לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 504 משרות

We are looking for a Platform Security Director to lead the engineering of our security infrastructure. Your mission is to build a Security Machine that is as sophisticated as our AI. You will move us beyond traditional "defense" into a "Secure-by-Default" reality, where our multi-cloud infrastructure (AWS and Azure) is hardened, automated, and resilient by design.
Youll Own:
The end-to-end security strategy across Application Security, Cloud (AWS/Azure), and Platform layers, ensuring a Secure-by-Default framework, as measured by deployment coverage, critical vulnerability reduction, and developer adoption metrics.
A unified Security Engineering organization covering AppSec, SecDevOps, and AI Security leadership, collaboration points with adjacent teams (Infrastructure, R&D, Product Engineering), and building and mentoring a high-performing team.
Lead our Platform Security domain - from Layer 7 protections to AWS architecture, security tooling, automated risk scoring, and AI-assisted automation workflows that improve detection and remediation times.
Security controls (WAF, Rate Limiting) embedded into the SDLC and CI/CD pipelines, including mandatory security gates, artifact scanning, and automated deployment checks.
Lead our AI strategy - enabling secure use in our platform products as well as for our internal engineering usage, and scaling AI security governance and controls.
The evolution of scalable infrastructure security, including Kubernetes, containers, IAM, and Zero Trust architectures, strengthening Kubernetes and cloud security posture.
Own and execute the comprehensive Vulnerability Management program, from discovery (SAST/DAST/OSS scanning) through remediation tracking, and manage the external Bug Bounty program, with a focus on improving remediation SLAs and automation coverage.
Mature secure-by-default engineering practices across the SDLC.
Increase developer adoption of automated security tooling.
Youll Solve:
Eliminating manual bottlenecks through code-driven guardrails and frictionless developer experiences.
Securing complex production systems and multi-tenant AI architectures in cloud-native production environments, with a focus on model integrity, training data provenance, data exfiltration prevention, and minimizing unique risks associated with Large Language Models (LLMs), by applying specific AI threat models.
Operationalizing Red/Purple Team exercises, penetration testing, and the Bug Bounty program to ensure a continuous feedback loop that drives proactive risk reduction.
Youll Impact:
Support a culture where security is embedded into the foundation of engineering
Turn security into a strategic product advantage and customer trust differentiator
Improve developer experience by making the secure path the easiest path
Increase engineering velocity while strengthening platform resilience
Shape the future intersection of Security, AI, and Platform Engineering
Create scalable systems, processes, and relationships that grow with the companys innovation pace.

Were looking for a Staff Cyber Defense Engineer to help shape the strategy, architecture, and cross-team execution model of our companys Cyber Defense organization.
As a staff-level individual contributor, you will work across Corporate Security Engineering, Detection and Response Engineering, and Offensive Security to ensure our companys defensive capabilities operate as one coherent system.
This role is a strong fit for someone who combines deep technical judgment with systems thinking, cross-functional influence, and the ability to turn complex security challenges into clear architectural direction, aligned programs, and measurable risk reduction.
Youll own:
The end-to-end defensive architecture across our companys Cyber Defense organization.
Cross-team architecture decisions that span identity, endpoint, SaaS, telemetry, response readiness, validation, and risk reduction.
Identification of control gaps, overlaps, weak handoffs, and systemic friction across teams.
Multi-team security initiatives that require sustained coordination, sequencing, and executive visibility.
Group-level prioritization support, including helping leadership evaluate what should be done first, next, or not at all.
Executive-ready security narratives that translate technical work into business risk, progress, tradeoffs, and outcomes.
Group-wide KPI and measurement frameworks that reflect real security impact rather than raw activity.
Improvements to the operating model, including ownership boundaries, team interfaces, escalation paths, and dependency management.
Special strategic initiatives for the Head of Cyber Defense that require high trust, technical depth, and organizational leverage.
Youll solve:
Connecting team-specific work into a coherent defensive system rather than a collection of isolated programs.
Identifying where architecture, ownership, or sequencing problems slow down execution across Cyber Defense.
Ensuring preventive controls, detections, response actions, and validation efforts reinforce one another.
Turning offensive findings and operational lessons into durable architectural improvements across the group.
Helping the organization make better decisions about tradeoffs, dependencies, and long-term security direction.
Translating complex technical initiatives into clear recommendations for leaders and stakeholders.
Reducing friction in major cross-team programs by aligning goals, owners, milestones, and decision points.
Improving how Cyber Defense scales as the group grows, without creating shadow ownership or organizational ambiguity.
Youll impact:
Making our companys Cyber Defense organization more integrated, effective, and strategically aligned.
Increasing execution speed across complex initiatives that involve multiple security teams and business partners.
Helping leadership make clearer decisions with better visibility into risk, progress, and priorities.
Creating architectural consistency across preventive, detective, and validation capabilities.
Strengthening our companys ability to reduce risk in measurable ways while enabling the business to move quickly.
Helping define what a modern, AI-native Cyber Defense organization should look like at scale.

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.
While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.
Key Responsibilities:
Application Security & Secure Engineering:
Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting our core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security:
Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance:
DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.

We are looking for a hands-on, builder-minded AI Senior Product Manager to lead a high-stakes, 0-to-1 initiative.

This is a rare opportunity to operate with the agility and autonomy of a startup founder while leveraging the massive datasets, engineering resources, and established market presence of an industry leader.

This role sits squarely at the intersection of Cybersecurity and AI. You will be responsible for building a net-new product from the ground up - translating raw technical concepts into production-grade reality. We are looking for an entrepreneurial builder who thrives in ambiguity and is obsessed with rapid iteration and technical depth.

This is not a role for a traditional "project manager." You must be a hands-on owner who brings strong, opinionated perspectives formed by real-world technical experience. You will own product initiatives from deep problem discovery through engineering execution, validating and shipping products that security practitioners rely on every day.

What You'll Do

Drive 0-to-1 Cybersecurity & AI Products End-to-End
Operate with a founder's mentality: own the product lifecycle from initial discovery and definition to UX design, technical execution, customer validation, and production release.
Frame ambiguous market opportunities into simple, well-scoped milestones, specs, and rapid execution plans.
Act as a hands-on builder-owning the outcome end-to-end rather than just managing processes or tickets.
Build Practical, Production-Grade Capabilities for Security
Identify key leverage points in security workflows (e.g., threat hunting, incident response) where AI can unlock step-function improvements.
Harness and build on top of existing AI agentic frameworks to solve complex cybersecurity challenges - translating model strengths and limitations into practical UX decisions.
Go beyond theoretical AI buzzwords to ship reliable, predictable, and value-driving security features in production.
Partner Deeply with Engineering & Security Experts
Work daily with Tech Leads, AI Engineers, Security Analysts, and Designers in a highly collaborative, fast-paced environment.
Get comfortable looking at raw logs, trace data, system architectures, and security vulnerabilities alongside engineers to deeply understand root causes and technical tradeoffs.
Challenge unnecessary technical complexity and continuously push for the simplest, most elegant solution.
Own UX & Product Quality for Technical Users
Maintain an exceptionally high bar for product quality, clarity, and system reliability.
Abstract dense technical data, security alerts, and complex AI outputs into intuitive, actionable user workflows.
Treat launch day as the start of continuous learning - actively monitoring usage metrics, validating edge cases, and rapidly iterating based on live system feedback.
Stay Connected to Technical Customers
Engage directly with security practitioners, DevOps, and SREs to uncover genuine friction points in their daily operations.
Translate raw customer feedback into prioritized product roadmaps grounded in real operational impact.

abra professional services is seeking a SecOps / Security Operations Specialist We are looking for a skilled SecOps / Security Operations Specialist to join an information security team and operate, maintain, and support advanced security tools and technologies. This role requires hands-on experience in SecOps / SOC, firewall management, WAF and DDoS protection, PAM / identity management, EDR/XDR, email security, incident response, and the use of AI technologies for cyber investigation and threat detection. A full-time position based in Israel. Key Responsibilities:
* Operate, configure, maintain, update, and manage policies and rules in Check Point firewalls.
* Manage, configure, and maintain WAF and DDoS protection systems, including Radware, Reblaze, and Cloudflare.
* Operate, manage, and maintain CyberArk PAM, identity, and access management processes.
* Manage and maintain Trend Micro products, including Vision One / Apex One, investigate EDR/XDR alerts, and operate email security systems against phishing and malware.
* Work with SOC teams, respond to alerts, perform initial incident response investigations, and support remediation processes.
* Use Generative AI / AI and automation tools to analyze security alerts, investigate logs, identify anomalies, and understand new security risks in environments that integrate AI tools.

We are looking for a Security Engineer with 1-2 years of experience to join our Internal Security team.
This role combines hands-on cloud and security operations with support for GRC and compliance activities.
You will be involved in securing our cloud, SaaS, and AI-driven systems, monitoring security events, and helping maintain our overall security posture. In parallel, you will support customer security questionnaires and compliance processes.

What You'll Do:
Monitor, triage, and investigate security alerts and incidents across cloud and security tools (EDR, CASB, ZTNA, SaaS security platforms, and identity providers), and support response and remediation activities
Assist in securing cloud environments (AWS/GCP/Azure), including IAM, access controls, network security, and CI/CD pipeline security
Work closely with DevOps and IT teams to implement and enforce security best practices across infrastructure, endpoints, and SaaS systems
Support vulnerability management processes, including scanning, prioritization, and remediation tracking
Support risk management processes by identifying, assessing, and tracking risks, including vulnerability management, remediation efforts, and control gaps
Support customer security questionnaires (RFPs/RFIs) with accurate technical responses
Assist in maintaining compliance with frameworks such as SOC 2 and ISO 27001, including preparing audit evidence and documentation

As the worlds leading vendor of Cyber Security, facing the most sophisticated threats and attacks, weve assembled a global team of the most driven, creative, and innovative people. At our company, our employees are redefining the security landscape by meeting our customers real-time needs and providing our cutting-edge technologies and services to an ever-growing customer base.
Key Responsibilities
Responsible for daily incident management of customer incidents
Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
Ability to manage complicated global incidents
Ability to perform large-scale compromise assessments for customer environments
Build incident response plans and playbooks
Create attack scenarios for customer tabletop training exercises
Creation of detailed incident reports for customers and effective communication of findings to customers
Build and maintain sandbox/test lab environments to evaluate malicious code
Work within a team environment and will be responsible for coordinating work actions.

We are on an expedition to find you, a CTI Analyst who is passionate about turning raw threat data into clear, evidence-backed intelligence and operational outcomes. Youll play a major role in advancing our next-gen CTI platform across threat actor attribution, adversary infrastructure analysis, External Attack Surface Management (EASM), and STIX-based knowledge management - Working closely with the Engineering, MLOps, and Data teams to deliver high-signal intelligence that drives action.
:Responsibilities
Execute the CTI research roadmap across threat actor attribution, adversary infrastructure analysis, EASM insights, and STIX-based knowledge management.
Conduct in-depth infrastructure and campaign analysis, including domain/IP relationships, hosting patterns and certificates.
Identify, validate, and track Indicators of Compromise (IOCs) and emerging threats using passive sources and approved active techniques.
Normalize, enrich, deduplicate, and maintain intelligence in STIX 2.1, aligned with internal ontology and quality standards.
Collaborate with the Engineering, MLOps, and Data teams to translate intelligence into actionable intelligence, alerts, and customer-facing outputs.
Produce high-quality intelligence reports, threat briefs, watchlists, and early-warning assessments for internal teams and customers.
Support investigations by providing contextual analysis, confidence scoring, and evidence-backed assessments.
Ensure adherence to governance, ethics, sourcing, provenance, and data-quality standards across all intelligence outputs.

we are looking for a Product Marketing
You'd be one of a small, senior team where everyone ships. There's a category to define and a product story to make legible and credible to some of the most sophisticated and skeptical buyers in the world: national CISOs, procurement officers, defense evaluators, and the researchers who advise them.
Two things make this role unusual. First, the pace: we move like an early-stage company at nation-state stakes, and you'll work directly with researchers, operators, and sales without a layer of process between you and the output. Second, the bar: your writing doesn't get skimmed by a mid-funnel lead. It gets scrutinized by governments deciding whether to trust their national infrastructure to us.
:Responsibilities
Product and feature positioning. Translate cyberdefense and sovereign AI capabilities into messaging that holds up in front of CISOs, procurement officers, and national security evaluators. Cascade the company story down to the feature level, and keep it coherent as the product moves fast.
Storytelling at every altitude. The same capability needs to land as a two-line answer for a minister, a technical brief for a national SOC team, and a narrative arc for a keynote. You own the craft of making one truth work at all three altitudes.
Sales and product content. Support with white papers, research-driven reports, technical briefs, and evaluation materials that do the convincing in a relationship-driven, evidence-driven sale.
Competitive and industry research. Map the threat landscape and the competitive field with a clear-eyed view of where we win and how the sovereign category is moving. Own the intelligence layer that feeds positioning.
Launch and lifecycle work. New capabilities, new products, new markets. You'll shape how each one enters the world, from naming input to launch materials to field-ready messaging.

We're looking for an innovative, experienced Software Developer to spearhead the creation of autonomous AI agents at the intersection of cyber security and advanced AI. Your primary focus will be designing and building cutting-edge agentic systems from scratch that reason over security data, orchestrate tools, and operate autonomously to support our company's cyber security and defense efforts. In this role, you will bridge the gap between advanced AI concepts and production-grade software engineering, taking real ownership of the architecture, mentoring others, and applying next-generation technology to counter advanced cyber threats.
Key Responsibilities
Design and build autonomous AI agents from scratch to actively support our company's cyber security capabilities
Develop knowledge-based, agentic AI systems capable of reasoning over security data, deciding on action plans, and executing tools autonomously
Own the multi-agent orchestration infrastructure, ensuring it is highly scalable, reliable, and secure against cyber attacks
Collaborate with cross-functional teams to integrate AI agent capabilities smoothly into existing product pipelines and cloud architectures
Stay current on both core software engineering trends and modern AI development methodologies, bringing that knowledge to the team.

We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers
Requirement for 5 working days per week: Sunday to Thursday or Monday to Friday.
Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams.

At our company, we help organizations around the world stay ahead of evolving cyber threats. By combining advanced technology with industry-leading security research, we deliver protections against the latest attacks at global scale.
If you're excited by real-world malware, emerging threats, and solving complex security challenges, you'll have the opportunity to make an immediate impact while working alongside some of the industry's leading researchers and engineers.
Key Responsibilities
Analyzing malicious files and creating generic protections for our company products.
Lead releasing high quality daily protections for our customers and constantly monitoring detections.
Lead our response to high profile attacks, understand them and guide the creation of relevant protections.
Lead our automation efforts and reduce manual protection work.
Monitoring our wide sensors information and find leads for interesting cases of targeted attacks & campaigns.
Running deep investigation in our company products and lead enhancements in security & UX.
Publish marketing and technical blogs for interesting findings by the team.
Present your work in different forums including stakeholders, strategic customers and security conferences.
Automate daily processes in order to increase the teams efficiency.

We are looking for a Security Lead to join our companys R&D organization, taking a central, cross-functional role in shaping the security posture of our products. This role combines deep hands-on expertise with cross-organizational leadership, working closely with senior leaders to shape and implement security strategy across all product lines. You will lead end-to-end security initiatives, influence engineering practices at scale, and play a critical role in ensuring our products meet the highest security standards.
Key Responsibilities
Lead security in the R&D organization by professionalism and cooperation across our company
Maintain and develop the Secure Development Life Cycle of all our companys Products Organization, work with R&D, QA, Sales, Support, external researchers, and customers to make the cyber landscape a safer place.
Conduct architectural security reviews and threat modeling for R&D
Full triage for our company's VDP and BBP reports, including analyzing reports, calculating severities and communications with reporters.
Define and develop security training to implement cross organization
Be a first responder in security incidents, including leading and defining actions to resolution
Manage and monitor our company's SCA, SAST, DAST tools.

Interested in Cyber Security and looking to work on real-world threats?
Join our company's Network Security Research team, where you'll help develop protections that keep organizations around the world safe from emerging attacks. Our team researches new threats, analyzes network vulnerabilities, develops detection and prevention technologies, and delivers frequent security updates to customers worldwide.
This role combines hands-on security research, threat analysis, and product content development, offering the opportunity to work on a wide variety of technologies, attack techniques, and emerging trends-including the growing use of AI in Cyber Security.
Key Responsibilities
Research, develop, and release network protections and security updates for our company's Network Security products.
Reproduce and analyze malicious attacks and campaigns to better understand threats and design effective mitigations.
Investigate network protocols and identify new detection opportunities.
Hunt for emerging threats using our company's cloud-scale data and develop new analysis techniques.
Explore how Generative AI and LLMs can improve threat research, detection, and security analysis.
Share research findings through technical blog posts and other internal and external publications.
Collaborate closely with researchers and developers to bring new protections from research into production.