לוח משרות דרושים הייטק אבטחת מידע / סייבר ברמת גן

applying its data expertise to security, enabling companies to better understand and manage risk. We have both a rich data platform and security modules that tap into the platform to provide immediate benefits to our customers. We have built and patented a Data Fabric for Security. It curates data from hundreds of security and business tools and contextualizes that data to help companies understand and address their riskiest problems. Our Unified Vulnerability Management module is our first module to tap into the power of our data fabric, enabling companies to create custom contextualized risk scores and tailored workflows to reduce risk. If youre passionate about data models and helping companies improve their security posture, wed love to have your talents here at as we work to make the world a more secure place.
As part of this mission, we are looking for a Product Manager to join our highly experienced and dynamic team working to solve cyber security data challenges to lead our data integrations and connectors offering which is key to success. In this role, you will be responsible for driving the development and execution of our product strategy and roadmap to ensure successful delivery of our products.
Responsibilities:
Develop a deep understanding of the cybersecurity market, including customer needs, competitive landscape, and market trends
Partner with customers and prospects to align product features and roadmap with key use cases and needs
Collaborate with the engineering team to successfully prioritize and deliver great products
Partner with the business development team to create meaningful partnerships and deliver great integrations and added value to mutual customers
Partner with marketing to develop go-to-market strategies and launch plans for new products and features
Analyze product adoption metrics and customer feedback to inform product development and strategy
Communicate product plans and progress to internal and external stakeholders

Avalor is applying its data expertise to security, enabling companies to better understand and manage risk. We have both a rich data platform and security modules that tap into the platform to provide immediate benefits to our customers. We have built and patented a Data Fabric for Security. It curates data from hundreds of security and business tools and contextualizes that data to help companies understand and address their riskiest problems. Our Unified Vulnerability Management module is our first module to tap into the power of our data fabric, enabling companies to create custom contextualized risk scores and tailored workflows to reduce risk. If youre passionate about data models and helping companies improve their security posture, wed love to have your talents here at Avalor as we work to make the world a more secure place.
We are seeking a Big Data Engineer to join our team. In this role, you will play a crucial role in designing, building, and maintaining our query engine. You will play a crucial role in managing large volumes of data, optimizing data pipelines, optimizing data query, developing complex analytics capabilities on top of the data and ensuring the reliability and scalability of our data infrastructure.
Responsibilities:
Develop our ETL and query engines using Java / Spring Boot / Scala / Zio
Deliver high quality features for our high-scale web environment
Participate in design from scratch to production
Monitor the performance and cost of the services in production
Stay up-to-date with industry trends and best practices to continuously improve our technology stack and development processes
Integrate with other team members (backend/frontend/product/UX)

Were looking for an experienced DevSecOps Engineer to join our team and verify that our cloud environments and CI/CD flows are secured according to best practices.
As a SecDevOps Engineer, youll lead our security efforts around our dynamic and fast-paced production environments. Youll define and create operation tools and processes, and play a hands-on role in directly impacting work across all R&D flows.
Responsibilities:
Secure and monitor live production environments.
Perform security drill-downs and investigations.
Act as a subject matter expert and manage security incidents across all organizational environments.
Implement monitoring and alerting procedures and mechanisms.
Design and implement automation processes for security monitoring and incident response-related flows.
Design, implement, and develop security solutions according to R&D/production needs.
Work with our R&D teams and architects to design, enhance, and implement best-of-breed security topologies.
Identify new security threats, and trends by conducting continuous monitoring, vulnerability assessments, and log analyses.
Conduct regular internal and external security assessments, vulnerability scans, and penetration testing of systems and applications to identify and remediate security weaknesses and threats.
Manage our bug bounty program.
Maintain documentation of security processes, procedures, and configurations.
Generate regular reports on security metrics, compliance, and incident response activities for management and stakeholders.

his entry-level Security Engineer position is designed for individuals passionate about cybersecurity, with a focus on cloud security and operations. The role involves working within a security team to protect the organization's cloud environments, implement and maintain security systems, and contribute to incident response efforts. This position offers a unique opportunity to develop your cybersecurity skills in a hands-on environment, working with the latest technologies and security practices. The position demands a blend of technical skills, problem-solving abilities, and a proactive approach to security, providing a strong foundation for professional growth in the cybersecurity field.

Location: Tel Aviv

What will you do?

Cloud Security Operations - monitor and manage the security of cloud infrastructure, ensuring best practices are followed to safeguard against threats
Cloud Network Operations - oversee the security aspects of cloud networking, including network configurations, to ensure secure and efficient cloud operations
Develop and enhance monitoring and alert capabilities - design, implement, and refine monitoring systems to detect and alert on potential security incidents, enhancing the organization's ability to respond swiftly to threats
Implement & maintain security related systems and platforms - deploy and upkeep critical security infrastructure, tools, and platforms that support the organization's cybersecurity posture.
New vendors and tools security assessments - evaluate and assess the security of new vendors and tools, ensuring they meet the organization's security standards before integration
Being part of the incident response team - participate in the incident response team, contributing to the management and mitigation of security incidents to minimize impact on the organization

In this role, you will be responsible for executing the information security, governance, risk, and compliance strategies as defined by the CISO. This role requires a strong focus on the day-to-day management of security practices, GRC activities, and the integration of security within the software development lifecycle, ensuring the organizations policies, procedures, and systems are aligned with regulatory requirements and industry best practices.

We cant promise it will be easy, but definitely exciting and most importantly FUN.

This position is located in Israel, and youll be reporting directly to the CISO.

Lets get down to business:



The opportunity

Program Implementation: Execute the organizations information security and GRC programs based on strategies and objectives set by the CIO and acting CISO. This includes implementing security policies, controls, and standards across the organization.
GRC Activities Management: Facilitate GRC processes, including risk assessments, compliance audits, and policy management, ensuring alignment with external regulations and internal standards.
Secure SDLC Oversight: Work closely with the R&D and software development teams to integrate security measures throughout the SDLC, from requirements analysis to deployment, based on predefined frameworks and best practices.
Data Access and Policy Enforcement: Manage data access controls and policy enforcement mechanisms to safeguard sensitive information and ensure compliance with data protection regulations.
Tool and Platform Management: Oversee the effective use of the GRC platform for risk management, compliance tracking, and policy documentation. Ensure tools and technologies used for security and compliance are optimized and up to date.
Collaboration and Support: Collaborate with IT, R&D, legal, and other departments to support security and compliance projects. Provide expertise and guidance on implementing security and compliance requirements.
Incident Response Support: Assist in managing and refining the incident response process and procedures, ensuring readiness to respond to security incidents effectively.
Awareness and Training: Support the development and delivery of security awareness and training programs to promote a culture of security and compliance throughout the organization.