedding security best practices throughout the software development lifecycle, driving the strategy, development, and implementation of a comprehensive application security program across our cloud-based applications

Reporting line: CISO



What You'll Do

Strategic Leadership and Team Management:

Strong leadership skills to build, mentor, and guide a team of application security professionals.
Ability to develop and execute a strategic application security vision that aligns with the CISOs goals and addresses the unique challenges of cloud and SaaS environments.
Ability to learn, analyze, and mitigate security vulnerabilities in the platform and product offering.
Experience in budgeting, resource allocation, and prioritization of security initiatives to address critical risks without impeding innovation and business agility.
Experience in collaborating with cross-functional teams, including engineering, product management, and customer support, to embed security into product development and business processes.
Expertise in Application & Cloud Security Technologies:

Extensive experience in application & code security, with a focus on offensive security techniques.
Proficiency in conducting penetration testing, code reviews, and vulnerability assessments.
A deep understanding of cloud computing architectures.
Familiarity with application security practices and experience.
Expertise in using tools and methodologies for advanced security analysis, including secure coding standards, threat modeling, penetration testing, red teaming, and fuzz testing, to identify and remediate vulnerabilities in applications and cloud environments.
Knowledge of cryptographic principles and best practices, including the implementation of encryption, hashing, and digital signatures in applications and managing keys and secrets in cloud environments.

As a SecOps Expert, youll be responsible for securing and protecting our infrastructure, including managing and administering various security-related technologies, platforms, and tools. You'll also provide security expertise and guidance to the team on various security-related matters. Youll build and own solutions to quickly identify breach attempts, contain and eradicate threats, streamline our security incident response processes, continuously test our controls, and help the business make informed decisions based on threat intelligence. This is a fast-paced environment, where youll have the opportunity to manage multiple projects at once.

This position requires shift work, including occasional night shifts approximately about once every three weeks. Additionally, there may be occasional Friday Morning shifts, which are compensated with a full day off. However, we prioritize our employees' well-being by ensuring that there are no workday shifts immediately following a night shift. Our scheduling aims to maintain a healthy work-life balance for all team members.

Responsibilities
Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans.
Perform host-based analysis, artifact analysis, and malware analysis in support of security investigations and incident response.
Coordinate investigation, containment, and other response activities with business stakeholders and groups.
Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.
Recommend or develop new detection logic and tune existing sensors/security controls.
Work with security solutions owners to assess existing security solutions ability to detect/mitigate the abovementioned TTPs.
Creating custom SIEM queries and dashboards to support the monitoring and detection of advanced TTPs against the company network.