לוח משרות דרושים הייטק אבטחת מידע / סייבר עבודה היברידית, לחיפוש זה נמצאו 58 משרות

We are seeking a highly skilled and motivated Detection & Response Engineer to join our Cyber Defense team. This role serves as the primary subject matter expert (SME) for security incidents involving our products and cloud environments. Working closely with Product Security, Engineering, IT, and Cloud teams, this position plays a key role in incident response, security improvements, and strengthening the organization's ability to detect, respond to, and mitigate cyber threats.
The ideal candidate brings strong technical expertise in incident response, security operations, product and cloud security, combined with a deep understanding of our products, architecture, and business processes. This individual will support complex investigations, drive security initiatives, and promote product security knowledge across the Cyber Defense team.
Responsibilities:
Serve as the primary SME and escalation point for security incidents involving our products and cloud environments.
Partner with Product Security, Engineering, IT, and Cloud teams to investigate incidents, drive remediation efforts, and improve security posture.
Maintain deep knowledge of our products, architecture, and platform changes to ensure investigation and detection readiness.
Identify and implement improvements to monitoring, detection capabilities, investigation workflows, and response processes.
Lead and support product and corporate security initiatives, ensuring security requirements are incorporated into new features, systems, and operational processes.
Mentor Cyber Defense team members and develop product-focused documentation, training materials, and operational best practices.

Required Principal AI Security Engineer
Job Description
Role
This is a hands-on architecture role: deep research, secure systems design, and prototyping, applied across product lines with minimal direction and broad latitude to set the technical agenda. You will set platform-wide direction for securing the AI development lifecycle, define the security architecture, agents, and models operating within it, and represent our AI security point of view externally. You'll be a technical authority other engineers and other teams look to on emerging AI-specific threats, working in close partnership with the AI security research team - drawing on their findings and feeding real-world attack surfaces back into their agenda.
What you'll do:
Own the security strategy and architecture for our Agentic AI ecosystem, LLMs, and models across product lines
Lead threat modeling for the most complex and novel GenAI/agentic surfaces: cross-agent autonomy, multi-agent tool orchestration, and emerging attack classes not yet standardised in the industry
Set the architectural standard for securing model/RAG/data pipelines platform-wide, including access-control and data-boundary models that other teams are expected to build against
Define what "secure-by-design" means for agentic systems, and drive adoption across engineering orgs
Represent our AI security posture externally (standards bodies, industry publications, conferences) and internally to executive stakeholders
Mentor and technically guide engineers on AI-specific security work

We seek a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is our awareness, response, and investigation capability for post-release vulnerabilities in our-developed products and service offerings.
This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform-vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events.
This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them-and will use that fluency to lead fixes to completion under incident pressure. You will help shape how we respond to product security vulnerabilities at scale and the technical rigour of the entire response capability.
The coverage provided by this role is:
Sunday: 10:00 - 18:00 UTC.
Monday: 08:00 - 16:00 UTC.
Tuesday: 08:00 - 16:00 UTC.
Wednesday: 08:00 - 16:00 UTC.
Thursday: 08:00 - 16:00 UTC.
Due to the nature of incident response and the needs of the business, coverage may change. Additional coverage outside of stated hours may be required in response to significant incidents.
Key Responsibilities:
Lead Through Significant Security Events:
Demonstrate technical and organisational leadership during these events-bringing structure and clear decision-making under pressure.
Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events.
Reduce Exposure Window:
Drive coordinated response across affected releases, balancing risk and remediation feasibility.
Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organisational boundaries.
Verify fix completeness and guard against incomplete mitigations before release.
Drive the CVE & Coordinated Disclosure Process:
Collaborate with external security partners, vendors, and researchers on coordinated disclosures, aligning timelines and messaging across parties.
Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication.
Represent PSIRT's technical position in multi-party coordinated disclosures and researcher engagements.

We seek a Staff Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities:
Triage and Resolve Bug Bounty Reports:
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication:
Act as our primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards:
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.
Lead Advanced Security Work Beyond Triage:
Conduct variant hunts to find related instances of reported vulnerabilities before they are discovered externally.
Perform original platform security research to surface issues ahead of external researchers.

we are looking for a Lead Endpoint Researcher.
What You'll Do
Research AI coding agent runtimes, reverse-engineer how tools such as Claude Code, Cursor, Copilot CLI, Codex, and emerging agents execute commands, access files, spawn processes, and interact with the operating system.
Design agent sandboxing architectures that safely constrain filesystem access, networking, process execution, credentials, and other sensitive endpoint capabilities.
Explore and implement OS-native isolation mechanisms across macOS, Windows, and Linux, including containers, namespaces, sandbox profiles, virtualization, restricted processes, and permission models.
Build endpoint "harnesses" that allow TokenShift to intercept, control, observe, and modify agent execution flows.
Design infrastructure for deploying and running local LLMs across heterogeneous endpoint fleets, accounting for operating system, CPU architecture, GPU availability, memory constraints, and hardware acceleration.
Evaluate local inference runtimes and model formats such as llama.cpp, MLX, ONNX Runtime, Ollama, vLLM-compatible runtimes, and emerging alternatives.
Develop mechanisms for model discovery, installation, versioning, updates, health monitoring, and lifecycle management across large numbers of developer machines.
Research hardware-aware model selection and routing, deciding which models can run effectively on Apple Silicon, NVIDIA GPUs, Windows workstations, Linux machines, CPU-only environments, and other endpoint configurations.
Build benchmarks that measure model latency, throughput, memory consumption, startup time, resource contention, and developer experience on real endpoint hardware.
Investigate security boundaries between local models, cloud-hosted models, agents, MCP servers, shells, and enterprise resources.
Collaborate with the core CLI and platform teams to take endpoint research from prototype through production.
Track the rapidly evolving AI agent, sandboxing, and local inference ecosystems and proactively identify technologies should support.

We're looking for an AI researcher to take an integral part in research into how these models behave, how they should be evaluated, and how they can be deployed and used more efficiently across real engineering workloads.
This is a deeply technical research role with direct product impact.
You'll study frontier and open-source models, develop evaluation frameworks, investigate inference and model optimization techniques, explore local deployment strategies, and help answer questions such as:
Which model should handle a particular task?
How much capability do we lose when we quantize it?
Can a smaller local model replace a frontier API for a specific workload?
How should models be routed across latency, cost, privacy, and quality constraints?
How do we measure whether one model is actually better than another for agentic software engineering?
Your work will directly shape model strategy and the intelligence behind our AI infrastructure products.

we are looking for a Security Researcher - Hybrid.
You will have room to pursue open-ended research, explore new ideas, and independently lead complex projects from an initial question through validation and publication. Staying current with emerging technologies and understanding how they change the attack surface are central to our work.
As a Security Researcher, you will be:
Pursuing original security research to discover vulnerabilities, uncover new attack techniques, and strengthen protection for the modern workspace.
Reverse-engineering software to support the product and conduct vulnerability research.
Designing experiments and developing proofs of concept and tools to validate research findings.
Translating attack techniques into detections and validating their effectiveness
Publishing research and communicating findings to technical and non-technical audiences.
Tracking new AI platform, browser, IDE, and desktop capabilities, and testing for new attack paths or detection gaps

we are looking for a Senior Security Researcher.
As a member of our research team, you will investigate emerging attack surfaces across operating systems, cloud environments, and modern enterprise technologies.You will reverse-engineer complex software, discover vulnerabilities, and conduct original, publishable research.Researchers are encouraged to explore new ideas and turn promising findings into published research shared with the global security community.
As a Senior Security Researcher, you will be:
Researching of latest threats on Web API technologies, microservice architectures and containerized applications.
Conducting deep security research across operating systems, cloud environments, enterprise software, and emerging technologies
Developing proofs of concept and research tools
Leveraging AI to scale and accelerate the research workflow
Publishing research via technical blogs, whitepapers, and top-tier security conferences
Collaborating with detection and product teams to translate research into security capabilities

Were seeking a Senior Application Security Engineer who is first and foremost a teacher, advisor, and enabler for our development teams.
Rather than owning security alone, youll embed secure-by-design thinking across engineering by mentoring developers, guiding architecture decisions, and making secure development intuitive and frictionless.
Youll serve as the go-to partner for developers and engineering leaders, offering clear direction, practical solutions, and hands-on mentorship that strengthens our secure SDLC.
Who You Are:
A proactive self-starter with deep expertise in application and cloud security
Passionate about secure development and enabling engineers through thoughtful guardrails
Clear and confident communicator who can influence across technical and non-technical teams
Curious about emerging threats and excited by the challenges of blockchain security
Committed to excellence, with a strong sense of ownership and a drive to build secure systems that scale
What Youll Actually Be Doing:
Mentor, coach, and educate developers on secure coding through workshops, training sessions, pair reviews, and ongoing guidance
Lead and scale a Security Champions program embedded within engineering teams
Facilitate threat modeling sessions and design reviews, partnering with teams early in the process to improve security outcomes
Collaborate with engineering leadership to ensure secure architecture patterns, API security practices, and design principles are built in from day one
Integrate and tune developer-friendly AppSec guardrails into CI/CD pipelines (SAST, SCA, IaC, secret scanning) while minimizing noise for developers
Translate vulnerabilities into clear, actionable remediation guidance that developers can easily implement
Support security awareness across engineering by building engaging internal content, best-practice playbooks, and reusable patterns
Partner with compliance teams to produce documentation and SDLC evidence supporting FFIEC, PCI DSS, and SOC 2 requirements
Stay current on emerging threats, developer tooling, and secure engineering patterns - sharing insights regularly with the team.

Required Mid-Level, Security Engineer
The Role
This role focuses on ensuring the security and compliance of cloud infrastructure by implementing and maintaining robust security controls across AWS environments. The position involves automation for security monitoring, adhering to best practices, and collaborating cross-functionally with other teams.
Who You Are:
A strong individual contributor who takes pride in delivering high-quality security outcomes while collaborating closely with peers and stakeholders. You are able to build trust, provide thoughtful input, and continuously grow your technical and operational expertise.
You are passionate about exploring new technology and using it to make an actionable impact to the future of fintech. You can balance the needs of the business and the team's goals with strong value for code quality and adherence to implementing best practices.
A highly skilled AWS Security Engineer with additional FinOps expertise to ensure the security and compliance of our cloud infrastructure. You are able to implement and maintain robust security controls across AWS environment. You are passionate about best practices, automation for security monitoring, and collaborating with other teams.
What Youll Actually Be Doing
Cloud Security Implementation: Contribute to the design and implementation of security measures across AWS environments to ensure systems are secure, compliant, and aligned with industry best practices. Including implementation, automation and development of security policies
Conduct regular security assessments, control testing, and audits to proactively identify risks and vulnerabilities (and support remediation efforts with partner teams)
Collaboration with Internal Teams: Work closely with internal teams to integrate security best practices into development and operational workflows
Security Automation & Infrastructure Management: Design and implement automation strategies for security monitoring, auditing, and incident response
Cost Efficiency through Security: Contribute to cloud cost management by optimizing cloud resources without compromising on security.
Incident Response & Threat Management: Participate in incident response efforts to support timely identification, analysis, containment, and remediation of security threats. Contribute to post-incident reviews, help maintain incident response playbooks, and support internal teams by sharing learnings and updated procedures.

We're looking for a Senior Security Lead to partner closely with our CISO in driving our security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate.

This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works in our company.

Key Responsibilities:

Partner with the CISO on our security strategy and roadmap, and own the execution of key initiatives

Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through

Translate business objectives into scalable security programs and controls

Act as a key stakeholder in security governance, risk management and decision-making

Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives

Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments

Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency

Foster a culture of accountability, operational excellence and security ownership across the organization

Were looking for a highly motivated and versatile Security Researcher who thrives on exploring cutting-edge technologies, analyzing security trends, and building innovative solutions to safeguard our customers. You are a natural problem solver, a fast learner, and passionate about staying ahead of the curve in cybersecurity.
About the role:
Evaluating Security Threats and Vulnerabilities
Evaluate and analyze emerging threats, vulnerabilities, and attack vectors to identify risks to applications and systems.
Work with users, partners, colleagues, and experts to understand security challenges, technology trends, competition, and industry developments.
Articulate security risk hypotheses and construct compelling cases for mitigation strategies.
Conducting Technological and Security Research
Analyze, research, and deep-dive into security technologies, tools, and products, both existing and emerging, to understand their potential impact.
Identify innovative ways to utilize these technologies to strengthen security measures and protect against user threats.
Developing Security Tools and Prototypes
Rapidly build prototypes, proof-of-concepts (POCs), and tools to test security hypotheses, demonstrate feasibility, and evaluate solutions.
Collaborate on creating internal tools for detecting vulnerabilities and improving application security posture.
Collaborating with R&D
Partner with product owners, engineers, and function leaders to integrate security measures and ensure alignment with company goals.
Lead multi-disciplinary teams and joint task forces to address critical security challenges and implement innovative solutions.
Communicating Security Insights
Clearly articulate security visions, risks, and mitigation strategies to stakeholders and leadership.
Evangelize security initiatives and share findings through internal documentation, external blogs, webinars, and industry conferences.

We are seeking a Fraud team leader to join and lead analysts within the Fraud group. In this role, you will guide a team of analysts in researching, evaluating, and analyzing fraud detection mechanisms, abuse vectors, and platform vulnerabilities across a wide range of online services. You will set the team's research direction, generate strategic insights from diverse intelligence sources, and oversee OSINT investigations that identify emerging fraud tactics and behavioral vulnerabilities. Beyond hands-on research and analysis, you will drive the use of technical tools and infrastructure to support investigations, simulate real-world abuse scenarios, and scale the team's fraud research capabilities. You will be accountable for delivering high-quality, actionable intelligence and mitigation recommendations to clients.
Key Responsibilities
* Lead, mentor, and develop a team of fraud threat analysts, including task allocation, prioritization, and performance feedback.
* Set research priorities and methodologies in alignment with client needs and business objectives.
* Oversee and conduct investigations into fraud methods across web and mobile platforms (social media, forums, apps, and the dark web).
* Design and guide the execution of fraud research methodologies, including technical validation of abuse scenarios.
* Own the strategy for building, maintaining, and operating research environments and technical tooling that support fraud investigations and red team activities.
* Analyze large datasets, telemetry, and technical artifacts, and guide the team in uncovering patterns and delivering actionable insights.
* Serve as a primary point of contact for clients and internal stakeholders, presenting findings and translating research into strategic guidance.
About us:
A trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, we provide end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. We are widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!
Hybrid:
Yes