לוח משרות דרושים הייטק אבטחת מידע / סייבר בהרצליה

We're looking for talented and inspired individuals to join our team and attack our products with the goal of better safeguarding our users. The job involves performing security reviews of low-level software and its interface with the SoC HW.

Customers security, privacy, and safety are very important to us. Your job will be to analyze our products and attempt to break them in ways that could undermine these goals, including when the attacker is in possession of the device. In order to do that, you will be required to:
- Examine new SoC silicon security features and demonstrate if/how they can be defeated.
- Examine embedded systems and find security vulnerabilities in us or 3rd party firmware and bootloaders.
- Develop tools to automate or focus the effort of performing such security reviews.
- Propose new ideas for security hardening and mitigations.
- Stay abreast of modern hacking techniques against our products, including those where the attacker is in close proximity or possession of the device.

Our Perks:
Incredible benefits
Hybrid and flexible
Multiple career advancement opportunities
As a Researcher, you will be:

Work with top-notch researchers using the latest technologies
Research low-level mechanisms, finding and exploiting vulnerabilities and circumventing modern mitigation techniques

As a SOC Analyst Tier 1, you will be:
Work in shifts 247, including weekends and holidays
Proactively hunt and monitor cyber threats
Analyze raw data, traffic and TTPs to maintain a dynamic comprehensive threat model
Develop dashboard to handle security alerts and incidents
Work with forensic tools

Our Security team is looking for a security-savvy person to join us as an Application Security Tech lead Engineer to lead the product and application security design as well help validate our services and environments according to the highest security standards. You will work closely with our R&D and Product teams, and solve complex security problems.
The ideal candidate is highly motivated, always eager to learn, and demonstrates a can do' attitude. You will play a pivotal role in safeguarding our products against security threats and vulnerabilities. You will need to have a combination of troubleshooting, technical, and communication skills, as well as the ability to handle multiple tasks that will include project and technical work. This role will provide career growth opportunities as you develop/acquire new security skills in the course of your duties.
What you'll do:
Act as a tech leader mentoring application security engineers, DevSecOps engineers, and developers.
Collaborate with developments to integrate security controls and standards into the software development lifecycle (SDLC)
Conduct threat modeling and architecture security review
Conduct regular security assessments, including secure product design, code reviews, vulnerability scans, and penetration testing, to identify and remediate security vulnerabilities in applications
Stay current with emerging threats, vulnerabilities, and industry best practices in application and product security
Participate in security incident response activities and contribute to post-incident reviews and remediation efforts
Collaborate with cross-functional teams to ensure security requirements are effectively integrated into product development processes
Deliver secured development training to developers.

Required Application security specialist
About the department
The infosec department is responsible for the Confidentiality, Integrity and Availability of the company's information, systems and processes. It's in charge of establishing controls, building trust and relationships with other departments in the company and making sure that acceptable risk levels are met. The infosec department is working in a huge scale, cloud based environment and supporting the company in delivering the best game experience for over 400 millions gamers world wide.
Responsibilities:
Own our product security: Games and Business solutions developed in-house
Work closely with our R&D teams to Drive a secure development lifecycle and integration of security features into all phases of games and app design and development
In charge of creating Threat Modeling for new games and applications developed: Identify security requirements, Pinpoint security threats and vulnerabilities, assess risks criticality and lead mitigation plan and initiatives to minimize risk to an acceptable level
Own SAST and DAST systems, run scans, analyze results and lead mitigation plans
Research new application security technologies and features and their relevance for our development efforts.

Required Security Researcher
Full-time
Hybrid
Todays world is crime-riddled. Criminals are everywhere, invisible, virtual, and sophisticated. Traditional ways to prevent and investigate crime and terror are no longer enough
Technology is changing incredibly fast. The criminals know it, and they are taking advantage. We know it too.
For nearly 30 years, the incredible minds at our company around the world have worked closely together and put their expertise to work, to keep up with constantly evolving technological and criminal trends and help make the world a safer place with leading investigative analytics software solutions.
We are defined by our dedication to doing good and this translates to business success, meaningful work friendships, a can-do attitude, and deep curiosity.
As a Communication Protocols Security Researcher, your day will be filled with stimulating tasks. Youll start by catching up on the latest in communication protocols. Then, youll dive into identifying vulnerabilities and developing strategies to exploit them. Youll also spend time brainstorming with your team to come up with innovative solutions to complex security problems.
As an employee you will:
Protocol Analysis: Conduct in-depth research and analysis of various communication protocols to understand their design, implementation, and potential vulnerabilities.
Reverse Engineering and Vulnerability Research: Apply reverse engineering techniques to deconstruct systems and understand their inner workings and Conduct research to discover new vulnerabilities in various systems and technologies.
Solution Implementation: Translate your research findings into practical solutions and implement them in our products.
Product Development: Contribute to the advancement of our products by staying abreast of the latest developments in the field and innovating new features and improvements.
Communication Protocols and Wireless Attacks: work with a variety of communication protocols such as WPA2, WAP3, BLE, BT classic, NFC, RFID, satellite protocols, and more.

Required Military Intelligence Expert
Full-time
Hybrid
Todays world is fraught with unrest. Threats come from every directionsome invisible, virtual and highly sophisticated. Traditional approaches to preventing and investigating terror, crime and military threats are no longer sufficient.
Technology is advancing at an incredible pace. Adversaries are leveraging these advancements to their advantage. We understand this challenge and have made it our mission to stay ahead of the curve.
For nearly 30 years, the brilliant minds at our company have collaborated globally to address evolving challenges. By combining their expertise with cutting-edge investigative analytics software, they help customers to make the world a safer place.
To support this vital mission, we are seeking a dynamic and experienced professional to join our team and take on the following responsibilities:
As a Military Intelligence Expert you will:
Use your deep insights into military operations to shape the methodologies underpinning our products.
Create a comprehensive, holistic methodology to help customers maximize the value of the company portfolio, focusing on solutions.
Collaborate with product teams and strategists to identify and define future innovations in Military Intelligence, ensuring we remain a leader in the field.
Act as an expert advisor to the sales team, helping build strong customer relationships, open new opportunities, and foster confidence in our solutions.
Develop and implement tailored methodologies to address the unique challenges of National Security and Law Enforcement Agency organizations.
Support the growth and management of the Intelligence Research Center, focusing on regional and specialized topics.
Lead market research efforts to stay informed on trends and insights within the Military Intelligence domain and represent us at global conferences, workshops, proof-of-concepts (POCs), and more.

Required Principal Security Research Manager
Are you looking for a challenge that puts you at the center of the worldwide Platform? Are you passionate about finding security breaches and vulnerabilities? Do you have Offensive mindset? 
Azure Networking is one of the core organizations that build Azure, the worlds largest network, leading digital transformation, empowering, and connecting enterprises and individuals around the world. The team in Israel is specializing in Network security, developing services that protect the Azure platform, the users and apps running on top of it. 
A world leader in security and is obsessed with making sure that our platform and services are secure, and we can protect our customers and their workloads. We are expanding our offensive team. The team will focus on making sure our services are built with a security-first mindset by proactively looking for breaches and vulnerabilities in the across Azure architecture and services, to make sure Azure is safe, secure, and reliable. 
Our mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities:
Build and manage a team of security researchers tasked with helping our engineers ship the most secure product and infrastructure possible.
Manage the work of a security research team across multiple concurrent projects.
Be a subject matter expert, leveraging a broad and current understanding of security to devise new protections and exploit mitigations.
Collaborate with other security and product teams to improve security, and articulate the business value of security investments for designing and developing new security mitigations and defenses.
Identify security vulnerabilities in a wide variety of key services across Azure services, network protocols and architecture.
Interaction with the security ecosystem in and outside.

we are looking for a Cloud Security Research Team Leader.
Responsibilities:
Team Leadership
Lead and mentor a team of top notch cloud security researchers.
Foster a culture of innovation, collaboration, and excellence within the team.
Provide technical guidance and support to team members.
Research and Development
Conduct advanced research in cloud security, focusing on emerging threats, vulnerabilities, and mitigation strategies.
Analyze logs and behavior of user activities on Cloud Environments & SaaS Applications
Hunt threat actors & insider threats
Optimizing existing algorithms to reduce false positives and increase the value of our products
Lead the publications of cyber security oriented blogs and articles
Drive the development of new security technologies and methodologies for cloud environments.
Stay updated with industry trends and advancements in cloud security.
Collaboration:
Collaborate with product management, engineering, and other stakeholders to implement your team latest research
Work closely with development teams to integrate security features into our product
Communicate research findings and recommendations effectively
Security Strategy:
Contribute to the development and implementation of cloud security strategies and policies
Assess and mitigate risks associated with cloud deployments and operations.
Ensure compliance with industry standards and regulations related to cloud security

We are looking for a Cloud Security Researcher.
Responsibilities:
Research for new security issues/vulnerabilities in Cloud Environments & SaaS Applications
Write proof-of-concept, threat detections, and analytical algorithms
Analyze logs and behavior of user activities on Cloud Environments & SaaS Applications
Hunt threat actors & insider threats
Collaboration with R&D groups within the company to implement your latest research
Evaluate and recommend steps to harden customer's Cloud Environments & SaaS Applications
Optimizing existing algorithms to reduce false positives and increase the value of our products
Writing cyber security oriented blogs and publications
Follow and Evaluate new security threats, attack vectors, and technologies

we are looking for a passionate Product Manager who is seeking to make an impact in leading and managing Threat Detection, our cybersecurity platform.
Youll be taking part in building features and projects that will help customers protect their files, emails and data from cyberattacks and insider threats. The ideal candidate is an experienced Product Manager with cybersecurity domain knowledge.
Responsibilities:
Gather product requirements from customers and various stakeholders.
Manage the product backlog. Write clear use cases and requirements, detail the functionality which will be executed by the engineering team.
Work with development teams to determine technical solutions, prioritize work, adapt to new information and ensure high quality deliverables.
Effectively collaborate with UI/UX teams to create state of the art user interface.
Work with security experts like security researchers, SOC analysts and incident response teams to understand customers requirements and difficulties.

We are looking for a skilled and motivated Security Analyst Team Leader. Your primary responsibility will be to lead a team dedicated to combating email threats. This involves managing and overseeing experienced analysts who specialize in researching and implementing threat detection heuristics, as well as guiding junior analysts responsible for labeling. Key tasks include defining behavior-based risk indicators, serving as the email security SME (subject matter expert) for the Data Science team, and researching innovative phishing detection techniques. You will play a crucial role in building something from scratch.
Responsibilities:
Team Leadership
Lead and mentor a team of analysts
Lead projects all the way from inception to production
Foster a culture of innovation, collaboration, and excellence within the team
Provide technical guidance and support the team members
Lead the publications of cyber security-oriented blogs and articles
Research and Development
Defining risk indicators for common email attacks
Optimizing existing processes to achieve faster and more accurate labeling, using LLM or other innovative methods
Stay updated with industry trends and advancements
Serving as the email security SME (subject matter expert) for the Data Science team
Collaboration:
Work closely with data science teams
Work closely with other security research teams

We are looking for a Security Research Team Leader.
Responsibilities
Team Leadership:
Lead and mentor a team of top-notch security researchers
Lead research projects all the way from inception to production
Foster a culture of innovation, collaboration, and excellence within the team
Provide technical guidance and support to team members
Research and Development:
Defining detection models for common enterprise tech stacks such as Active Directory, proxy servers, firewalls, file servers, Azure active directory and more
Conduct product research to identify relevant data to be added as part of new threat models
Enhance various cross-platform capabilities, including privileged access discovery.
Conduct advanced research on emerging threats and mitigation strategies
Optimizing existing algorithms to reduce false positives and increase the value of our products
Stay updated with industry trends and advancements
Lead the publications of cyber security oriented blogs and articles
Collaboration:
Collaborate with product management, engineering, and other stakeholders to implement your team latest research
Work closely with development teams to integrate security features into our product
Communicate research findings and recommendations effectively
Work closely with other security research teams

We are in search of a skilled and motivated Security Researcher to join our team.
As a Security Researcher, your primary focus will be on creating and researching anomaly and behavioral based threat models, dissecting attack techniques, and leading proactive threat-hunting endeavors across a spectrum of domains, including cloud infrastructures (with a specialized emphasis on Office 365 and Azure), network security, proxies, firewalls, DNS, Active Directory, Azure Active Directory, and SharePoint, and product security.
Your role will require a profound comprehension of security concepts and a forward-thinking approach to identifying and writing detections for potential risks.

We are seeking an experienced and proactive Senior Application Security Engineer with Coding\Scripting experience(DevSecOps experiences) to join our Product Security team within the R&D department. This role is crucial for designing and implementing a robust Secure Software Development Lifecycle (SSDL) process and technology stack. The ideal candidate will have a strong background in product security, coupled with expertise in DevOps, application security, and infrastructure management. The role also involves close collaboration with DevOps, development, and SOC teams.
Responsibilities:
Design, build, and implement the Secure Software Development Lifecycle (SSDL) process, integrating security into all stages of the software development lifecycle.
Develop and oversee the implementation of security tools and technologies, including SAST, DAST, SCA, SNAP, ASPM, CDR, vulnerability scanners, and Kubernetes (K8s) security tooling.
Validate and secure Infrastructure as Code (IaC) using tools like Terraform, ensuring compliance with security best practices.
Contribute directly to the development and security of CI/CD pipelines and IaC code.
Collaborate closely with DevOps, development, and SOC teams to embed security practices into product development from initial design through to deployment.
Conduct security assessments, code reviews, and vulnerability analysis using CVSS or similar methodologies to identify and mitigate risks.
Automate security testing and compliance checks across Azure DevOps pipelines and cloud environments, focusing on Azure, AWS, and Kubernetes.
Provide expert guidance on secure coding practices and help establish security policies and standards.
Monitor and respond to security incidents across both Windows and Linux environments, driving continuous improvement in security posture.
Lead projects to completion, motivate team members, and foster a collaborative and high-performing team environment.
Exhibit strong self-driven learning abilities, staying current with industry trends and technologies.
Proactively identify and drive security initiatives, taking ownership and pushing boundaries to ensure the highest security standards.
Implement and manage metrics and monitoring systems, ensuring comprehensive visibility into security performance. Experience with building a security data lake is an advantage, particularly with Azure Analytics and Sentinel.