לוח משרות דרושים מומחה אבטחת מידע / סייבר במרכז

As a 24/7 Monitoring and Technical Support, you will:

Work in shifts 247, including weekends and holidays
Handle day-to-day production issues
Provide clients with a professional and friendly first point-of-contact for all incidents
Continuously develop and improve the teams service and processes
Perform preventive maintenance
Troubleshoot and debug technical incidents

As an Infrastructure Operations Specialist, you will:

Provide expertise in managing product infrastructure, collaborating closely with various interfaces
Explore and develop methodologies to enhance our domain expertise
Thrive in a dynamic, fast-paced security, and operational environment
Lead implementation processes, from research to production
Conduct constant analysis with multiple tools in order to optimize workflows and processes

As a Security Researcher at our company, you will play a pivotal role in identifying, analyzing, and mitigating emerging cyber threats. You will work closely with a multidisciplinary team to develop impactful intelligence and translate your findings into effective security measures.
As part of our research team, you will have the ability to push your innovative ideas and bring them to life from scratch.
We are seeking an autodidact with a strong foundation in Python coding, cyber security research, and analytics skills, coupled with exceptional communication abilities and a proven track record of collaborative teamwork.
Responsibilities
Conduct in-depth research and analysis of cyber threats, including malwares, vulnerabilities, attack vectors and campaigns.
Develop and maintain tools, scripts, and algorithms to automate threat detection, analysis, data collection, etc.
Collaborate with cross-functional teams to design and implement innovative intelligence solutions.
Communicate findings, recommendations, and actionable insights to internal stakeholders and external partners.
Take ownership of projects from conception to execution, ensuring timely delivery of high-quality results.
Monitor industry trends, emerging technologies, and evolving threat landscapes.

This role provides a unique opportunity to join a team with strategic importance to protecting our customers from emerging threats and novel attack methodologies in both cloud and Linux based environments. You will stay ahead of the curve with regards to the threat landscape and your research will directly impact the direction of the team and our product.

If you have a strong passion for security and technology, have an interest in supporting engineering projects, and want to gain real-world experience in dealing with advanced threat actors targeting cloud environments, we have a role for you!


Your contributions will enable continuous improvement of CrowdStrikes cloud detection capabilities ensuring that our customers can be secured with the most advanced security measures in place.



What You'll Do:

Develop, implement and optimize threat detection rules tailored to cloud runtime environments. Aim to detect and respond to activity as early in the killchain as possible.

Rapid response to potential malicious campaigns or extensive exploitation cloud runtime resources post vulnerabilities disclosure.

Conduct proactive threat hunting exercises to identify potential security gaps and emerging threats within cloud environments.

Track and present threat detection findings, including recommended strategies or possible product improvements.

Collaborate with cross functional teams: Work closely with various teams, including OverWatch, engineering, product management, detection engineering, and threat intelligence to drive cloud detections in the Crowdstrike falcon platform.

Stay abreast of the latest threat landscape and cloud security trends, continuously updating detection strategies to address emerging threats and vulnerabilities.

We are looking for a Leader to join our SOC Team. As a technical leader, you will on-going manage the ongoing shifts.

You will technologically manage the ongoing shifts that will include team members from multiple departments, whose goal is to technologically lead the team that responds to incidents created by internal and external systems.

In addition, This is the leading team of the SOC (Shift Managers) the team that takes part in advanced investigations, the technological leader, and the main source of knowledge in the room.

A passion for Security Operations with strong skills in critical thinking, communication, and mentoring, an inquisitive nature, and excitement to be part of our are musts.

Responsibilities
Professional guidance and accompaniment of a central team
Preservation and development of investigative and monitoring methods
Collaboration with other teams in the company with an emphasis on the professional aspect

We are looking for an experienced Senior SOC Analyst to join our SOC team.

Responsibilities
Being an active part of our SOC monitoring team.

Part of the daily tasks include investigating security-related cyber incidents while using a wide variety of different security systems.

The investigations are mostly independent and require strong analytics and creative thinking while using a wide variety of intelligence sources alongside common security tools.

Writing investigation reports (tickets), and direct interaction with clients / end-users via email or phone.

We are seeking a highly skilled and experienced Technical Product Expert& SME with a deep understanding of security principles in on-premise and cloud environments, ideally with some offensive security background. The ideal candidate will have a strong background in leading technical and non-technical teams and extensive knowledge of security frameworks, remediation methodologies, and security operational models.



Responsibilities:

Provide technical guidance, mentorship, and support team members to ensure high-quality service delivery.
Methodological mindset to create and maintain security and product usability processes and enforce them with internal customers such as CSMs, SEs, and the product team
Collaborate with product and RND about product usage and feedback from the field
Continuously monitor, analyze, and report on key performance indicators (KPIs) of the product.
In escalated client meetings, provide product matter expert remediation insights, recommendations, and security best practices.
Stay abreast of industry trends, emerging technologies, and best practices in automation to provide strategic insights and recommendations for enhancing technical solutions.

We are seeking a highly skilled and experienced SOC Manager to lead the development and operation of our Security Operations Center. This role involves building a new SOC team, adopting and deploying SIEM (Security Information and Event Management) technology, and managing incident response in a hybrid environment (on-prem/cloud).

Responsibilities:

Team Recruitment and Leadership: Recruit and mentor a team of 2-3 SOC analysts. Lead, develop, and evaluate team performance.
Technology Selection and Deployment: Identify and deploy appropriate SIEM technology to enhance our cybersecurity posture.
Alert and Log Management: Map out all necessary alerts and logs for continuous monitoring and threat detection.
Alert Classification and Prioritization: Develop a system to classify and prioritize alerts based on severity and impact.
Hybrid Environment Monitoring: Oversee the monitoring of both on-premises and cloud-based systems.
Automation and Process Improvement: Implement automation strategies to enhance the efficiency and effectiveness of the SOC operations.
Incident Response Management: Lead and manage the incident response process, ensuring swift and effective resolution of security incidents.

We are looking for a highly skilled and motivated software engineer who, along with the rest of our excellent software engineers in the group, will be responsible for developing the core component of the product while adhering to company standards and processes.

You will be working closely with other members of the group on a regular basis as well as other groups in the company from time to time. Communication is key!

Duties will include (but are not limited to) designing and implementing the newest

and most popular cyber-attack techniques that are relevant to all of customers.

A Tier 1 Analyst in a SOC is a junior position and a great opportunity to take the first step in the world of Cyber Security.
The SOC collects information from various sources, monitors customers infrastructure, servers and security software,
and alerts in real time about any malicious activity that might affect the customers business continuity or/and cause damage.

We are looking for a Security Operation Specialist.
The ideal candidate will specialize in security tools like EDR, data protection, email protection, DNS protection, and SASE.
Responsibilities include configuring, maintaining, and automating security tools, addressing weaknesses, and researching new threats.
The candidate will build, install, and configure security solutions, ensuring operational compliance with established baselines.
He will also evaluate controls for improvement, write technical standards, and stay informed on emerging security trends.
Job Description:
Evaluate, implement, and manage a wide range of cybersecurity products.
Response to cybersecurity incidents.
Assisting in deploying automation of operational processes and procedures.
Identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design.
Research new and emerging security attacks and develop techniques to control risks.
Maintain operational configurations of all in-place security solutions per the established baselines.
Works closely with IT teams to implement technical and procedural controls.
Evaluate each control, technology, and gap for potential improvement and refinement.
Follow security-related policies, standards, procedures, and guidelines.
Replies to security-related inquiries from prospects, customers, and other entities.
Reports to the Security Operations Manager.