לוח משרות דרושים הייטק אבטחת מידע / סייבר בתל אביב יפו

Required Senior Offensive Security Engineer
As a Senior Offensive Security Engineer, you will spearhead our offensive security operations and lead advanced threat research initiatives, playing a pivotal role in safeguarding our organization and customers from evolving cyber threats. You will develop and execute Red Team exercises, simulate real-world attacks, and identify security weaknesses in our systems and applications. We seek a highly skilled, proactive tech leader who thrives in challenging environments and is passionate about advancing security research and offensive strategies.
As a Senior Offensive Security Engineer, you will
Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against our infrastructure, applications, and cloud environments
Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities
Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving our security posture
Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses
Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises
Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning
Participate in incident response when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation
Continuously assess and improve security processes, playbooks, and threat detection mechanisms.

If you're an online user, youve likely encountered those bad ads that disrupt your quest for a safe and clean browsing experience. Step into the heart of GeoEdge, where our cybersecurity prowess is fuelled by a vibrant and friendly work environment. Our dynamic team are hard at work, not only protecting ad platforms, app developers, website owners, and users from the menace of bad ads, but doing so in an atmosphere that resonates with intelligence, creativity, and genuine friendliness. Our cutting-edge technology swiftly eliminates bad ads in Real-Time, before they can disrupt the online experience. As a tenacious bootstrapped startup with over a decade in the game, we thrive on challenges because we know that cyber challenges never rest and neither do we!
About the job Dive into the dynamic world of cybersecurity with GeoEdge, where innovation meets protection! As a Security Researcher specializing in Malvertising and web-based attacks, you'll embark on a thrilling journey of discovery and defence. Discover and dissect emerging attack tactics across diverse operating systems and browsers, spanning mobile to desktop. Join us at the forefront of innovation, where you'll collaborate with a top-tier R&D team to forge new strategies and tools that safeguard users across all major operating systems and browsers. Your findings won't stay hidden share your insights through compelling whitepapers and represent GeoEdge's groundbreaking research at prestigious industry conferences. If you thrive on investigating the unknown, analyzing cunning tactics, and developing cutting-edge defences, this is your chance to make a real impact. Ready to embark on this exciting tech journey with us? We can't wait to have you on board!
You Will
* Investigate, find, and analyze new and existing attacks and tactics in the field of Malvertising and web-based attacks.
* Take part in developing new strategies and mitigation to protect against new methods in the ever-changing threat landscape.
* Work to discover new attack vectors on all major OSs and Browsers Mobile and Desktop.
* Work closely with R&D to develop new tools and implement new mitigations in a multi layered security approach.
* Publish whitepapers about your research and represent Geoedge research at industry conferences.

XM Cyber is a leading hybrid cloud security company that’s changing the way organizations approach cyber risk. XM Cyber transforms exposure management by demonstrating how attackers leverage and combine misconfigurations, vulnerabilities, identity exposures, and more, across cloud and on-prem environments to compromise critical assets. With XM Cyber, you can see all the ways attackers might go, and all the best ways to stop them, pinpointing where to remediate exposures with a fraction of the effort. We are seeking a customer-facing Exposure Analyst to join our managed services team. As a Customer-Facing Security Analyst, you will play a critical role in delivering top-notch exposure remediation services to our clients and prospects. You will work closely with customers to assess, analyze, and mitigate exposures in their IT and cloud infrastructure, while providing expert guidance and maintaining strong client relationships. Responsibilities:
* Serve as the primary point of contact for our customers, establishing and maintaining strong relationships built on trust and exceptional customer service
* Conduct thorough assessments of customers' IT and cloud infrastructure to identify exposures, vulnerabilities, and potential security risks
* Configure, implement, and utilize XM Cyber platform to identify and prioritize exposures effectively
* Collaborate with cross-functional teams, including IT operations & devops teams to ensure timely and effective exposure remediation actions.
* Proactively monitor and track remediation progress, providing cadence updates and status reports to customers and addressing any concerns or questions
* Stay updated with the latest exposure management tools, techniques, and industry trends, and provide relevant recommendations to customers to strengthen their security posture

Our Incident Response team stands in the front line, helping our customers in protecting their most precious information on a daily basis. Were looking for a strong, self-motivated Analyst to join our Incident Response team.

As an Incident Response Cyber Analyst at Perception Point, you will ensure our customers get the best protection. You will be responsible for analyzing content scanned by our service and identifying patterns and trends. You will work closely with our Research and Engineering teams to improve our detection and protection.

Responsibilities
What will you do exactly?

Analyze threats that come through emails - Phishing, BEC, Malware & Scams.

Respond to investigation requests coming from admin users.

Build detections against new attack types and trends.

Enrich Perception Point's documentation and marketing content.

Help developers and researchers enhance the production system by giving insights and report bugs.

Work in shifts as part of a 24/7 operation including nights and days off.

We are looking for a highly motivated, VP Product, to join our product group.
Responsibilities:
Lead a team of Product Managers and Product Designer through the full product lifecycle: ideation, validation, delivery and continuous improvements
Work tightly with CTO and R&D team leads to define the scope, priority and flow of engineering work
Enable internal stakeholders, like Solution Engineering and Customer Success, through championing new features and use cases and driving product value
Cooperate with Marketing and Sales stakeholders to push clients for adoption and upsales
Be the focal points between Subject Matter Experts such as our Threat Research team, Engineering and Marketing to drive market-leading solutions

Were looking for a Product Manager that has strong technical capabilities, and with cybersecurity experience, specifically in the EDR domain. This person should understand IR, threat hunting and SOC flows on one hand, and Big Data, Endpoints, and protocols on the other hand. We are looking for a PM with business orientation, a "bigger picture", system and End 2 End understanding, with the drive, motivation and business accountability to drive our great EDR product to the next level.
This person will have experience driving product design for complex systems, taking into account scale, deployment, costs, business targets, vision, competition, customer requirements and suggesting a clear roadmap with prioritized well defined features that will drive growth, sustained product differentiation and business prosperity.
What will you do?
You will work on one of the most exciting platforms offers to the market.
You will learn how the endpoint product works, how the big data platform works and will then define end to end capabilities that will provide differentiation in the competitive market.
You will work closely with various R&D teams (Console, Big Data, Agents, Detection, Research), UX/UI designers, Knowledge owners, QA, and field-services (e.g. MDR and Support) to ensure successful product releases and high customer satisfaction while balancing fiscal responsibility meeting cogs and gross margin targets
You will be a part of a small, talented team that drives the product.
You will listen and talk with prospects and customers and understand their needs, their pain points and propose solutions.
You will write PRFAQs, Roadmap decks, EPICS, user stories, prioritize features, enhancements and sometimes bugs.

Required Application Security Engineer
We believe financial opportunity should be more personalized and fair. We develop innovative technologies that provide underserved and overlooked borrowers with better access to credit. From our employees to our dealers, partners, and borrowers, weve built a company and a culture around a resolute belief in the promise and power of diversity. We value independent and critical thinking.
As an Application Security Engineer, you will play a pivotal role in safeguarding our products against security threats and vulnerabilities. You will work closely with our development teams to integrate security best practices into the software development lifecycle, conduct thorough security assessments, and implement robust security measures to protect our applications and data.
Key Responsibilities:
Collaborate with development teams to integrate security controls into the software development lifecycle (SDLC)
Conduct regular security assessments, including code reviews, vulnerability scans, and penetration testing, to identify and remediate security vulnerabilities in applications
Design and implement security solutions to protect against common security threats, such as SQL injection, cross-site scripting (XSS), and authentication bypass
Conduct threat modeling and architecture security review
Develop and maintain secure coding standards and guidelines for application developers
Monitor and analyze security incidents and provide timely response and resolution
Stay current with emerging threats, vulnerabilities, and industry best practices in application security
Participate in security incident response activities and contribute to post-incident reviews and remediation efforts
Collaborate with cross-functional teams to ensure security requirements are effectively integrated into product development processes
Deliver secured development training to developers.

We are seeking a Business Continuity Manager to join our team and ensure our banking operations remain resilient in the face of potential disruptions.
Responsibilities:
- Develop, implement, and maintain the organizations Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).
- Conduct risk assessments and business impact analyses to identify vulnerabilities and critical operations.
- Collaborate with various departments to design continuity strategies that ensure the organizations ability to meet regulatory and operational obligations during disruptions.
- Facilitate regular BCP and DRP testing and simulations to assess plan effectiveness and make necessary adjustments.
- Monitor emerging threats and trends, providing recommendations for proactive risk mitigation.
- Ensure compliance with local regulations, banking standards, and industry best practices related to business continuity.
- Provide training and awareness programs to employees, ensuring they understand their roles in maintaining operational resilience.
- Serve as a primary point of contact during incidents, leading response and recovery efforts.

A global leader in hybrid cloud security. brings a new approach that uses the attackers perspective to find and remediate critical attack paths across on-premises and multi-cloud networks. The platform enables companies to rapidly prioritize and respond to cyber risks affecting their business-sensitive systems.As a Product Manager on the ssecurity posture team at  you will be responsible for the design and delivery of the major security features from end-to-end. Among other things, your position will involve the following: Define feature specifications based on familiarity with market, customer needs, and technical considerations Work closely with engineering teams to define product requirements and deliver high-quality products Communication with customers, aggregating feedback and promoting new features Collaborate with and support internal stakeholders, including sales, customer success, marketing, etc. Analyze competitive landscape Work on both inbound and outbound aspects of the product.

We are seeking a highly skilled and motivated Senior Security Engineer to join our dynamic Technical Security Operations team. In this role, you will be responsible for designing, implementing, and maintaining robust security systems across a variety of platforms, protecting the companys digital assets, and continuously evolving our security posture. You will collaborate closely with the CISO and other key stakeholders to ensure that security is deeply integrated into all aspects of the companys infrastructure and operations. You will be reporting to the Technical Security Operations team leader.

Key Responsibilities:

Lead the implementation, configuration, and ongoing maintenance of a variety of advanced security technologies, including but not limited to EDR, Proxy, DLP, email protection, and other critical security solutions.
Collaborate with the CISO and security leadership to align security strategies with business objectives, ensuring security requirements are properly designed and executed across the companys infrastructure.
Continuously monitor and analyze security systems, firewalls, logs, and relevant data sources to detect, analyze, and respond to potential security threats in real time.
Regularly assess and refine the security architecture to ensure it meets current and emerging threats while aligning with best practices.
Conduct thorough market research and spearhead proof of concept (POC) evaluations for new security tools, identifying opportunities to improve the organizations overall security posture.
Identify and assess emerging security threats through continuous monitoring, vulnerability assessments, and log analysis, proactively addressing risks before they materialize.
Enhance internal security controls, including identity and access management (IAM), key management, security monitoring, and cloud security posture management (CSPM).
Ensure security best practices and policies are adhered to across all systems and services.

We are looking for a SOC Analyst to join our fast-growing SOC team. Reporting to our OCC Director. The position includes monitoring and handling information security alerts while using the most advanced information security systems and tools.
The analyst will manage global information security events for the organization from one central location.


Responsibilities

Monitor and respond to security alerts and potential security incidents while taking reactive and proactive actions against cyber-threats and incidents.
Build and improve incident response framework and playbooks
Summarize events and incidents effectively to different constituencies, such as legal counsel, management and technical staff, both in written and verbal forms.
Collaboration with other critical teams in the organization for quick and effective incident response.
Collaborates with the owners of cyber defense tools to tune systems for optimum performance and to maximize detection and prevention effectiveness and minimize false positives.
Work alongside other security team members to search for and identify security issues generated from the network, including third-party relationships.

we are a leading software engineering intelligence platform that empowers engineering teams with actionable insights and workflow automation. Our solutions help improve developer productivity and experience, enable predictable project delivery, and drive profitable engineering. Join us to be part of an innovative company driving efficiency and excellence in software development.
We are looking for an experienced and proactive Application Security Engineer to join our Security team. This role is crucial for implementing and maintaining our Secure Software Development Lifecycle (SSDL), working closely with development and DevOps teams.

The ideal candidate will have a strong background in application security, with experience in secure coding practices, security tooling, and cloud infrastructure security.

Responsibilities:
Build and maintain our Secure Software Development Lifecycle (SSDL) by implementing industry-standard security tools and best practices throughout the development process.
Lead security assessments, including code reviews, vulnerability scanning, and threat modeling to ensure robust application security.
Work closely with development and DevOps teams to implement security practices and automate security testing in our cloud environment (AWS).
Monitor and respond to security incidents while maintaining and improving our security policies and standards.
Drive security initiatives across the organization and provide guidance on secure coding practices to development teams.
Design and implement security solutions to protect against common web application threats and vulnerabilities.
Deliver security awareness training and build a security-first culture across the engineering organization.

We are seeking a seasoned Intelligence Analyst to join our Services team within the Customer Success group.
Responsibilities
* Understand customer needs and help configure their environments on our advanced CTI platform.
* Assist customers in fine-tuning and optimizing their intelligence workflows.
* Investigate underground sources, threat actors, and cyber incidents.
* Identify and deliver potential risks posed to our customers.
* Work closely with customers (sometimes face-to-face) to train, assist, and support them in using our platform and with their varied use cases.

As an agentless device security company, network research is at the core of the Armis platform.

The team is responsible for all network-related research and feature development, and as such, has a direct impact on the companys progress and clients. The team is an integral part of the company and is in constant interaction with different teams. In your work, you will encounter various challenges - from researching IT networks to exploring medical and industrial environments, and much more. You will be required to explore different network architectures, research challenging protocols, and develop the processing of all of that into the system.

What you will do

End-to-end ownership of the deep packet inspection process, from initial research to code development and more.
Research network protocols in order to provide accurate insights to clients.
Research devices and complex network architectures by inspecting traffic, data, modeling, etc.
Develop core features based on network activity.
Work closely with the product, data, and other R&D teams.
Accompany POCs with clients and solve challenging problems in a time-sensitive environment.

You'll join a high-performing team responsible for fetching, manipulating, and displaying data to end-users. We pride ourselves on delivering a fast, smooth, and informative UI. Our work involves handling huge data sets and collaborating with a broader cohort of developers, product managers, QA engineers, data analysts, operations, and architects. We utilize a micro-service architecture with a Python backend and a React frontend.

What you'll do

Build and maintain a robust backend infrastructure and micro-services.
Develop and sustain an advanced web application infrastructure.
Architect new components and features.
Write code for both frontend and backend.
Collaborate with multiple development and data analysis teams on cross-company features.
Manage remote production environments (cloud services).
Participate in end-to-end development processes and contribute to horizontal projects within the group.