לוח משרות דרושים מהנדס סייבר במרכז, לחיפוש זה נמצאו 49 משרות

We are seeking a talented and versatile Senior Threat Detection Engineer to work with us in Herzliya with expertise in iOS and Android security. As a key member of our engineering team, you will play a crucial role in designing and developing complex compromise detection solutions and providing advanced professional services to customers to assist them in determining whether their mobile devices have been compromised.

Responsibilities:
Design and develop mobile focused on-device and off-device malware and compromise detection solutions that enable forensic analysis, including infrastructure, features, classification logic, tools, proof of concepts, heuristics and signatures for Android and iOS devices.
Represent the Company in front of customers by providing advanced professional services including malware and indicator of compromise analysis to determine if devices have been compromised, as well as professional training sessions.
Develop and implement components and features using C, C++, Python, assembly, Java, JavaScript, Go, Rust and other programming languages as needed, while employing secure coding practices and ensuring optimal performance, responsiveness, and cross-platform compatibility in line with product specifications.
Represent the company in front of potential customers and partners by conducting technical demonstrations, participating in meetings and other pre and post sales engagements.
The position may require local and international travel.

We are looking for an AI AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AI AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You wont just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. You will also be responsible for working closely under the AppSec Architect.
This role is based out of our Tel-Aviv site and will report to the AppSec Architect
What you will be responsible for:
Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents.
Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams.
Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines.
Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often.
Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
Document: Draft requirement documents for security products and innovative technologies.

Required Cyber Field Engineer
If you want to grow your skills, make an impact, and be part of an innovative team, this is the place for you.
About The role:
As a Cyber Field Engineer (CFE), you'll sit at the intersection of cutting-edge AI-driven security technology and real customer impact. You'll be the trusted expert who helps some of the world's most security-mature organizations understand exactly how an attacker could compromise their environment - and how to close that gap before it's exploited. This is a hands-on, high-visibility role for someone who wants to work at the frontier of offensive security and applied AI.
Roles and Responsibilities:
Develop deep expertise in the platform and represent it professionally in front of customers
Lead technical sessions with customers, guiding them through findings and remediation best practices
Serve as a trusted product expert, supporting customer education and long-term relationship success
Identify opportunities to expand our engagement with customers, in collaboration with the Sales team
Bring field insights back to internal teams to help continuously improve our platform and services
Stay current with the evolving cybersecurity and AI threat landscape
Travel regularly across the country to meet customers on-site as part of the role
Embrace a dynamic, evolving scope of work - typical of a fast-growing, category-leading company.

Senior hands-on offensive security professional responsible for delivering complex, objective-driven Red Team and Adversary Simulation engagements for local and global clients. The role combines deep technical execution with the ability to independently take ownership of Red Team projects, including threat-informed adversary emulation, covert Red Team operations, Purple Team exercises, attack path analysis, and advanced penetration testing across enterprise, cloud, application, identity, and hybrid environments. The position requires strong offensive tradecraft, sound technical judgment, and the ability to manage assigned engagements from planning through delivery, while contributing to reusable tooling, knowledge sharing, technical quality, and client advisory. It requires the ability to translate realistic attack scenarios into clear insights that improve clients prevention, detection, response, and overall cyber resilience.
Job description
Take ownership of assigned Red Team, adversary emulation, Purple Team, and threat-led offensive security engagements, from planning and rules of engagement through execution, reporting, and client debrief.
Emulate realistic threat actors and execute multi-stage attack chains, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command and control, defense evasion, and achievement of agreed business objectives.
Design threat-informed scenarios and map adversary tactics, techniques, and procedures to MITRE ATT&CK and other relevant threat-led testing frameworks.
Assess enterprise environments across Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms, identity systems, and hybrid infrastructure, chaining weaknesses into realistic attack paths and business impact.
Develop, customize, and maintain offensive tooling, scripts, payloads, command-and-control infrastructure, and operational tradecraft while applying appropriate safety and operational-security controls.
Work closely with SOC, detection engineering, incident response, and security architecture teams to validate detection and response capabilities and translate observed gaps into actionable improvements.
Communicate directly with clients, present technical and executive results, and provide risk-based recommendations aligned with the clients threat landscape and business priorities.
Contribute to technical quality reviews, knowledge sharing, research initiatives, reusable methodologies, and the continued development of the teams Red Team capabilities.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.

Required Principal AI Security Engineer
Job Description
Role
This is a hands-on architecture role: deep research, secure systems design, and prototyping, applied across product lines with minimal direction and broad latitude to set the technical agenda. You will set platform-wide direction for securing the AI development lifecycle, define the security architecture, agents, and models operating within it, and represent our AI security point of view externally. You'll be a technical authority other engineers and other teams look to on emerging AI-specific threats, working in close partnership with the AI security research team - drawing on their findings and feeding real-world attack surfaces back into their agenda.
What you'll do:
Own the security strategy and architecture for our Agentic AI ecosystem, LLMs, and models across product lines
Lead threat modeling for the most complex and novel GenAI/agentic surfaces: cross-agent autonomy, multi-agent tool orchestration, and emerging attack classes not yet standardised in the industry
Set the architectural standard for securing model/RAG/data pipelines platform-wide, including access-control and data-boundary models that other teams are expected to build against
Define what "secure-by-design" means for agentic systems, and drive adoption across engineering orgs
Represent our AI security posture externally (standards bodies, industry publications, conferences) and internally to executive stakeholders
Mentor and technically guide engineers on AI-specific security work

We seek a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is our awareness, response, and investigation capability for post-release vulnerabilities in our-developed products and service offerings.
This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform-vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events.
This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them-and will use that fluency to lead fixes to completion under incident pressure. You will help shape how we respond to product security vulnerabilities at scale and the technical rigour of the entire response capability.
The coverage provided by this role is:
Sunday: 10:00 - 18:00 UTC.
Monday: 08:00 - 16:00 UTC.
Tuesday: 08:00 - 16:00 UTC.
Wednesday: 08:00 - 16:00 UTC.
Thursday: 08:00 - 16:00 UTC.
Due to the nature of incident response and the needs of the business, coverage may change. Additional coverage outside of stated hours may be required in response to significant incidents.
Key Responsibilities:
Lead Through Significant Security Events:
Demonstrate technical and organisational leadership during these events-bringing structure and clear decision-making under pressure.
Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events.
Reduce Exposure Window:
Drive coordinated response across affected releases, balancing risk and remediation feasibility.
Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organisational boundaries.
Verify fix completeness and guard against incomplete mitigations before release.
Drive the CVE & Coordinated Disclosure Process:
Collaborate with external security partners, vendors, and researchers on coordinated disclosures, aligning timelines and messaging across parties.
Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication.
Represent PSIRT's technical position in multi-party coordinated disclosures and researcher engagements.

We seek a Staff Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities:
Triage and Resolve Bug Bounty Reports:
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication:
Act as our primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards:
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.
Lead Advanced Security Work Beyond Triage:
Conduct variant hunts to find related instances of reported vulnerabilities before they are discovered externally.
Perform original platform security research to surface issues ahead of external researchers.

As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory.
You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support our company's ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide.
What Makes This Role Unique at our company
Clinical AI with real-world patient impact - our company operates in an environment where security is not only about protecting systems and data. Security decisions can affect clinical workflows, care-team coordination, customer trust, and patient safety.
Highly sensitive healthcare data - You will help protect medical imaging data, clinical metadata, PHI/PII, customer environments, and AI-driven workflows that require strong privacy, access control, data protection, and auditability.
Security for AI/ML and medical imaging systems - The role extends beyond traditional AppSec into AI/ML security, data pipeline protection, inference integrity, model-related risks, and misuse scenarios in clinical workflows.
Complex healthcare integrations - our company integrates with hospital systems and healthcare workflows that may include PACS, EHR, VNA, RIS/worklists, scheduling systems, and communication platforms. You will help secure the data flows, authentication models, APIs, and deployment patterns behind these integrations.
Engineering-driven security in a regulated environment - This is not a checkbox compliance role. However, because our company operates in healthcare and clinical AI, security must be practical, evidence-based, and aligned with regulatory, customer, and quality expectations.
Cloud-native scale and production ownership - You will work with modern cloud infrastructure, Kubernetes, containers, CI/CD pipelines, identity and access management, observability, vulnerability management, and software supply-chain controls.
Responsibilities
Secure product and clinical workflows end-to-end - Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features.
Drive secure-by-design architecture - Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling.
Strengthen cloud-native security - Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management.
Embed security into the development lifecycle - Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls.

Shape the Future of AI Infrastructure with our company
This is a rare opportunity to join one of the fastest-growing infrastructure companies in tech history, right at the epicenter of the AI revolution.
Recognized by Forbes as "the future of the market," our company is building the foundational enterprise software powering the AI era. We engineer platforms that capture, catalog, refine, and protect massive datasets across data centers, edge, and cloud, making real-time analytics, AI training, and inference simpler and faster than ever before.
Our explosive growth is fueled by relentless engineering innovation, a customer-first mindset, and a team of fearless company ronauts who thrive on solving computing's hardest problems. Join us at this pivotal moment in technology history and make a lasting impact on how the world processes data.
We are looking for a hands-on, forward-thinking Security Engineer to join our growing security team. In this role, you will lead offensive security initiatives, build internal automation using modern workflows and AI agents, and manage cloud and infrastructure risks. You will conduct penetration tests across our architecture, analyze deep protocol flaws, write custom tooling, and take security findings from discovery all the way to resolution.
Core Responsibilities:
Penetration Testing & AI Automation: Conduct comprehensive penetration tests across all components of our architecture-ranging from Web APIs down to S3 protocols-and design systems to automate routine pentesting using AI tools.
Protocol & Flaw Analysis: Leverage a deep understanding of network and application protocols to identify architectural and implementation flaws, using AI prompts and modern tooling to uncover edge-case security risks.
Tooling & Process Automation: Write custom internal security tools and leverage AI agents to automate repetitive tasks, incident responses, and continuous security workflows.
Secondary Responsibilities:
Cloud Security Monitoring: Monitor and manage cloud security posture using CNAPP (Cloud-Native Application Protection Platform) tools, maintaining oversight of our cloud infrastructure and containerized environments.
Vulnerability Management & Remediation: Run and maintain regular SAST and DAST scans across operating systems, Docker containers, and source code. Own security findings from discovery through code remediation and validation.
Jira & Delivery Tracking: Manage, prioritize, and promote security Jira tickets through the full lifecycle-from initial triage and assignment through to final delivery and verification.

We're looking for a Senior Security Lead to partner closely with our CISO in driving our security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate.

This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works in our company.

Key Responsibilities:

Partner with the CISO on our security strategy and roadmap, and own the execution of key initiatives

Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through

Translate business objectives into scalable security programs and controls

Act as a key stakeholder in security governance, risk management and decision-making

Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives

Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments

Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency

Foster a culture of accountability, operational excellence and security ownership across the organization

we are looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them.
You will strengthen threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster.
This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure corporate and cloud environments.
You will also help shape how secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution-and want the autonomy and cross-functional access to make security improvements stick-this role is built for you.

Required Senior Security Engineer
As a Senior Enterprise Security Engineer, you will be a foundational architect of our security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment.
Your work will be critical in ensuring we become globally recognized for secure, unparalleled corporate travel and expense management.
What Youll Do:
Vulnerability Management & Exposure Reduction: Architect, manage, and scale the end-to-end vulnerability management program. Oversee continuous asset discovery, vulnerability scanning, threat exposure assessment, and risk-based prioritization (CVSS, EPSS, threat intelligence). Partner closely with infrastructure, engineering, and IT teams to establish SLAs, streamline patch management workflows, and validate effective remediation.
Security Incident Response & On-Call Rotation: Participate in the security engineering on-call rotation. Serve as a responder responsible for identifying, scoping, triaging, managing, and mitigating security incidents, followed by leading thorough post-incident reviews and root-cause analyses.
Detection & Automation Optimization: Help improve and maintain our existing detection pipeline by providing feedback on alert quality, reviewing current monitoring coverage, and performing direct tuning in SIEM platforms to reduce noise and increase signal fidelity. Evaluate existing SOAR playbooks and workflows, offering recommendations and performing targeted updates to streamline response processes.
Identity Governance & Access Control: Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise.
Email Security: Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity.

As our VP Security & Research, you'll report directly to the CEO and own malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts GeoEdge on the stage at the world's top security conferences, and partner with Product, R&D, data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of GeoEdge for customers, partners, and the wider security community. What You'll Do
* Set the strategy and roadmap for malvertising detection and security research
* Lead, mentor, and grow the security research team
* Drive AI and agentic innovation in detection, working with R&D and data Science to turn research into production-grade capabilities
* Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem
* Own detection quality: push for uncompromising precision, coverage, and speed
* Drive original research and publications, and represent GeoEdge at leading security conferences
* Partner with Product, R&D, data Science, Customer Support, and other key functions in the organization and outside of it
* Report to the CEO and management on research impact, threat landscape, and priorities