לוח משרות דרושים מנהל אבטחת מידע / סייבר / CISO משרה מלאה, לחיפוש זה נמצאו 61 משרות

We are seeking a Senior/Principal Linux Security Researcher for our Tel Aviv R&D center to advance our Cortex-XDR Agent for the Linux platform, which provides runtime protection to servers and cloud workloads. In this role, you will be a key member of a team responsible for researching, developing, and improving our Anti-Exploit and Anti-Malware capabilities. Your work will involve deep exploration of OS internals, exploits, malware, delving into cloud security, and finding ways to mitigate new attack vectors.
Key Responsibilities
Research, develop, and improve state-of-the-art endpoint security solutions focused on comprehensive prevention. This includes broad defense against attack classes like malware and exploits, spanning from low-level mitigations to application-level security
Research Linux OS internals, kernel, application codebases, vulnerabilities, malware and exploits
Respond to security events coming from customers, in the context of malware and exploitation prevention.

We are the global booking and payment platform for the trillion-dollar freight industry. Hundreds of airlines and ocean liners, thousands of freight companies, and over ten thousand importers and exporters use our platform to move goods around the world faster and more efficiently. This matters. Efficient freight ultimately makes things cost a little bit less when you buy them in the store. We are looking for a hybrid powerhouse: a Chief Information Security Officer. In this role, you will be the guardian of our trust. You will shape and drive our cybersecurity vision, ensuring our platform, products, people, and data remain secure while enabling innovation and business growth. You are the kind of leader who builds security into everything, protecting every digital doorway without slowing down the movement of global trade. From strategic risk management and governance to incident response and security engineering, you'll foster a culture where security is a business enabler, not a roadblock.
Responsibilities:
* Develop, implement, and continuously enhance our enterprise-wide cybersecurity strategy, policies, standards, and governance framework.
* Lead our information security program to protect the confidentiality, integrity, and availability of information assets.
* Identify, assess, and manage cybersecurity risks, ensuring appropriate controls are implemented to mitigate business and technology risks.
* Oversee security operations, including threat monitoring, vulnerability management, incident response, and remediation activities.
* Direct the development and execution of incident response, disaster recovery, and business continuity plans.
* Establish and maintain security architecture and best practices across cloud infrastructure, network, endpoint, application, and data environments.
* Ensure compliance with applicable laws, regulations, contractual obligations, and industry standards, and support internal and external audits.
* Develop and maintain security policies, procedures, and awareness programs that promote a strong culture of cybersecurity across the organization.
* Advise executive leadership and the Board of Directors on cybersecurity strategy, emerging threats, risk posture, and investment priorities.
* Lead and mentor the information security team, fostering professional development, accountability, and operational excellence.
* Manage cybersecurity budgets, evaluate emerging technologies, and recommend investments that improve the organization's security capabilities.
* Oversee identity and access management, data protection, encryption, and privileged access controls.
* Collaborate with SRE, IT, R&D, legal and business leaders to integrate security into organizational processes and strategic initiatives.
* Manage third-party and vendor cybersecurity risk assessments, ensuring external partners meet organizational security requirements.
* Monitor the evolving threat landscape and implement proactive measures to address emerging cybersecurity risks and improve the organization's overall security maturity.
Hybrid:
Yes

We're looking for a GRC Specialist to own and drive our compliance and authorization programs, with a strong emphasis on FedRAMP and NIST 800-53. This is a hands-on governance, risk, and compliance role for someone who can build and run a federal-grade compliance program from the ground up and manage it through continuous monitoring and reauthorization cycles.

U.S. citizenship is required for this role due to FedRAMP and federal customer requirements.

Key Responsibilities

Own the FedRAMP process end-to-end: System Security Plan (SSP) development and maintenance, POA&M tracking and remediation, control implementation statements, and continuous monitoring (ConMon) deliverables
Serve as primary point of contact for 3PAO assessments, coordinating testing, evidence collection, and finding resolution
Maintain compliance programs across SOC 2 Type II and ISO 27001
Respond to customers security questionnaires, and support sales enablement with SSPs, control narratives, and other security documentation
Partner with engineering, GTM, and leadership to ensure controls are implemented, evidenced, and operating effectively
Monitor changes to FedRAMP requirements, NIST guidance, and federal compliance obligations, and translate them into actionable program updates

our Cyber division is seeking a CISO as a Service Consultant to join our team in Central/North Israel. We are looking for a senior and experienced information security consultant who will lead information security activities for the company's customers in a CISO as a Service model. The role requires experience in risk management, leading compliance processes for ISO standards, and privacy protection. Key Responsibilities:
* Leading CISO as a Service activities for the company's customers, including formulating strategy and work plans.
* Building and managing information security governance (policies, procedures, controls).
* Performing cyber and IT risk assessments, gap analysis, and formulating mitigation plans.
* Guiding and supporting preparation and compliance processes for information security standards (ISO 27001, ISO 27799, ISO 27017).
* Assisting in the implementation of privacy controls and accompanying processes related to the Privacy Protection Law and GDPR.
* Providing technological guidance, training, and delivering professional content to customers.

Our Cyber division is seeking a CISO as a Service Consultant to join our team in Central/North Israel. We are looking for a senior and experienced information security consultant who will lead information security activities for the company's customers in a CISO as a Service model. The role requires experience in risk management, leading compliance processes for ISO standards, and privacy protection.
Key Responsibilities:
* Leading CISO as a Service activities for the company's customers, including formulating strategy and work plans.
* Building and managing information security governance (policies, procedures, controls).
* Performing cyber and IT risk assessments, gap analysis, and formulating mitigation plans.
* Guiding and supporting preparation and compliance processes for information security standards (ISO 27001, ISO 27799, ISO 27017).
* Assisting in the implementation of privacy controls and accompanying processes related to the Privacy Protection Law and GDPR.
* Providing technological guidance, training, and delivering professional content to customers.

Required Head Of Security - Base44
Job Description
As Head of Security for Base44, you'll lead and implement security strategies, ensuring robust protection for our products, clients, and internal systems. With a dotted-line to the CISO, you'll serve as Base44's primary security authority while ensuring full alignment with our corporate security standards, policies, and enterprise-grade compliance requirements.
In your day-to-day, you will:
Design, architect, and implement security features directly into our product codebase
leading pre-sales security engagements meetings, executive security discussions, CISO-level reviews, and vendor security assessments while representing the company's security posture.
Set standards and best practices across R&D and product teams as the sole internal authority for security
Work closely with CISO and the broader Security departments to align Base44's security posture with corporate policies, compliance frameworks, and enterprise requirements.

Planning, defining, and implementing cyber defense architecture within the division, ensuring alignment with operational. requirements, regulations, and technologies
Accompanying technological projects, risk analysis, defining security controls, and leading defense solutions in both on-premise and cloud environments
Conducting Security Design Reviews for systems and infrastructure
Evaluating and implementing new information security technologies
Analyzing cyber risks and recommending protective controls
Writing architecture documents, standards, procedures, and guidelines
Leading segmentation, Zero Trust, and secure access concepts
Addressing regulatory requirements and information security standards
Collaborating with IT, communication, DevOps, cloud, and development teams.

We are looking for an experienced Cybersecurity Incident Managr to join our dynamic team of cybersecurity professionals.
עוד על התפקיד
Lead, manage and coordinate incident response efforts, participate in forensic and incident response investigations, including large scale sophisticated attacks, conduct log analysis, host and network-based forensics
Collaborate with IT and Security teams during investigation
Generate and present a comprehensive and professional report of findings from investigation
Serve as the primary point of contact during major incidents, strategies to minimize the impact on the organization.

You will own security end to end: strategy and execution, both. You inherit a working program, with an annual SOC 2 Type II audit, an established tool stack, and clear vendor-gating rules already in place. You will work closely with our Application Architect, our IT team, Legal, and engineering leads across Israel, the US and the UK. The role reports to a member of the executive team.

This is a player-coach role. One week you present the annual risk review to management; the next you are pulling audit evidence, tuning a cloud alert rule, or reading a vendor's risk scan yourself. If you need a large team under you to be effective, this is probably not the right fit. If you like owning the whole problem, it is a good one.

What you will do:

Own the annual SOC 2 Type II audit end to end: controls, evidence collection, external auditors and consultants. The bar we hold ourselves to is zero deviations.
Run supply-chain security: vendor risk assessments and security questionnaires, gating rules for new vendors, and contract security terms together with Legal. We do not onboard vendors without SOC 2 or ISO 27001, and critical findings block the deal.
Own application security with runtime-context prioritization: focus engineering on what is actually exploitable in production, and filter out the scanner noise.
Run day-to-day security operations: cloud security posture across AWS and GCP, EDR, email security, identity and zero-trust access, alert triage and remediation follow-up with the owning teams.
Manage the annual penetration-testing program: scoping, vendor selection, findings triage and remediation tracking with R&D.
Own incident response: keep the plan current, run it when needed, and handle notification duties toward our cyber insurer.
Run the security awareness program and the security portion of employee onboarding.
Manage the security budget, tool renewals and vendor relationships.
Set governance for AI tools used across the company: usage guidelines, risk registers, and security review of new AI vendors.

This is a hands-on role that balances deep technical work alongwith building and running the function: the Lead drives high-severity incidents end-to-end, serves as the escalation ceiling, and sets the standards and structure the team operates by.

Youre welcome to work in our offices in Tel Aviv, Israel.

Your responsibilities will include:

Build and lead global IR capability - select and mature DFIR tooling, and establish the playbooks and follow-the-sun operating model across EMEA, Asia, and APAC while hiring and developing a team of responders.
Lead the technical response to major incidents hands-on - from escalation through containment, eradication, and recovery - and act as the final technical authority on the most complex cases.
Personally conduct end-to-end forensic investigations across cloud, platform, and endpoint environments - log analysis at scale, host and network forensics, memory analysis, malware triage, and timeline reconstruction.
Define and enforce consistent investigation standards across the team: severity and escalation criteria, cross-region handoff quality, and evidence handling that meets legal, regulatory, and forensic requirements.
Partner with the SOC, SOC Automation, Threat Intelligence, Threat Hunting, and Platform Security teams to improve detection fidelity and reduce MTTD and MTTR.
Serve as the technical voice of incident response to executive leadership, Legal, and Privacy - delivering clear, risk-based briefings, regulatory-ready documentation, and root cause analyses (RCA).
Raise the teams technical bar through case reviews and hands-on mentoring, and drive lessons-learned into measurable improvements in controls and readiness.

We are looking for an Senior/Staff Infrastructure Security Engineer to secure our cloud and on-premises infrastructure by implementing security controls, monitoring threats, ensuring compliance with industry standards and respond to security incidents. The ideal candidate has a strong background in cloud security, Linux hardening, and network security.

Your responsibilities will include:

Design and implement security measures to protect cloud and on-premises infrastructure.

Identify and remediate vulnerabilities in cloud environments, networks, and operating systems.

Build and maintain cloud and infrastructure security tools.

Perform security reviews, threat modeling and risk assessments of infrastructure components.

Develop and maintain security guidelines for Network and SRE teams.

Collaborate with Network and SRE teams to integrate security best practices into their processes and systems.

Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.

Serve as an network and infrastructure security subject matter expert to other teams.

Required Cyber Security Execution Manager
The Cyber Security Execution Owner is responsible for driving and coordinating Cyber Security (CyS) execution activities across ADAS Production Programs.
The position focuses on enabling scalable and consistent Cyber Security execution, ensuring compliance with organizational processes and industry standards while supporting project teams in meeting customer and regulatory expectations.
What will your job look like?
Serve as the Cyber Security focal point for ADAS Production Programs.
Support Project Managers in planning, tracking, and executing Cyber Security activities.
Coordinate cross-functional activities involving Product, Development, Compliance, and Security teams
Ensure alignment between customer requirements, project plans, and internal execution processes.
Drive execution consistency and standardization across production programs.
Continuously improve Cyber Security execution processes.

We are a global, data-driven, end-to-end e-commerce powerhouse. With our main offices located in Tel Aviv and our workforce spread across various centers worldwide, we are leaders in our category of personalized, on-demand, classic, and fashionable jewelry.
We are currently seeking a skilled and dynamic Director of IT & Security to lead our IT department, managing on-prem and cloud infrastructure of the company.
In this pivotal role, you will lead the companys IT and Security strategy, overseeing both on-premises and cloud environments to ensure a robust, secure, and scalable infrastructure. Youll manage the full spectrum of IT operations, from system architecture and cybersecurity to vendor management and process optimization, ensuring business continuity and efficiency across all global sites.
Responsibilities:
Oversee IT operations and supervise systems and IT staff both on-premises and cloud
Maintain and preserve a 24/7 production environment
Plan and manage the company's physical infrastructure and network design
Develop, manage, and track the IT department's annual budget including infrastructure, Software & Hardware in cloud and various geographical locations
Create and maintain processes and standards for selection, implementation, and support of systems
Lead and manage the DevOps and IT teams, ensuring secure, scalable, and reliable infrastructure across all environments.
Lead the company Cyber security, operational and projects wise
Oversee the company's cybersecurity strategy, operations, and project execution.