לוח משרות דרושים הייטק אבטחת מידע / סייבר משרה מלאה, לחיפוש זה נמצאו 515 משרות

we create user-friendly experiences that drive positive outcomes for all parties involved.

With a team based in Tel Aviv and New York, we have been growing rapidly, supporting hundreds of thousands of consumers on their journey to financial resilience and building partnerships with top creditors and fintech companies.

How Youll Spend Your Time
Own IT operations globally - manage user accounts, devices, and office IT infrastructure across Israel and US sites. Handle onboarding/offboarding workflows, device management (MDM), and day-to-day help desk support.
Manage vendors and subscriptions - build and run vendor assessment and procurement processes in collaboration with Compliance and Finance. Control enterprise SaaS subscriptions and evaluate new tools.
Lead security operations - oversee SOC, audit logging, vendor risk assessments, and security questionnaires for sales prospects. Work alongside Compliance and the CTO to maintain and improve the companys security posture.
Drive process and structure - build the workflows, documentation, and policies that turn a reactive IT function into a proactive one.
Communicate with leadership - present security priorities, budget requests, and risk assessments to executives. Prioritize pragmatically and build buy-in across the organization.
Drive growth - think strategically about how IT scales with the company, and take ownership of building the team and resources needed over time.

we are seeking a highly skilled, resilient, and technical Child Safety Researcher to join our team. In this role, you will be on the front lines of investigating complex online child safety violations, handling sensitive content reviews, and developing technical automations to scale our policy and enforcement operations.
This is a high-impact, multi-faceted position that requires blending deep domain expertise in child safety with hands-on scripting and data engineering skills to transform raw queue data into actionable signals and automated review processes.
Key Responsibilities
Investigate & Evaluate Complex Cases: Review, validate, and adjudicate high-risk, graphic, and sensitive child safety content, navigating nuanced contexts involving legal, medical, or parental scenarios.
Extract Signals & Insights: Analyze review queues, large datasets, and user-generated content to identify new adversarial shifts, unknown unknowns, and critical keywords that inform policy updates.
Build Local Automations & Scripts: Design, write, and maintain scripts and local tools to automate review workflows, generate suggestions, and increase overall queue efficiency.
Policy & Enforcement Collaboration: Translate raw investigation findings into structured intelligence reports and actionable recommendations for client policy frameworks and engineering teams.
Quality & Model Support: Partner with product and AI teams to label golden datasets, support ML-based labeling QA, and improve automated detection models.

we are seeking to hire a Technical Fraud Threat Analyst to join the Fraud team. In this role, you will research, evaluate, and analyze fraud detection mechanisms, abuse vectors, and platform vulnerabilities across a wide range of online services.
You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations, and identify emerging fraud tactics and behavioral vulnerabilities. In addition to research and analysis, you will leverage technical tools and infrastructure to support investigations, simulate real-world abuse scenarios, and enable scalable fraud research. Your work will culminate in actionable intelligence and mitigation recommendations for clients.
Key Responsibilities:
Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the dark web).
Design and execute fraud research methodologies, including technical validation of abuse scenarios.
Build, maintain, and operate research environments and technical tooling that support fraud investigations and red team activities.
Analyze large datasets, telemetry, and technical artifacts to uncover patterns and deliver actionable insights.
Develop or leverage automation to improve research workflows and increase operational efficiency.
Monitor third-party websites and channels for malicious activities and fraud risks.
Prepare detailed reports with findings, insights, and actionable recommendations.

we are hiring Intermediate Malware Researchers to analyze and review malware applications. Candidates should have a background in cybersecurity and software development.
The role includes training in malware analysis and detection and provides exposure to various malware threats and techniques. Researchers will combine technical and intelligence findings to reach accurate verdicts and assist in the bulk removal of malicious applications. The position requires adaptability and proactive identification of emerging malware trends.
We are seeking candidates who are willing to learn, can perform effectively under pressure, and maintain high professional standards.

we are looking for an Android Security Research Team Leader to manage a team of super-talented malware researchers and reverse engineers. Our teams help top-level companies improve their security mechanisms using our insights on the latest malware trends, adversarial shifts, and new techniques. Combining intelligence, sophisticated forensics, and data science helps us catch the most relevant and up-to-date threats and threat actors.
What will you do?
Lead and mentor a team of security researchers across multiple projects
Own long-term malware and security research of a variety of Android frameworks, technologies, and domains
Detect large-scale malware campaigns and help bring their operations down
Review and enhance your team's research reports and code
Collaborate with other teams throughout the organization
This role is a management position with 40% hands-on technical work
Find the bad guys - take them down.

we are seeking to hire a Fraud Threat Analyst to join the Fraud team. In this role, you will be responsible for researching, evaluating, and analyzing fraud detection mechanisms and vulnerabilities across various platforms and solutions.
You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations to identify fraud risks, and monitor online platforms to detect malicious activities. You will also focus on uncovering fraud tactics, behavioral vulnerabilities, and process bypasses while delivering actionable mitigation recommendations to clients.
Key Responsibilities:
Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the darknet).
Analyze large datasets to uncover patterns and deliver actionable insights.
Monitor third-party websites and channels for malicious activities and fraud risks.
Prepare detailed reports with findings, insights, and actionable recommendations.

we are seeking an experienced Researcher to join our team dedicated to Android malware research. This role presents an exciting opportunity to conduct comprehensive malware analysis, detect emerging threats, and contribute to our understanding of the Android threat landscape.
The ideal candidate demonstrates a positive, proactive attitude and excels as a reliable team player with strong technical skills in Android malware analysis.
Key Responsibilities:
Conduct in-depth Android malware research and reverse engineering
Detect and document emerging Android malware trends and attack vectors
Analyze Android applications for malicious behavior
Write detection rules and develop automation processes for Android malware identification
Collaborate with team members and share knowledge across departments
Perform static and dynamic analysis of Android malware samples
Document findings and contribute to threat intelligence reports.

we are looking for a hands-on Security Operations Engineer to join our IT and Cybersecurity team.

You will take ownership of implementing, configuring, and operating security tools and controls across the organization. The role combines security operations, incident response, technical policy implementation, and compliance support.



Responsibilities
Implement, configure, and maintain security systems and policies.
Monitor and investigate security alerts and coordinate remediation.
Manage endpoint, identity, device, network, and cloud security controls.
Improve security coverage across endpoints, servers, users, and corporate systems.
Manage vulnerabilities and track remediation through completion.
Develop and maintain incident-response procedures and playbooks.
Translate security policies and regulatory requirements into technical controls.
Support security audits, evidence collection, risk assessments, and compliance activities.
Work closely with IT and R&D teams, business stakeholders, security vendors, and external providers.
Maintain security documentation, operational procedures, and management reports.

We are seeking a talented Penetration Tester & Researcher to lead complex offensive security engagements and groundbreaking research. You will execute sophisticated attack simulations, identify high-value vulnerabilities, and collaborate with clients to enhance their security posture.
This role offers a balance between hands-on technical assessments and original research that shapes the broader cybersecurity community.
Roles and Responsibilities:
Conduct advanced penetration tests across web, mobile, and thick-client applications.
Contribute to internal tools, scripts, and methodologies that enhance efficiency.
Design and simulate real-world attack chains reflecting modern threat actors.
Perform vulnerability research, exploit development, and threat modeling.
Research, develop, and implement offensive security methodologies utilizing AI technologies.
Produce detailed technical reports with actionable remediation strategies.
Collaborate directly with clients to guide mitigation and improve resilience.
Publish research, present findings, and represent Pentera at conferences or in public forums.

our company seeks a Senior Application Security Engineer to serve as the technical core of our bug bounty program within the Product Security Incident Response Team (PSIRT). This is the senior engineer who owns bug bounty reports from intake through resolution: reproducing and validating the vulnerability, assessing its severity, and seeing it through to a verified fix.
The work is deeply technical. Reproducing a vulnerability is only the starting point. From there you read the underlying code, identify root cause, and either propose the fix or design it alongside engineering before confirming it holds. You are also the person researchers deal with directly, which makes clear, credible communication as central to the role as the technical analysis itself.
As one of the most senior engineers on the team, you will set the standard for how triage is done and mentor earlier-career engineers. Beyond the bug bounty queue, you will conduct variant hunts, perform original platform security research, lead major product security incidents, and run forensic postmortems when a significant issue reaches production.
Key Responsibilities
Triage and Resolve Bug Bounty Reports
Own incoming reports end-to-end: intake, reproduction, severity scoring, root cause analysis, fix verification, and final disposition.
Reproduce and validate reported vulnerabilities, building out incomplete proof-of-concept code where needed.
Serve as the technical escalation point for the most complex and highest-severity reports, including multi-step exploit chains and cross-system issues.
Perform code review and root cause analysis to identify the underlying defect rather than the reported symptom.
Propose remediations, or design them with engineering, and verify the fix resolves the issue.
Assign and defend severity ratings using the program's severity framework.
Route issues to owning teams, file and track defects, and keep vulnerability records accurate through closure.
Own Researcher and Stakeholder Communication
Act as our company's primary technical point of contact for bug bounty researchers across the full lifecycle of a report.
Handle severity and validity disputes directly, keeping every exchange clear, timely, respectful, and technically credible.
Translate technical findings for internal stakeholders and keep engineering and leadership current on status and risk.
Mentor the Team and Raise Triage Standards
Provide technical mentorship to earlier-career PSIRT engineers, developing depth in reproduction, code analysis, severity judgment, and communication.
Set and maintain the bar for triage quality and strengthen program practices over time.
Lead Advanced Security Work Beyond Triage
Conduct variant hunts to find related instances of reported vulnerabilities before they are discovered externally.
Perform original platform security research to surface issues ahead of external researchers.
Lead major product security incidents on the PSIRT side, coordinating response across teams under pressure.
Run forensic postmortems after significant incidents to determine how the issue reached production, including how design-level flaws bypassed release processes, and confirm that remediations hold.

This is a hands-on architecture role: deep research, secure systems design, and prototyping, applied across product lines with minimal direction and broad latitude to set the technical agenda. You will set platform-wide direction for securing the AI development lifecycle, define the security architecture, agents, and models operating within it, and represent our company's AI security point of view externally. You'll be a technical authority other engineers and other teams look to on emerging AI-specific threats, working in close partnership with the AI security research team - drawing on their findings and feeding real-world attack surfaces back into their agenda.
What you'll do
Own the security strategy and architecture for our Agentic AI ecosystem, LLMs, and models across product lines
Lead threat modeling for the most complex and novel GenAI/agentic surfaces: cross-agent autonomy, multi-agent tool orchestration, and emerging attack classes not yet standardised in the industry
Set the architectural standard for securing model/RAG/data pipelines platform-wide, including access-control and data-boundary models that other teams are expected to build against
Define what "secure-by-design" means for agentic systems at our company, and drive adoption across engineering orgs
Represent our company's AI security posture externally (standards bodies, industry publications, conferences) and internally to executive stakeholders
Mentor and technically guide engineers on AI-specific security work.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.

we are looking for a SecOps Engineer.
As a SecOps Engineer, you'll be the operational nerve center of Guardicore's R&D Security Squad, the team protecting the platform we build. Embedded with the engineers creating Guardicore, you'll drive real-time detection, response, and full-lifecycle vulnerability management, turning every finding into measurable risk reduction. If you thrive on hunting threats, reducing signal-to-noise, and driving remediation to closure, this is your arena.
As a SecOps Engineer, you will be responsible for:
Ingesting and analyzing vulnerabilities from tools such as Wiz, Vulcan, Grype, and Tenable, while quantifying impact by exploitability and reachability.
Building AI automations that streamline the full security operations loop. Auto-triaging and containing SIEM alerts by prioritizing vulnerability data across tools.
Engineering signal quality by designing correlation searches and tuning detection rules. Automating SOAR playbooks to cut false positives and shrink MTTR.
Driving remediation governance by generating tickets, assigning owners, enforcing deadlines, verifying fixes through rescans, and collecting evidence comprehensively.
Building visibility and KPIs through live dashboards for monitoring remediation speed, SLA compliance, MTTR/MTTD, patch age, and risk trends
Running detection and response, monitoring SIEM telemetry, triaging alerts, mitigating threats, conducting root-cause analysis, aligning TTPs with MITRE ATT&CK, recommending safeguards.

What Will You Do:
Own the technical relationship for enterprise customers across EMEA.
Act as a trusted advisor on security validation, architecture, integrations, and platform adoption.
Lead technical onboarding, architecture reviews, and success planning.
Serve as an escalation point for complex technical challenges.
Conduct technical reviews and EBRs with both technical and executive stakeholders.
Monitor customer technical health, adoption, integrations, and validation maturity.
Identify new use cases and support platform expansion.
Work closely with Implementation, Product, Engineering, Support, and Customer Success teams.
Support partners and distributors with technical enablement, workshops, architecture guidance, and escalations.
Help partners design scalable enterprise and managed service deployments.