לוח משרות דרושים SOC/SIEM, לחיפוש זה נמצאו 26 משרות

Requirements:
4-6 years of hands-on Manual QA experience, preferred in deep-tech industry (Storage / Cyber / Networking) - A must.
Engineering technical degree OR equivalent experience from a quality technological unit in the IDF.
Experience in linux or Mac OS testing - A must
API testing experience - A must.
AD (Active Directory) / IT / SOC / Networking knowledge and experience - A must.
Experience working with K8S or cloud or VM's based solutions- A must
Excellent troubleshooting skills.
Experience with the following technologies: PostgreSQL, virtualization and Python - Advantage
Self-learning skills and passion for new technology.
Team player.

Requirements:
Microsoft Active Directory & Certificate Authority (PKI).
Endpoint Security, SIEM, MFA/2FA, Cisco ISE/TACACS/RADIUS, Forescout (or equivalent).
Fortinet (FortiGate) firewalls and Cisco switches.
Strong networking knowledge (VLANs, routing, segmentation, access control).
Requirements:
5+ years of experience in System Integration, IT Infrastructure, or Cybersecurity.
Hands-on experience with complex system deployments and production environments.
Experience in defense or regulated environments - advantage.
Strong troubleshooting, communication, and stakeholder management skills.
Willingness to travel in Israel and abroad as required.
Willingness and ability to obtain a security clearance.

Requirements:
BSc in electrical engineering, computer engineering or computer science
7+ years of experience working in verification environment, tests, and test bench development (C/C++/SV)
TestPlan defining and Coverage-Driven Verification experience
Fullchip/SOC verification experience, strong system understanding
Good debug capabilities using the latest EDA tools
Knowledge in Industry Standard protocols such as AXI/ACEL/OCP/CHI
SW embedded experience, C/C++ skills - Advantage
Strong skills in scripting Perl/Python - Advantage
System Verilog writing skills, preferably in OVM/UVM - Advantage
3rd-party IPs integration testing experience - Advantage.

Requirements:
BSc in electrical engineering, computer engineering or computer science
7+ years of experience working in verification environment, tests, and test bench development (C/C++/SV)
TestPlan defining and Coverage-Driven Verification experience
Fullchip/SOC verification experience, strong system understanding
Good debug capabilities using the latest EDA tools
Knowledge in Industry Standard protocols such as AXI/ACEL/OCP/CHI
SW embedded experience, C/C++ skills - Advantage
Strong skills in scripting Perl/Python - Advantage
System Verilog writing skills, preferably in OVM/UVM - Advantage
3rd-party IPs integration testing experience - Advantage.

Requirements:
Graduates of a course / professional training in the field of information security - compulsory.
Background in the field of system / communication / information security - an advantage.
Training will be given on site.
Willingness to work 24/7 including Saturdays and holidays.
Integration in a large organization, promotion options.

Requirements:
BSc or higher degree in Electrical Engineering, Computer Science or Computer Engineering. Graduated with honors.
6+ years of experience as a system architect for large, high-end ASIC SoCs.
Experience with multidisciplinary HW/SW systems.
Team player with great communication skills.
Advantages:
Deep understanding of datacenter systems
Experience with architecture of processors, accelerators, high speed PCIe

Requirements:
At least one year of experience in a SOC/MDR or Managed EDR service, including night and weekend shifts.
Strong analytical thinker, problem-solving mindset, and ability to succeed in a dynamic environment.
Independent, bright and positive analyst who strives for excellence.
Proficiency and experience with scripting (Python).
Strong capabilities in drafting cyber security reports for clients.
Basic understanding of the lifecycle of advanced security threats, attack vectors, and methods of exploitation.
Hands-on experience working with SIEM technologies. (e.g. Splunk, QRadar, ArcSight, Exabeam, etc.)
Familiarity with common data and log sources for monitoring, detection and analysis (e.g., Event Logs, firewall, EDR).
Strong technical understanding of network fundamentals, common internet protocols, and system and security controls.
Basic knowledge of host-based forensics and OS artifacts.
Familiarity with cloud infrastructure, web application and servers - an advantage.
Fluent English (written, spoken) - a must. Another language - an advantage.

Requirements:
10+ years in cybersecurity, with significant incident response management experience.
Proven experience leading large-scale, cross-company cyber incidents, including incidents involving:
Multiple engineering and operational teams
Executive leadership and board-level visibility
Demonstrated experience acting as Incident Commander or equivalent role during major security events for at least 15 incidents in the past 5 years.
Strong understanding of:
Cloud and SaaS architectures
Identity, access control, and infrastructure security
Detection and response technologies (SIEM, EDR, cloud-native tools)
Offensive background
Ability to translate technical facts into business impact and risk-based decisions.
Critical Skills & Attributes
Crisis leadership: Calm, decisive, and structured under extreme pressure.
Authority without ego: Able to lead across departments without formal reporting lines.
Executive communication: Clear, concise, and credible with senior leadership.
Systems thinker: Understands how technical, human, and process failures compound during incidents.
Bias for action: Moves quickly while maintaining discipline and documentation.
Analytical thinking: Attention to details and ability to connect multiple dots into a concise and accurate picture.
Previous experience at Mandiant, Sygnia, CrowdStrike, Unit 42, or similar elite IR teams
Experience in crypto, fintech, custody, payments, or highly regulated environments
Hands-on background in forensics, threat hunting, or security engineering
Nice to Have
Experience in crypto, fintech, cloud infrastructure, or highly regulated environments
Experience supporting regulatory notifications and post-incident audits
Background in forensics, threat intelligence, or security engineering
Familiarity with NIST, ISO 27035, or similar incident response frameworks (practical application, not

Requirements:
Requirements:
* 3+ years of hands-on experience with Splunk Enterprise and/or Splunk Cloud.
* Strong experience writing advanced SPL queries, including joins, stats, tstats, transactions, and lookups.
* Experience developing and maintaining dashboards, alerts, reports, and saved searches.
* Experience implementing and managing data inputs via Syslog, HEC, and REST APIs.
* Strong understanding of indexes, sourcetypes, props.conf, and transforms.conf.
* Experience with Splunk performance tuning and search optimization.
* 2+ years of Python development experience.
* Experience working with REST APIs, JSON/XML parsing, and data normalization.
* Experience developing applications with React, including Hooks, Components, and State Management.
* Strong knowledge of JavaScript ES6+, HTML, and CSS. Advantages:
* Experience with Splunk SOAR.
* Experience in Cyber security, SIEM, or SOC environments.
* Experience integrating with cloud platforms (AWS, Azure, GCP).
* Experience integrating security tools such as EDR, IAM, and CI/CD solutions.
* Experience working with Git and CI/CD pipelines.
* Familiarity with Docker and Kubernetes.
* Splunk certifications (Power User, Admin, Architect).
* Academic degree in Computer Science, Information Systems, Cyber security, or a related field

Requirements:
At least 1 year of experience as a SOC analyst
Knowledge in security analysis technologies (e.g., SIEM, FW, AV, IPS or EDR)
Experience in technical-oriented intelligence collection from open sources
Knowledge of cyberattack methodologies and tools
It would be great if you also have:
Experience in querying and basic coding (e.g., SIEM languages)
Knowledge in Windows, Linux and security components
Completion of cybersecurity courses and certificates.