לוח משרות דרושים SOC/SIEM משרה מלאה

Were looking for a talented and motivated security automation engineer to join our team and take a leading part in planning and executing the security automations for the entire global SOC.

Responsibilities
Create services for the new and innovative SDL
Create end-to-end code-based solutions for the company, clients, and product under the innovation department
Create the SOC automation scripts and ops for the SOC
Create investigation flow using commercial and Open Source tools
Automate the data flow between multiple systems
Building detections using information from multiple systems APIs

Were looking for a talented and motivated security automation engineer to join our team and take a leading part in planning and executing the security automations for the entire global SOC.

Responsibilities
Led a team of security automation developers, ensuring the successful delivery of automation projects.
Mentor and support team members in technical and professional growth.
Ensure adherence to best practices in development and security standards.
Create services for the new and innovative SDL.
Create end-to-end code-based solutions for the company, clients, and products under the innovation department.
Create the SOC automation scripts and ops for the SOC.
Create investigation flow using commercial and Open-Source tools.
Automate the data flow between multiple systems.
Building detections using information from multiple systems APIs.

Our Networks Information Security team is looking for a Director of Security Operations Center (SOC) to join the Global Security Operations team. As the senior leader of the team, you will lead the Tel Aviv-based group of SOC analysts and engineers in support of the SOCs mission to protect the company from cyberattacks. You will be responsible for threat detection and incident response across all our internal environments. The scope of the Security Operations team spans both the Enterprise and Product environments.

This role requires a strategic leader with strong executive presence, excellent influencing skills, and the ability to collaborate effectively across various teams and, periodically, with C-level customers.

In this role, as a hands-on technical leader you will quickly become an expert in our Networks security products; primarily XSIAM, XDR, and Next Generation Firewalls. You will also facilitate the SOC teams feedback to the engineering teams to continually improve our world leading security products.

Many SOCs are drowning in false positive alerts, but our Networks SOC changed the game and re-invented how Security Operations should function. Our vigilant focus on automation, prevention and high-fidelity alerts enables our analysts to be more proactive. Our analysts do not spend their days sifting through alerts. Instead, their workloads are split evenly between (1) analyzing and responding to high fidelity alerts (2) proactive threat hunting and (3) contributing to a variety of different projects aligned to their personal interests. As the Director of Security Operations Center (SOC), you will promote and practice this philosophy.

As a people manager in our Networks, top candidates for this role will demonstrate an ability to effectively mentor individuals on a high performing team, build morale and maintain an educational environment where the knowledge and performance of the group is constantly advancing.

As a SOC Analyst Tier 1, you will be:
Work in shifts 247, including weekends and holidays
Proactively hunt and monitor cyber threats
Analyze raw data, traffic and TTPs to maintain a dynamic comprehensive threat model
Develop dashboard to handle security alerts and incidents
Work with forensic tools

As a SOC Engineer you will create custom detection rules with various security products and create playbooks (workflows) for information security use cases.

Working closely with our Unit 42 customer base to achieve their goals of maintaining great security on top of their entire security stack with XSIAM & Unit 42.

Your Impact:
Develop information security and incident response workflows, procedures and deploy them as Cortex XSIAM correlation rules & playbooks.
Work with customers worldwide on specific security product use cases, API documentations, playbooks & response options.
Work with customers to understand their specific workflows to help automate procedures & responses on a large scale.
Write custom detection rules on top of various security products in Cortex XSIAM.

As a SIEM Developer, you will create SIEM content to be delivered to our customers via the XSIAM marketplace.

XSIAM is an innovative new product we launched in March 2022 with a vision to create the autonomous security platform of the future, driving dramatically better security with near real-time detection and response.

More information about XSIAM can be found here.

Your Impact:
Develop SIEM content - parsers, data model mapping, correlation rules, and dashboards for leading information security and IT tools.
Collaborate with Security Architects, Software Developers, PMs, and Technical Marketing Engineers to create the best out-of-the-box content for our customers.
Drive a vital piece of a new product!

we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we have pioneered the world's first fully automated suite of vehicle inspection systems. At the heart of this innovation lies our advanced AI-driven technology, representing the pinnacle of machine learning, GenAI, and computer vision within the automotive sector. With over $200M in funding and strategic partnerships with industry giants such as Amazon, General Motors, Volvo, and CarMax, we stand at the forefront of automotive technological advancement. Our growing global team of over 200 employees is committed to creating a workplace that celebrates diversity and encourages teamwork. Our drive for innovation and pursuit of excellence are deeply embedded in our vibrant company culture, ensuring that each individual's efforts are recognized and valued as we unite to build a safer automotive world.
We seek a dedicated and proactive SecOps Engineer to join our DevOps team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure and R&D requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.
A day in the life and how youll make an impact: Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows.
* Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring.
* Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats.
* Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools.
* Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization.
* Work closely with stakeholders (CISO, COO, System Architects, DevOps Team Lead) to identify requirements and prioritize security needs.
* Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration.
* Perform or manage penetration testing initiatives to identify security weaknesses.

We are looking for a SOC Engineer that will lead the 24/7 ProActive SOC (Monitoring, Detect & Incident Response) services that are provided to our cloud-based (AWS, GCP, Azure) customers. Managing SOC Tier 1 operational in emphasis to enable the effective detection and response to cloud-oriented cyber security incidents of our customers.

As a Senior Cyber Engineer in the Security Operations Centre (SOC) function, the role provides technical leadership and strategic direction to Tier 1 cyber analyst teams.
This role will lead and develop the SOC capability, (people, technology, and process) to support the overall Threat Monitoring and Response team.
Manage and execute hands-on technical detection, analysis, containment, eradication, and remediation to support day-to-day SOC operations.
Provide guidance and mentorship to improve the skill sets of analysts and ensure the delivery of high-quality analysis and work products.
Ensure accountability and punctuality of security analysts, holding team members to the highest standards of professionalism.
Collect and report Cybersecurity metrics to support executive-level briefings on a daily, weekly, and monthly basis.
Establish and maintain trusted business relationships with the customer and other relevant stakeholders.
Conduct thorough analysis and quality assurance of the team's work product to ensure accuracy and effectiveness.
Responsibilities for managing advance (IR) Incident Response routines and escalation processing