לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 421 משרות

We seek an experienced offensive security leader to build and lead the Product Red Team. This newly established function emulates real-world attacks against synthetic customer instances to identify vulnerabilities, misconfigurations, and design gaps before external threat actors or researchers discover them.
This role requires an operator who has led offensive security operations in high-consequence environments-covert intelligence or military settings preferred-with proven ability to establish operational standards, navigate ambiguous mission parameters, and influence cross-functional stakeholders around complex security trade-offs.
You will build upon this team's charter, engagement frameworks, and rules of engagement with other teams. You will help drive our product security and response posture through adversary emulation, vulnerability research, exploit development, and collaboration with other offensive and defensive teams.
Key Responsibilities:
Establish Operations Objectives, Policies & Procedures:
Own Product Red Team's operation objectives and engagement selection criteria in alignment with product security roadmap and risk register, CISO directives, and company priorities.
Expand upon rules of engagement, threat actor emulation standards, testing policies, and protocols.
Establish operational security procedures for covert operations, detection evasion, and incident response protocols.
Create escalation procedures and approval frameworks for high-risk engagements.
Own campaign selection processes, engagement proposal templates, and findings documentation and readout standards.
Define Engagement Framework & Success Metrics:
Design and implement engagement types: vulnerability risk assessment, product security assessments, and ongoing adversarial campaigns.
Establish and report on technical and operational success metrics: kill chain coverage, remediation velocity, and detection engineering insights.
Create reporting templates-technical findings, executive briefings, engineering recommendations-that drive actionable remediation.
Define boundaries and operational testing windows in coordination with product engineering and detection engineering teams.
Lead Offensive Operations Team:
Build team capability across threat actor emulation, exploit development, persistence mechanisms, supply chain security, and AI-specific attack vectors (prompt injection, model manipulation, data poisoning).
Mentor team on operational security tradecraft, documentation discipline, and risk management under ambiguous conditions.
Support team members in their time zones, spanning from US West Coast to India.

We seek a Senior Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities:
Triage and Resolve Bug Bounty Reports:
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication:
Act as our primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards:
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.

We are looking for a Staff Security Engineer to be a core contributor on this team.
Security R&D operates in two complementary modes: open contribution to product engineering - writing code alongside product teams where security expertise adds value - and developing its own security capabilities, including internal tooling, externally facing product features, AI-powered security automation, and third-party integrations.
This is a new team being stood up in Petah Tikva, Israel, co-located with our AI Security Research team. You will help shape the teams engineering practices and technical foundation from day one.
This role reports to the Sr. Engineering Manager, Security R&D.
What You Will Do
Build Security Capabilities:
Design and develop security tooling, automation, and platform services that operate at our enterprise scale.
Contribute code directly into our viceNow product engineering codebases, embedding security capabilities where they have the highest impact.
Build AI-powered security automation by integrating in-house models and third-party services into production workflows.
Leverage our platform - Agent Framework runtime, ACL enforcement, data layer, and workflow engine - to create security capabilities that external vendors cannot match.

As a Mobile Threat Analyst at our company, you will use your internet-fluency, online resourcefulness, broad areas of interest, technical skills, AI-driven methodologies, and hacker-like thinking to solve puzzles and lawfully access difficult-to-come-by open-source data from the deep web. Responsibilities include:
*  data mining and advanced analysis - conducting high-level Open Source Intelligence
* Collaboration with technical teams
* Analyzing malicious activities online, getting to their sources & distribution methods
* Analyzing large, complex datasets using statistical, scripting, and AI-based techniques.
* Researching new online platforms to discover methods for automating data collection.
* Monitoring third-party websites, forums, messaging app channels, dark web communities, and emerging platforms to uncover malicious activities.
* Translating analytical findings into actionable recommendations for detection systems and enforcement strategies.
* Generate intelligence reports often regarding highly technical concepts and TTPs.

As a Security Data Analyst within our R&D team, you will shape how we understand data, uncover trends, and drive strategic decisions across . Working closely with cross-functional teams, you will turn complex datasets into actionable insights that directly influence our business growth and product direction.

Your Chain of Impact:

Identify, analyze, and interpret trends or patterns in complex datasets to uncover actionable insights.
Develop scalable data processes and infrastructure to support internal stakeholders.
Build and maintain dashboards, reports, and KPIs to monitor and improve company performance.
Translate business questions into analytical models and craft compelling data visualizations that tell the story.
Partner with cross-functional teams to understand business needs and design data-driven solutions.

As a Security Researcher, you will be responsible for leading in-depth research into emerging blockchain threats and vulnerabilities and developing real-time detection and mitigation capabilities in close collaboration with our engineering and product teams.

Key Responsibilities

Conduct in-depth security research on blockchain protocols, smart contracts, and decentralized applications.
Identify and analyze security vulnerabilities, exploits, and attack vectors in Web3 protocols.
Collaborate with the engineering team to integrate detection capabilities into our on-chain exploit detection system.
Create proof-of-concept (PoC) exploits and simulations to help test and validate threat scenarios.
Stay current with emerging threats, new technologies, and industry best practices in information security..

We are seeking an experienced Researcher to join our team dedicated to Android malware research. This role presents an exciting opportunity to conduct comprehensive malware analysis, detect emerging threats, and contribute to our understanding of the Android threat landscape.
The ideal candidate demonstrates a positive, proactive attitude and excels as a reliable team player with strong technical skills in Android malware analysis.
Key Responsibilities:
Conduct in-depth Android malware research and reverse engineering
Detect and document emerging Android malware trends and attack vectors
Analyze Android applications for malicious behavior
Write detection rules and develop automation processes for Android malware identification
Collaborate with team members and share knowledge across departments
Perform static and dynamic analysis of Android malware samples
Document findings and contribute to threat intelligence reports.

We are looking for an Android Security Research Team Leader to manage a team of super-talented malware researchers and reverse engineers. Our teams help top-level companies improve their security mechanisms using our insights on the latest malware trends, adversarial shifts, and new techniques. Combining intelligence, sophisticated forensics, and data science helps us catch the most relevant and up-to-date threats and threat actors.
What will you do?
Lead and mentor a team of security researchers across multiple projects
Own long-term malware and security research of a variety of Android frameworks, technologies, and domains
Detect large-scale malware campaigns and help bring their operations down
Review and enhance your team's research reports and code
Collaborate with other teams throughout the organization
This role is a management position with 40% hands-on technical work
Find the bad guys - take them down.

We are seeking a highly motivated and technically proficient Senior Penetration Tester to join our security research division. This role is dedicated to performing advanced offensive security assessments against the biggest companies in the world
You need to be independent, attentive to details, organized, eager to learn new things, and like to research and solve problems
What youll do:
Lead and execute comprehensive, technically rigorous penetration tests targeting complex web applications, modern API architectures, and enterprise systems for organizations with significant global presence.
Engage in sophisticated Red Team projects, including the identification of undisclosed API endpoints, development of novel bypass techniques for established security controls, and lateral movement within target environments.
Contribute substantively to the design, development, and maintenance of proprietary internal security tools and automation frameworks to enhance the efficacy and efficiency of offensive operations.

We are hiring Intermediate Malware Researchers to analyze and review malware applications. Candidates should have a background in cybersecurity and software development.
The role includes training in malware analysis and detection and provides exposure to various malware threats and techniques. Researchers will combine technical and intelligence findings to reach accurate verdicts and assist in the bulk removal of malicious applications. The position requires adaptability and proactive identification of emerging malware trends.
We are seeking candidates who are willing to learn, can perform effectively under pressure, and maintain high professional standards.

We are seeking a Cyber Project Manager We are looking for a skilled Cyber Project Manager to lead technological and methodological projects in the fields of information security and cyber, with a strong focus on ERP -related cyber aspects. This role requires experience in managing complex technology projects, leading cyber initiatives end-to-end, working with internal and external technical stakeholders, and translating security needs into clear project plans, procedures, and deliverables. A full-time position based mainly in Central Israel, with occasional travel to additional sites across Israel. The role requires availability beyond standard working hours.
Key Responsibilities:
* Lead ERP -related cyber activities and manage the cyber aspects of the ERP project.
* Manage schedules and coordinate cyber department activities to provide security responses and solutions for the project.
* Serve as the main project interface with the cyber department and lead all cyber-related project activities.
* Define and write project work plans, procedures, and cyber-related documentation.
* Manage end-to-end cyber projects according to accepted methodologies and organization-specific methodologies.
* Lead cyber projects for additional systems, from initiation and POC stages through implementation.
* Plan, lead, and deliver employee awareness activities in information security and cyber.
* Manage cross-functional stakeholders in a matrix environment, both inside and outside the department.
* Work with internal technical teams and external stakeholders, including vendors and implementers.
* Travel as required between organizational sites.

We are seeking a Principal Security Researcher to set the technical direction for a critical area of our identity protection charter, drive multi-quarter research agendas end-to-end, and raise the bar of the team through mentorship and influence. You will partner with engineering, PM, data science, and other research teams across our company to shape strategy, and you will represent our research externally through publications, talks, and industry engagement. We expect our Principal researchers to fluently leverage Generative AI and to actively shape how the team applies it - turning AI assistance into a durable force multiplier across investigation, detection authoring, and customer protection at our company scale.
our companys mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
Set the technical direction for a major area of our identity protection research charter, owning the multi-quarter strategy from threat landscape framing to shipped detection and measurable customer protection impact.
Drive multiple concurrent end-to-end research initiatives, breaking ambiguous problems into tractable workstreams and unblocking the team on the hardest technical questions.
Lead deep investigation and research of data across identity and adjacent sources to surface novel threats, attacker tradecraft, and detection opportunities others miss.
Stay ahead of the evolving attacker landscape and design robust, sophisticated detection logics across the entire kill-chain - raising the bar on quality, coverage, and resilience to attacker evasion.
Influence across organizational boundaries - partner with product management, engineering, data science, and peer research teams to shape product strategy, define new identity protection capabilities, and align roadmaps on a data-driven foundation.
Mentor and grow other researchers, elevating the technical bar of the team through code/design review, research coaching, and apprenticeship on complex investigations.
Shape how the team and discipline leverage Generative AI - define patterns, evaluate tools, and build durable AI-assisted workflows that scale research throughput across data triage, hypothesis generation, code and KQL authoring, and detection synthesis.
Represent our company Security externally through high-quality research publications, conference talks, blog posts, and engagement with the broader security research community.

We are seeking an experienced Senior Security Researcher, excited by finding new attacks, to join our research team and focus on detecting and autonomously protecting against sophisticated enterprise attacks. The role spans novel attack-technique research, big-data analysis over rich sensor data, identifying the optics needed to expose malicious behavior, and crafting detection and protection logic so compromise does not go undetected. We expect our researchers to fluently leverage Generative AI to accelerate every stage of their work - from hypothesis generation and code prototyping to large-scale data triage and detection authoring.
our companys mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
Own end-to-end large research projects that deliver identity protection against the most prevalent threats in the landscape, from initial threat hypothesis to shipped detection and customer protection impact.
Conduct in-depth investigation and research of data across multiple identity and additional sources to identify threats and sophisticated attack incidents.
Keep up to date with the latest trends in cyber-attacks and create robust, sophisticated detection logics across the entire kill-chain.
Collaborate with product management, security, and engineering teams across the company to design innovative solutions and new identity protection capabilities and validate their effectiveness using a data-driven approach.
Collaborate with data science teams to understand, identify, and implement detection gaps, capabilities, assumptions, and improvements.
Leverage Generative AI tooling to scale research throughput - accelerating data triage, hypothesis generation, code and KQL authoring, literature review, and the synthesis of attacker tradecraft into shippable detections.
Demonstrate thought leadership and engage and enlighten others through compelling, meaningful content and informative sessions.