לוח משרות דרושים SOC/SIEM

We are looking for a Security Operations & Incident Response Engineer to join our fast-growing company at a breakthrough stage, where we are building our dream team with the most passionate and professional people in the industry.
Our security team blends cyber expertise with cutting-edge automation and AI. Were looking for someone who thrives in a fast-paced SaaS environment and is eager to make an impact.
Key Responsibilities
Security Engineering & Incident Response
Collaborate with the CISO and peers to shape and execute the companys security strategy.
Develop, maintain, and continuously improve security playbooks, processes, and response frameworks.
Manage the full lifecycle of security alerts from triage and investigation to response and escalation using our companys Case Management platform.
Perform access and configuration reviews across cloud, SaaS, and endpoint environments, and lead remediation efforts where needed.
SIEM & Automation Expertise
Develop and fine-tune detection rules in Splunk (or similar SIEM platforms) to increase detection quality and reduce false positives.
Utilizing our company to build and manage automated workflows to accelerate incident response and reduce MTTR.
Evaluate new security technologies and lead proof-of-concepts to improve existing controls.
Collaboration & Enablement
Partner with IT and Engineering to strengthen SaaS security practices.
Act as a trusted advisor across teams, promoting security awareness and best practices.
Communicate clearly in both Hebrew and English, providing documentation and updates to relevant stakeholders.

we are looking for a Senior SOC and IP Design Engineer, Google Cloud
Responsibilities
Define the SoC/block level design document such as interface protocol, block diagram, transaction flow, pipeline, etc.
Perform Register-Transfer Level (RTL) development (e.g., coding and debug in Verilog, System Verilog), function/performance simulation debug and Lint/Cyber Defense Center/Formal Verification/Unified Power Format checks.
Participate in synthesis, timing/power closure, and Application-Specific Integrated Circuit (ASIC) silicon bring-up.
Participate in test plan and coverage analysis of the block and SOC-level verification.
Communicate and work with multi-disciplined and multi-site teams.

We are looking for an experienced SOC Manager, for a leading Cyber security company. To lead the Security Operations Center ( SOC ) and drive the organization's cybersecurity strategy. The ideal candidate will have a deep understanding of SIEM platforms, threat detection, and incident response, with a proven track record in managing SOC teams and enhancing information security processes.
Key Responsibilities SOC Leadership & Operations
* Oversee daily SOC operations, ensuring efficient and timely threat detection, incident response, and threat mitigation.
* Develop and implement SOC policies, workflows, and playbooks to optimize security effectiveness.
* Lead proactive threat hunting and forensic analysis initiatives to strengthen organizational cyber resilience.
* Continuously assess and improve SIEM configurations, alert mechanisms, and automation capabilities. Team Management & Development
* Recruit, mentor, and manage SOC Analysts and Incident Responders, ensuring high levels of professional and operational performance.
* Provide ongoing technical guidance and professional development, fostering a culture of knowledge sharing and continuous learning.
* Build and maintain a dedicated SOC training framework, including regular updates on emerging threats, tools, and industry best practices. Incident Response & Threat Intelligence
* Lead cyber incident investigations, containment, and remediation efforts, coordinating with internal teams and external partners.
* Oversee the collection and integration of threat intelligence into SOC operations.
* Align SOC activities with leading cybersecurity frameworks such as MITRE ATT&CK, NIST, and other industry standards. Technology & Innovation
* Optimize SIEM, EDR, IDS/IPS, firewalls, and other security tools to enhance threat detection and response capabilities.
* Identify and implement automation and orchestration solutions to improve SOC operational efficiency.
* Stay up to date with evolving threats, new attack techniques, and emerging security technologies to continuously improve defense strategies.

We prioritize security, efficiency, and reliability across everything we do - from developing our latest TPUs to running a global network, while driving towards shaping the future of hyperscale computing. Our global impact spans software and hardware, including Google Clouds Vertex AI, the leading AI platform for bringing Gemini models to enterprise customers.

Responsibilities
Define the SoC/block level design document such as interface protocol, block diagram, transaction flow, pipeline, etc.
Perform Register-Transfer Level (RTL) development (e.g., coding and debug in Verilog, System Verilog), function/performance simulation debug and Lint/Cyber Defense Center/Formal Verification/Unified Power Format checks.
Participate in synthesis, timing/power closure, and Application-specific integrated circuit (ASIC) silicon bring-up.
Participate in test plan and coverage analysis of the block and SOC-level verification.
Communicate and work with multi-disciplined and multi-site teams.

we are looking for a Junior SoC IP Design Engineer, Google Cloud
Responsibilities
Define the SoC/Block level design document such as interface protocol, block diagram, transaction flow, pipeline etc.
Perform RTL development (coding and debug in Verilog, SystemVerilog), function/performance simulation debug and Lint/CDC/FV/UPF checks.
Participate in synthesis, timing/power closure and ASIC silicon bring-up.
Participate in test plan and coverage analysis of the block and SOC-level verification.
Communicate and work with multi-disciplined and multi-site teams.

Were looking for a Security Operations Engineer to lead our monitoring and detection efforts across our global FinTech environment. Youll be responsible for implementing and operating a robust SIEM solution, managing alerting pipelines, and ensuring security visibility across our SaaS platforms, cloud environments (AWS,GCP), and one physical on-prem location. This role is mission-critical to maintain our compliance, protect our customer data, and support our global operations.
Responsibilities:
Lead the implementation and ongoing operations of the company-wide SIEM solution
Build and tune detection rules, alerts, and incident workflows
Monitor cloud (AWS, GCP) and SaaS environments for anomalies and threats
Integrate logs from production systems, cloud platforms, SaaS tools, and on-prem infrastructure
Respond to security incidents and perform forensic investigations
Partner with Engineering, IT, and GRC to ensure logging and alerting coverage
Continuously improve our detection capabilities and response processes
Ensure monitoring meets compliance frameworks (SOC2, PCI-DSS, etc.)

We are looking for a MXDR Analyst to join the team of cybersecurity analysts monitoring services 24/7, tiers 1-2. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status. The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a can-do attitude.

Responsibilities:
Working across all areas of our SOC, including continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning, and forensics.
Solving security incidents in accordance with defined service level agreements and objectives.
Prioritizing and differentiating between potential incidents and false alarms.
Addressing clients enquiries via phone, email, and live chat.
Working side-by-side with customers, providing insightful incident reports.
Working closely with peers and higher-tier analysts to ensure that your analysis work meets quality standards.
Identifying opportunities for improvement and automation within the MXDR Operation Lead, and leading efforts to operationalize ideas.
Identifying and offering solutions to gaps in current capabilities, visibility, and security posture.
Correlating information from disparate sources to develop novel detection methods.

one of the leading cyber and information security companies in the field, is recruiting for the position Microsoft Information Security Specialist.
The role consists of:
* Design, design and implementation of complex security solutions
* Leading Microsofts POC processes
* Development, implementation and management of the field of security training
* Leading Microsoft and Cloud projects as the solution architect

:

We need an SOC analyst.
The job includes: monitoring faults on the organizations systems, staffing the organizations systems against cyber incidents 24/7.

we are looking for a Vehicle SOC Analyst (Student Position) to join the company's vSOC analysts team and focus on addressing potential vehicle and API security incidents, and creating and implementing, together with customers, strategies for containment and recovery.
As a Vehicle SOC Analyst you will use threat intelligence, previous similar attack vectors, and insights from internal research teams to pinpoint affected assets, the type of attack, and the extent of the attack.
The Vehicle SOC Analyst will assist in creating and maintaining playbooks and ensuring the correct training is in place so that team members can implement procedures and policies effectively.
Additionally, the Vehicle SOC Analyst will act as a security point of contact for managed services for customers and assist in troubleshooting real-time potential security alerts.
This role is part-time and based in Herzliya, Israel.
Responsibilities
Primarily responsible for security event monitoring, management, and response
Triage incoming alerts (initial assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security risks)
Provide administrative support for daily operational activities
Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring
Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives
Revise and develop processes and playbooks to strengthen the current Security Operations Framework
Identify threat vectors and develop use cases for security monitoring
Fine tune detection logic and machine learning profiles
Document all activities during an incident and provide leadership with status updates during the life cycle of the incident.
Support Root cause analysis (RCAs) process for events escalated to incident levels.

We are looking for a Vehicle SOC Analyst (Student Position) to join the vSOC analysts team and focus on addressing potential vehicle and API security incidents, and creating and implementing, together with customers, strategies for containment and recovery.

As a Vehicle SOC Analyst you will use threat intelligence, previous similar attack vectors, and insights from internal research teams to pinpoint affected assets, the type of attack, and the extent of the attack.

The Vehicle SOC Analyst will assist in creating and maintaining playbooks and ensuring the correct training is in place so that team members can implement procedures and policies effectively.

Additionally, the Vehicle SOC Analyst will act as a security point of contact for managed services for customers and assist in troubleshooting real-time potential security alerts.

This role is part-time and based in Herzliya, Israel.

Responsibilities:
Primarily responsible for security event monitoring, management, and response.
Triage incoming alerts (initial assessing the priority of the event, initial determination of incident to determine risk and damage or appropriate routing of security risks).
Provide administrative support for daily operational activities.
Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.
Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.
Revise and develop processes and playbooks to strengthen the current Security Operations Framework.
Identify threat vectors and develop use cases for security monitoring.
Fine tune detection logic and machine learning profiles.
Document all activities during an incident and provide leadership with status updates during the life cycle of the incident.
Support Root cause analysis (RCAs) process for events escalated to incident levels.