לוח משרות דרושים מהנדס סייבר, לחיפוש זה נמצאו 52 משרות

We are looking for a Senior Linux Security Developer to design and develop security capabilities deep inside the Linux OS - kernel internals, eBPF, OS telemetry, enforcement mechanisms, and security agents. You will own architecture decisions, investigate new attack
surfaces, prototype novel approaches, and turn successful concepts into production technologies.
What You'll Do:
Design and implement high-performance Linux security components in kernel and user space (kernel modules, eBPF, system services, security agents), including tamper-resistant mechanisms for adversarial environments.
Build scalable Linux endpoint capabilities for telemetry, detection, prevention, and policy enforcement.
Investigate Linux kernel subsystems to find opportunities for new detection and prevention capabilities, including protection of AI-agent workloads (autonomous processes, tool execution, privilege usage, filesystem/network activity).
Translate research ideas into efficient, production-grade implementations (performance, concurrency, reliability, security), and mentor engineers in systems programming and Linux security.

We are looking for a security programmer to help us build the next generation AI container network security system.
This role sits at the intersection of systems programming, network security, and cloud-native infrastructure.
What You'll Do
Help design and implement traffic inspection and prevention components that run in-line within Kubernetes clusters (as a DaemonSet, sidecar, or CNI-integrated component)
Build or contribute to protocol parsers and signature/rule-matching engines
Contribute to an AI-assisted signature generation pipeline
Work with the Linux networking stack to intercept and act on traffic with acceptable latency overhead
Help ensure the data path is efficient enough to run under the resource budgets typical of Kubernetes workloads
Collaborate with detection research and cloud security teams to translate threat intelligence into enforceable rules and behaviors.

Were growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
About the Company:
A global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise.
As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy.
Responsibilities
As a Senior Security Operations Engineer, your responsibilities will include:
Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security.
Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP).
Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments.
Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments.
Provide recommendations regarding direction of systems and applications to help secure access, data and assets.
Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure our systems are properly protected.
Conduct research on emerging products, services, protocols, and standards relative to the information security arena.
Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations
Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc..
Ability to work well with other technology areas to deploy security technologies.
Customer service-oriented
Strong work ethic and sense of urgency
Develop and maintain security architecture diagrams, documentation, and standards.

As an Offensive Security Engineer, you will spearhead offensive security operations and lead advanced threat research initiatives, playing a pivotal role in safeguarding our organization and customers from evolving cyber threats. You will develop and execute Red Team exercises, simulate real-world attacks, and identify security weaknesses in systems and applications. We seek a highly skilled, proactive tech leader who thrives in challenging environments and is passionate about advancing security research and offensive strategies.

As an Offensive Security Engineer, you will
Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against infrastructure and cloud environments.
Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities.
Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving security posture.
Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses.
Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises.
Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning.
Participate in incident responses when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation.
Continuously assess and improve security processes, playbooks, and threat detection mechanisms.

Were looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.Youll join Corporate Security Engineering within our Cyber Defense organization, Youll design, implement, and mature the security controls that protect our business applications, workforce, and corporate environment.
Youll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation.
Youll Own
The security posture of our corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.
Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.
Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.
Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.
SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.
Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.
Youll Solve
How to protect a fast-growing SaaS companys corporate environment across a broad and evolving technology stack.
How to translate security risks into clear requirements, practical controls, and reliable production operations.
How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.
How to automate security processes and integrate systems so controls remain effective as we scale.
How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.
How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.
Youll Impact
The security and resilience of our business applications, workforce, and corporate environment.
Our ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.

As a Trainer, you own how enterprise security teams learn the platform. You'll take analysts from their first query to advanced detection engineering and threat hunting, and you'll build the training content that makes that journey repeatable. You're equally comfortable leading a live workshop for a room full of cyber defense engineers, running a recorded Zoom session across time zones, and fielding the hard, specific questions that experienced practitioners ask.

This is a customer-facing, deeply technical role. You'll represent us in front of our most important customers, and what you hear in the classroom - the confusion, the "aha" moments, the recurring questions - flows back to our product and content teams to make the platform and its training better.


WHAT YOU WILL DO
Train enterprise security teams on the company`s platform, from onboarding sessions to advanced deep-dives.
Create custom training content - courses, hands-on labs, exercises, and reference material - tailored to customer environments and use cases.
Teach advanced usage to security teams: query language mastery, detection engineering, threat hunting, and investigation workflows.
Demonstrate complex attack techniques to security teams and explain how to detect and react to them.
Answer complex, real-world questions from customers during and after sessions, and know when to dig in yourself versus pull in the right expert.
Deliver sessions across formats: on-site workshops, live virtual sessions, and recorded content.
Share content publicly via our various platforms, including technical write-ups, recorded content, and online self paced training.
Help security teams understand how to build & integrate AI workflows into their security operations.
Interact with our community: Publish curated content, organize online events, build CTFs, engage with users and answer complex questions.

Youll be part of a small, elite founding engineering team solving real-world security problems that sit at the intersection of network security, cloud infrastructure, and large-scale data systems.
This is a hands-on role where youll design and build core parts of the product - from network-aware security logic and attack-path modeling, to high-performance pipelines that process massive volumes of security and infrastructure data.
If youre excited about deep security challenges, love building real systems end-to-end, and want massive impact in an early-stage team - wed love to meet you.

Our Security team is looking for a highly skilled and security-savvy Application Security Engineer to lead our product and application security efforts. In this role, you will drive security design, ensure secure coding practices, and validate our services and environments against the highest security standards.
You will work closely with our R&D and Product teams to identify, mitigate, and prevent security risks throughout the software development lifecycle (SDLC). You will own security initiatives, mentor developers on security best practices, and play a key role in shaping the security posture of our products.
The ideal candidate is highly motivated, eager to learn, and has a security by design mindset. This role provides career growth opportunities, enabling you to deepen your expertise in AppSec, DevSecOps, and cloud security.
What you'll do:
Partner with development and product teams to integrate security best practices into the SDLC
Lead threat modeling and architecture security reviews to proactively identify and mitigate risks
Conduct security assessments, including code reviews, vulnerability scans, penetration testing, and secure product design reviews
Stay up to date with emerging security threats, vulnerabilities, and industry trends, ensuring we remain ahead of evolving risks.
Support and contribute to security incident response activities, including root cause analysis and post-incident improvements
Automate security processes and integrate security tools within CI/CD pipelines
Develop and deliver secure coding training to engineering teams.

Senior-level individual contributor responsible for driving product strategy, roadmap, and go-to-market execution for cryptographic security portfolio, including data encryption, PKI, TLS, security SDKs/APIs, and FIPS 140-compliant solutions.



Key Responsibilities

Define and drive product vision, strategy, and roadmap for enterprise encryption, PKI services, TLS implementations, and key management solutions; engage directly with enterprise customers, federal agencies, and partners.

Serve as subject matter expert on FIPS 140 requirements and support CAVP/CMVP certification processes, including lab coordination.

Own product strategy for developer cryptographic SDKs and APIs, enabling encryption, certificate lifecycle management, and key management integration and oversee Secure Development Lifecycle (SDL) practices, including threat modeling, secure coding standards, cryptographic implementation reviews, and vulnerability management.

Drive release communications, customer-facing advisories, and cross-functional delivery for cryptographic SDK/API products.

Identify innovation opportunities including post-quantum cryptography readiness, Zero Trust integration, and crypto-agility

Tetragon Threat Detection Engineers primarily focus on creating and maintaining

Tetragon runtime security policies, based on the latest threat intelligence, vulnerability disclosures, and their own research.

Policies can act either as a mitigation to known vulnerabilities or as monitoring and protection against unknown security issues.

What youll do:

Develop and maintain Tetragon runtime security policies to ensure customers have good visibility of suspicious activity on their infrastructure and are protected against the latest emerging threats

Help design frameworks and architectures that allow customers to easily consume policies and understand their overall security posture

Monitor vulnerability disclosures (CVEs) and the latest threat intelligence to develop Tetragon runtime security policies

Work with software engineers at Isovalent and Cisco to improve and enhance the capabilities of Tetragon security policies

Interact with solution architects and customers as necessary to support and deploy Tetragon security policies in production

Publish content and give talks based on your work

You will have a strong technical understanding of the nature of identified vulnerabilities, be able to clearly express the risk posed by these issues, and be able to evaluate the merits of proposed solutions. You will have a good understanding of security risk and be able to prioritize work accordingly.

While this role requires technical security proficiency, you will also leverage your people skills to partner with development, release, and other security teams at Cisco to ensure that we address vulnerabilities promptly, document our security posture clearly, and are following industry best practices in our products. You will advocate for security best practices across your interactions with your colleagues.

You will have a strong technical understanding of the nature of identified vulnerabilities, be able to clearly express the risk posed by these issues, and be able to evaluate the merits of proposed solutions. You will have a good understanding of security risk and be able to prioritize work accordingly.

While this role requires technical security proficiency, you will also leverage your people skills to partner with development, release, and other security teams at Cisco to ensure that we address vulnerabilities promptly, document our security posture clearly, and are following industry best practices in our products. You will advocate for security best practices across your interactions with your colleagues.

we are looking for a AppSec Architect.
As an AppSec Engineer, you'll be the security partner for our R&D teams - reviewing code and architecture, closing the loop on vulnerabilities, and helping developers ship secure features faster. You'll also own our external vulnerability disclosure channels end-to-end, including leading our Bug Bounty program. This role is a great fit if you have a development background, enjoy digging into code, and want to use AI tools and agents to scale security impact across a large, fast-growing platform.
Responsibilities
Application Security & Secure SDLC
Partner with R&D: work directly with developers to identify, triage, and remediate application-level vulnerabilities.
Review code & architecture: assess security weaknesses and provide clear, actionable, developer-friendly remediation guidance both in the code and architectural levels
Own the scanning pipeline: run and tune SAST, DAST, and SCA tools across the codebase and CI/CD.
Shift security left: drive secure coding practices, threat modeling, and security requirements into the development process.
Review new features: support security reviews for new products, integrations, and third-party dependencies.

Required Senior Application Security Engineer
As a Senior Application Security Engineer, youll plan, build, and support efforts to strengthen security across the organization. As part of our Security & Platform organization, youll work across the software development lifecycle and the underlying cloud and platform environment.
Youll own application security throughout the SDLC, including security requirements, threat modeling, secure design reviews, code reviews, application and API security testing, and production hardening. The role combines application security, cloud and platform security, and security automation. Youll partner closely with Security, Engineering, Platform, DevOps, and IT teams to build secure-by-default systems and reduce risk at scale.
Youll also define and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance. This is a hands-on engineering role for someone who can move comfortably between architecture and threat modeling, code and API reviews, cloud and identity guardrails, CI/CD security controls, vulnerability remediation, and automation.
Responsibilities
Define, track, and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance.
Own application security across the SDLC, from security requirements and threat modeling through secure design, code reviews, testing, and production hardening.
Strengthen cloud and platform security by implementing scalable security controls, identity guardrails, and secure-by-default practices.
Partner closely with Security, Engineering, Platform, DevOps, and IT teams to reduce security risk and improve security practices across the organization.
Designing controls for multi-account or multi-cloud environments using Terraform, policy-as-code technologies such as OPA or Sentinel, or automated remediation workflows.
Experience running a Security Champions, bug bounty or responsible disclosure program, or delivering hands-on secure engineering training.
You'll translate technical risk into clear remediation guidance and influence engineering and leadership stakeholders through strong written and verbal communication.