לוח משרות דרושים איש אבטחת מידע / סייבר

XMCyber seeks a Cyber Engineer to focus on the technical integration of Critical Security Controls (CSCs) and compliance requirements within our core product. This role involves in-depth analysis of new and existing security tools and technologies alongside various cybersecurity frameworks and standards. You will be responsible for translating these complex requirements and tool capabilities into well-defined CSCs. Responsibilities
* Analyze security tools and technologies for CSC implementation.
* Evaluate cybersecurity frameworks/standards (NIST, ISO, etc.) and map requirements to our platform and tools.
* Design and document clear specifications for CSCs.
* Collaborate with product and engineering teams to integrate CSCs into the core product.

Collecting data from various sources (Open source, feeds and intelligence portal).
Conducting investigations using advanced tools and intelligence sources.
Conducting Cyber Threat analysis based on SPLUNK.
Work closely with leading Cyber, intelligence and operational professionals.
Identify emerging threats and attack patterns.
Tracking threat actor groups and methods.

Providing expert guidance and professional direction to enhance cybersecurity defense levels within the organization.
Leading activities in incident management and proactive threat detection initiatives.
Responsible for formulating and directing technological responses, integrating and directing intelligence data, organizational capabilities and operational capacities, aligned with threat and damage levels as defined by the division.
Developing and maintaining working relationships with CISO's in guide entities and national regulatory, in compliance with legal requirements.
Analyzing and presenting the security readiness of responsible entities cyber threat.

Were looking for top-tier Cyber OpSec expert - someone who lives and breathes cyber security, with deep knowledge of both technology and threat analysis.
Develop an intimate understanding of our products and systems.
Analyze our capabilities alongside advanced threat models.
Combine technological insight with a sharp understanding of threats.
Drive impactful changes and improvements to elevate our overall OpSec posture.

We are seeking a passionate and skilled Information Security Engineer to join our team. In this role, youll be responsible for enhancing the security of our enterprise environment, working with a variety of security tools and technologies. We're looking for individuals with a strong background in information security who are eager to help shape the future of cybersecurity and protect our organization from evolving threats.

In this position you will:
Design, implement, and maintain robust security controls across our enterprise infrastructure, including endpoint, identity, and data protection systems.
Lead and support efforts to harden our internal environments against evolving threats, including proactive risk identification and remediation.
Collaborate closely with DevOps, IT, and engineering teams to secure enterprise platforms.
Contribute to the evaluation and deployment of security technologies (e.g., EDR, DLP, IAM, MFA, logging and monitoring solutions).
Take ownership of end-to-end security projects, from concept through implementation and operationalization.
Help define and enforce security policies, standards, and best practices across the organization.
Participate in threat modeling, vulnerability management, and incident response processes.
Engage in continuous improvement efforts in a collaborative, agile, and fast-paced environment.

we are seeking a talented GRC Compliance Expert to join our Governance, Risk, and Compliance team.
This role is ideal for someone with a strong understanding of leading international standards and regulations (such as ISO 27001, SOC 2, PCI-DSS, and others) and a passion for building and maintaining scalable, enterprise-grade compliance programs.

Youll play a central role in ensuring ongoing organizational alignment with world-class frameworks while working closely with cross-functional teams to drive a culture of trust, risk awareness, and regulatory readiness.
We are especially looking for someone with hands-on experience implementing and maintaining PCI-DSS / SOC2 compliance, including managing assessments, evidence collection, and cross-functional collaboration.

Key Responsibilities

Ensure the companys continuous compliance with leading international standards and regulatory frameworks (e.g., ISO 27001, SOC 2, PCI-DSS).
Serve as a subject matter expert on PCI-DSS, including supporting annual assessments, gap analyses, and remediation planning.
Maintain, update, and improve internal GRC policies, controls, and documentation in line with global best practices.
Monitor changes in the regulatory and industry landscape and assess their applicability to operations.
Lead internal control mapping, gap assessments, and remediation tracking.
Coordinate audit readiness efforts and maintain supporting evidence for external assurance engagements.
Support risk management activities such as risk assessments, risk registers, mitigation tracking, and escalation workflows.
Collaborate with teams across Security, IT, Legal, Engineering, and Operations to align compliance and business needs.
Drive internal awareness and training initiatives on key compliance requirements and GRC processes.
Contribute to the maturity and automation of the GRC program using dedicated platforms/tools.

We are looking for a highly motivated and experienced Product Operations (Temporary position) to join our team. In this role, you will be responsible for streamlining product operations, ensuring efficient processes, and supporting the product management team in delivering exceptional products to market. This role requires a strategic thinker with a keen eye for detail and a passion for optimizing operational efficiency.
Responsibilities: 
Operational Strategy Execution: Execute and drive the implementation of operational strategies to support product development and delivery.
Process Optimization: Identify, analyze, and improve product-related processes to increase efficiency and effectiveness.
Cross-functional collaboration: Work closely with product management, engineering, and other departments to ensure seamless product operations.
Data Analysis: Collect and analyze data to inform decision-making and improve product performance.
Program Management: orchestrate strategic programs involving multiple stakeholders and contributors across the organization.
Performance Metrics: Establish and track key performance indicators (KPIs) to measure the success of product operations.
Continuous Improvement: Foster a culture of continuous improvement, encouraging innovation and efficiency in all product operations.
Systems Administration: Manage and administer systems to support the product management group, including tools such as Salesforce, Jira, Asana, and others.

we are seeking a Cybersecurity Implementation Specialist for a significant and challenging role, tailored for professionals with deep knowledge and experience in infrastructure and cybersecurity.
Responsibilities:

* Supporting organizational cybersecurity systems, including WAF, DLP, EDR, Proxy
* Operation and maintenance of firewall systems and other Network security solutions
* Deployment and upgrades of cybersecurity solutions in complex environments