לוח משרות דרושים Senior Security Specialist בתל אביב יפו

Required Senior Offensive Security Engineer
As a Senior Offensive Security Engineer, you will spearhead our offensive security operations and lead advanced threat research initiatives, playing a pivotal role in safeguarding our organization and customers from evolving cyber threats. You will develop and execute Red Team exercises, simulate real-world attacks, and identify security weaknesses in our systems and applications. We seek a highly skilled, proactive tech leader who thrives in challenging environments and is passionate about advancing security research and offensive strategies.
As a Senior Offensive Security Engineer, you will
Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against our infrastructure, applications, and cloud environments
Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities
Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving our security posture
Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses
Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises
Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning
Participate in incident response when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation
Continuously assess and improve security processes, playbooks, and threat detection mechanisms.

At our company, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We unite around common goals while respecting personal approaches, believing that fulfilled individuals create a thriving, vibrant workplace. We take pride in helping tens of thousands of customers around the globe succeed with Apple.
we offer remote, in-office, and hybrid roles. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive.
This role is based in Tel Aviv, Israel. We are only able to accept applications for those based in Israel or have sponsorship to live and work in Israel.What you'll do:
At our company, we empower people to be their best selves and do their best work. Security Researcher plays a critical role in advancing we mobile security research efforts. This role is responsible for investigating and analyzing security vulnerabilities, developing cutting-edge techniques for mobile device forensics, and contributing to the development of innovative solutions that protect our clients' mobile ecosystems and to publish security research. What you can expect to do in this role:
iOS Security Analysis: Conduct in-depth analysis of iOS security mechanisms, including the secure boot process, sandboxing, code signing, keychain, secure enclave, and data protection. Identify weaknesses and potential vulnerabilities within the iOS ecosystem.
Vulnerability Assessment: Perform comprehensive vulnerability assessments of iOS applications using industry-standard frameworks such as MITRE, OWASP Mobile Security Testing Guide, and tools like Burp Suite. Identify and document security issues and propose mitigation strategies.
Attack Vector Analysis: Explore potential attack vectors that could compromise iOS devices and applications. Develop a deep understanding of the iOS threat landscape and post-exploit scenarios to anticipate and counteract security threats effectively.
Reverse Engineering: Utilize reverse engineering techniques and tools such as IDA Pro, Hopper, and Ghidra to dissect iOS applications and firmware. Analyze binaries, disassemble code, and reverse engineer software components to uncover vulnerabilities and weaknesses.
Privilege Escalation Research: Investigate iOS privilege escalation techniques and vulnerabilities, staying ahead of potential threats. Research and develop countermeasures to protect against privilege escalation attacks.
Development Contributions: While not mandatory, the ability to develop security-related tools, scripts is an advantage. Contribute to the creation of custom tools or enhancements that aid in mobile forensic analysis and security assessments.
Documentation and Reporting: Create detailed reports and documentation of security findings, methodologies, and recommended solutions. Communicate research results effectively to both technical and non-technical stakeholders through written reports and presentations.
Collaboration: Collaborate closely with cross-functional teams, including fellow researchers,software developers, and cybersecurity experts, to share insights, collaborate on security initiatives, and contribute to the development of secure mobile solutions.
Stay Current: Continuously monitor and stay up-to-date with the latest developments in iOS security, vulnerabilities, and exploits. Contribute to threat intelligence by sharing relevant information with the team.

We are seeking a curious, innovative, and experienced individual to join our Threat Hunting team. You will analyze extensive data from various SaaS providers, uncover hidden patterns in logs, and identify anomalies that signal malicious activities. This role involves refining our threat detection rules to thwart elusive cyber attacks, devising new methods to detect threats, enhancing cloud cybersecurity expertise, and detecting attacker campaigns across more than 150 SaaS providers.

We are looking for a Cloud Threats Hunter / Researcher.
WHAT YOU'LL DO:
Hunt and investigate novel malware and emerging cloud threats and develop detections and tools to protect customers from those threats.
Collaborate with the R&D team to transform research insights into product features.
Develop procedures and playbooks to be used when emerging threats are detected.
Work with customers in response to requests related to suspicious activities or potential incidents.
Develop best-practices and TI data bases on research findings, and write external facing materials based on your research.