לוח משרות דרושים מומחה אבטחת מידע / סייבר משרה מלאה, לחיפוש זה נמצאו 184 משרות

As a Data Infra Engineer, you will play a critical role in setting up, optimizing, and maintaining our data & analytics infrastructure. You will work closely with the development and Security teams to ensure the reliability, scalability, redundancy, and security of our data infrastructure platform.

The ideal candidate is passionate about big data, loves working with cutting-edge technologies, and thrives in a collaborative environment.
What you will do:

Design, implement, and manage scalable, highly available databases for both transactional, real-time use as well as backend analytics and big data.

Build, design, and maintain data processing pipeline infrastructure used by our various applications

Develop and maintain CI/CD processes for automating seamless changes to data infrastructure, including data migrations and database upgrades

Work closely with developers to make sure our data infrastructure meets existing and new feature requirements

Work alongside our Security Team to ensure our infrastructure meets rigorous security standards

Ensure the data infrastructure processes adhere to best practices in security and compliance.

Were growing fast and looking for an AI Security Team Leader to join our Engineering Team and play a key role in leading the development of our cutting-edge AI security products .
This is a high-impact, cross-functional role where youll work closely with Product, Design, and other Engineering teams, helping us deliver high-quality, customer-centric security solutions in a fast-evolving domain.
If youre highly accountable, adaptable, and business-value driven, and excited about cybersecurity, cutting-edge AI, and fast-paced startup challenges, wed love to meet you.
What Youll Be Doing:
Lead & Mentor: Lead a high-performing engineering team developing next-gen AI security products in a dynamic, rapidly changing domain.
Drive Value: Work closely with Product and customers to understand business requirements and transform them into robust, high-quality technical solutions.
Cross-Functional Ownership: Collaborate end-to-end with Product, Design, and other R&D teams to execute complex cross-company projects.
Technical Guidance: Provide architectural overview and technical mentorship to your team, stepping in when necessary to guide proper technical decisions and implementations.
Delivery & Quality: Own the execution, quality, and delivery of products running on endpoints and cloud environments in a high-velocity startup environment.

Vulnerability Discovery: Research and discover vulnerabilities across AI applications, low-level products, and cloud environments, including the development of functional Proofs-of-Concept (PoCs).

Public Research & PR: Publish technical blogs and present your research at major security conferences.

Technical Product Research: Produce in-depth technical research and conduct reverse engineering of security products to directly support the development of product and platform.

Stay up to date with newly discovered CVEs, attack techniques, and threat trends

Cross-Functional Collaboration: Partner with product and engineering teams to help improve security.

We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations

You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders.

Key Responsibilities

Microsoft 365 Tenant Administration

Administer and maintain enterprise-scale M365 tenants, including configuration, governance, and operational support.
Oversee service health, usage reporting, licensing, and user lifecycle management.
Maintain documentation of configurations, workflows, and operational procedures.
Microsoft Intune / Endpoint Management (Full Scope)

Own all aspects of Intune administration, including:
Device enrolment (Windows, macOS, iOS/iPadOS, Android)
Configuration profiles, compliance policies, and security baselines
Autopilot provisioning, device naming policies, and lifecycle
Conditional Access integration with device compliance
Endpoint security policies (AV, firewall, ASR rules, BitLocker, etc.)
Identity & Access Management (Entra ID / SSO)

Manage and secure Microsoft Entra ID (Azure AD) for identity, authentication, and access governance.
Configure and maintain SSO integrations with SaaS applications using SAML/OAuth/OIDC.
Implement and optimize:
Conditional Access policies
MFA enforcement and authentication methods policy
Privileged Identity Management
Identity Protection policies (risk-based controls)
Security & Threat Protection

Deploy and manage Microsoft Defender stack relevant to the organization
Integrate and manage endpoint security posture with non-Microsoft EDR platforms, such as Sentinel One/CrowdStrike
Collaborate with Security teams to implement detection and response workflows, ensure coverage, and align with organizational policy.
Messaging & Collaboration

Exchange Online

Administer Exchange Online policies and configurations
Implement email security best practices and support incident response when needed.
Microsoft Teams

Administer Teams policies and governance - Teams lifecycle policy, app permissions, meeting policies; External access and guest collaboration settings
SharePoint / OneDrive

Administer SharePoint Online and OneDrive settings, including:
Site governance, permissions, and sharing controls
Sensitivity labels and information protection controls (if used)
Sync and storage management, auditing and access policies
Azure & Cloud Infrastructure

Support Azure identity, security, and basic cloud resources relevant to M365 integrations.
Manage Azure configuration related to:
Entra ID integrations
Conditional Access
Hybrid identity (if applicable)
Azure security settings and monitoring
Policy, Compliance, and Governance

Implement and maintain governance models across identity, endpoint, data sharing, and collaboration tools.
Support compliance initiatives, audits, and reporting needs.
Maintain secure tenant configurations aligned with best-practice frameworks (e.g., CIS, Microsoft Secure Score, NIST).

We seek a dynamic and experienced Cyber Security Engineer to join Tipalti! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.
In this role, you will be responsible for:
Design, implement, and maintain security architectures and controls across the organization's Cloud, SaaS, AI, and Corporate environments.
Secure enterprise infrastructure by strengthening cloud security, protecting sensitive data, managing identity and access, and continuously improving the organization's security posture.
Deploy, operate, and optimize enterprise security technologies across Identity, Endpoint, Network, Email, Cloud, SaaS, Data Protection, and Security Operations domains.
Identify, prioritize, and remediate security risks, vulnerabilities, cloud exposures, and SaaS security findings.
Lead end-to-end security projects across multiple teams, collaborating with Engineering, DevOps, IT, and Security Operations to implement scalable security solutions and drive automation.
Support the secure adoption of AI technologies while ensuring security controls align with industry best practices and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls.

we are looking for a Cyber Security Support Engineer.
As a Cyber Security Support Engineer, you will be responsible for answering customer tickets, investigating problems and working with the relevant teams to resolve them, checking and validating findings and vulnerabilities found in the system, and supporting the customer success team with issues of customers.
Work Days: Monday-Friday:
Resolve product or service issues by understanding the customers request/claim, determining the cause of the issue, selecting and explaining the best solution, expediting the correction or adjustment, and following up to ensure a satisfactory resolution.
Work on complicated problems and come up with a resolution.
Collaborate directly with R&D, Product Management, and Security Research to address product bugs and improve product design for long-term supportability.
Access Management - Check and validate new users and access levels.
Maintaining our knowledge base and AI information data.
Lead initiatives to optimize support team workflows, tools, and processes to significantly boost productivity.
Support and manage the continuous systems that associate domains and IPs to our customer companies.

We are looking for proactive, analytical, talented people to join the Security Content team.
As a Research Engineer (Security Network & Apps), you will add content to Catos security and network products such as NGWF, CASB, DLP, and more.
Using agentic AI tools (Claude code, Cursor) and modern big data analysis frameworks (Redash, Athena), and network and web analysis tools to analyze network protocols and application traffic.



Responsibilities:

Research and analyze network and application behavior as part of Cato Networks security products (NGFW, CASB, DLP, and more).
Lead cross-team projects to deliver product development outcomes in partnership with Engineering and Product.
Focus on the customers impact and understand the business perspective.
Suggest and conduct new research vectors.
Work with AI tools and coding agents to automate your work and improve efficiency.
Utilize Catos Data Warehouse with big-data technologies to support your work.

You will be the only SOC analyst based in Israel, while the rest of the analyst team operates from the Philippines. You will act as the SOCs local anchor - the on-site technical counterpart for the Israel-based Cyber Security, IT, Operations, and R&D teams, and the escalation and knowledge bridge between them and the offshore shifts. The role calls for ownership, independence, and the appetite to build and improve, not only to operate.

Responsibilities

Monitoring and Detection: Continuously monitor SIEM, endpoint protection (EDR), IPS, mail security, CASB, cloud, and identity security solutions to identify potential threats.
Incident Response: Serve as one of the first levels of escalation for security incidents - investigate, contain, and drive resolution before escalating to the senior SecOps members, in accordance with defined procedures and SLAs.
Incident Coordination: Lead coordination of major incidents until ownership is transferred to the relevant SecOps, IT, Operations, or R&D team; ensure clear communication, escalation, and tracking of action items.
Threat Analysis: Analyze logs, network traffic, endpoint telemetry, and native (in-tool) alerts to determine root cause, scope, impact, and remediation steps.
SIEM and Detection Engineering: Own day-to-day operation of the SIEM - data onboarding and ingest pipelines, field mapping and data quality, dashboards and platform health - and write, tune, and maintain detection rules while measuring their effectiveness.
Exclusion and Exception Management: Own the exclusion and exception lifecycle across the security stack: review requests, assess risk, apply scoped, time-bound exclusions, and revalidate them periodically.
Automation and AI-Assisted Operations: Build and maintain automations across the SOC toolchain (enrichment, containment, ticketing, reporting), and design, implement, and validate AI/LLM-based workflows for alert triage, investigation support, and documentation - including guardrails and quality control of AI output.
Investigation Documentation: Create and maintain detailed incident tickets, including investigation audit trail, action items, and timelines.
Technical Leadership: Act as the senior operational reference for the analyst team: help prioritize workload, assure investigation quality, maintain consistent handling of incidents, escalations, and shift handovers, and mentor analysts on tooling and methodology.
Collaboration: Work closely with the Cyber Security team, IT, Operations, and R&D locally, and with the offshore SOC team across time zones.
Continuous Improvement: Drive improvements to detection logic, automation, operational runbooks, and shift handover documentation based on lessons learned from incidents.
Compliance and Reporting: Support reporting for compliance audits, management reviews, and threat intelligence updates.

We are growing and are looking for a Senior Information Security Manager JD to join our mission to increase access to life-saving treatments.

The Role:

Lead and maintain all certification and compliance efforts, including SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, and CIS benchmarks

Serve as the primary point of contact for all security questions and concerns, internal and external

Own global security awareness strategy and programs, including annual employee training, ongoing awareness campaigns, and phishing simulations

Respond to customer and prospect security questionnaires while maintaining agreed turnaround times

Oversee SOC (Security Operations Center) operations, including log source coverage, detection rule creation and tuning, and SLA/KPI management

Build and manage the Third-Party Risk Management, Business Continuity, and Disaster Recovery programs

Run the vulnerability steering committee across corporate and production environments

Manage vendor risk and the security risk register

Monitor and manage the company's external digital footprint using third-party attack surface management tools

Act as incident commander for security incidents - analyze, escalate, coordinate response, and drive remediation

Help design and execute the annual security roadmap

Manage the company Trust Center

Lead the internal security policy lifecycle - creation, updates, approvals, and distribution

Audit onboarding and offboarding processes from a security perspective

We're hiring a Detection Engineering & Response Lead to build and run our D&R capability from the ground up. You'll own the detection engineering, threat intelligence, and incident response functions across Cloud - and lead a small, growing team of analysts and engineers.

This is a lead engineering role responsible for detection development, handling the most complex security incidents, forensics, and shaping the D&R strategy.

What youll do
Lead detection development: maintain low false-positive and false-negative rates. Work closely with alerts consumers (20+ teams) to keep noise low and signal high, ensuring they can act quickly without missing genuine threats.

Architect and operate detection coverage across our cloud and bare-metal environments

Build and extend our internal D&R tools and pipelines - onboard new logs, build and automate response runbooks.

Integrate threat intelligence into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure

Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews and controlling critical action items are closed to prevent future possible incidents.

Partner with Compliance and Engineering teams to detect real threats while meeting the needs of both engineers and regulators.

Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates, etc.

Build and maintain Security Incident Response program: people, processes, tools.

Build tools, runbooks, and on-call processes that scale as the company grows.

This is a hands-on role that balances deep technical work along with building and running the function: the Lead drives high-severity incidents end-to-end, serves as the escalation ceiling, and sets the standards and structure the team operates by.

Youre welcome to work in our offices in Tel Aviv, Israel.

Your responsibilities will include:

Build and lead global DFIR capability - select and mature DFIR tooling, and establish the playbooks and follow-the-sun operating model across EMEA, Asia, and APAC while hiring and developing a team of responders.
Lead the technical response to major incidents hands-on - from escalation through containment, eradication, and recovery - and act as the final technical authority on the most complex cases.
Personally conduct end-to-end forensic investigations across cloud, platform, and endpoint environments - log analysis at scale, host and network forensics, memory analysis, malware triage, and timeline reconstruction.
Define and enforce consistent investigation standards across the team: severity and escalation criteria, cross-region handoff quality, and evidence handling that meets legal, regulatory, and forensic requirements.
Partner with the SOC, SOC Automation, Threat Intelligence, Threat Hunting, and Platform Security teams to improve detection fidelity and reduce MTTD and MTTR.
Serve as the technical voice of incident response to executive leadership, Legal, and Privacy - delivering clear, risk-based briefings, regulatory-ready documentation, and root cause analyses (RCA).
Raise the teams technical bar through case reviews and hands-on mentoring, and drive lessons-learned into measurable improvements in controls and readiness.

The GRC Program Coordinator works across security risk management, strategic certification and regulatory programs, and other governance, risk, and compliance activities as they arise. This is a hands-on role that combines program execution with real GRC subject-matter knowledge: the person in this role is expected to understand security and compliance concepts well enough to contribute professional judgment, not only to coordinate schedules and trackers. The scope spans multiple concurrent programs and will grow to include new initiatives over time.

Your responsibilities will include

Program Execution

Support the planning, tracking, and execution of strategic certification and regulatory programs: milestones, owners, due dates, and status across multiple concurrent workstreams.
Coordinate evidence collection, documentation, and readiness activities in support of certification and audit cycles.
Support engagement with external assessors, auditors, and vendors, including scheduling, correspondence, and tracking of deliverables against agreed timelines.
Security Risk Support

Contribute to security risk assessment activities: help identify, assess, and document risks, and support the maintenance of the risk register.
Support risk mitigation and follow-up activities, including tracking corrective actions through to closure and helping confirm that remediation is effective, not just logged as complete.
Help prepare risk and program status materials for internal review.
General GRC Support

Take on additional governance, risk, and compliance activities as priorities evolve, applying sound judgment on how a given task fits existing frameworks and processes.
Maintain organized, audit-ready documentation across the programs and activities supported.
Identify opportunities to improve tracking, reporting, and process efficiency across the programs supported.

The role is responsible for anticipating relevant threats, challenging defenses, identifying exploitable weaknesses, hunting for adversary activity that may evade existing controls, and converting findings into measurable security improvements. 

This is a hands-on leadership position for someone who combines offensive-security depth, threat-led thinking, strong operational judgment, and the ability to influence product, engineering, infrastructure, and security stakeholders. 



Your responsibilities will include:

Pillar strategy and leadership 

Define the Proactive Security strategy, operating model, roadmap, priorities, budget, and success measures in alignment with business objectives and threat profile. 
Build, lead, and develop high-performing Red Team, Penetration Testing, Threat Hunting, and Threat Intelligence teams. 
Create a unified intelligence-led program in which threat intelligence informs testing and hunting, and findings continuously improve defensive controls. 
Prioritize work based on crown jewels, material attack paths, emerging threats, major technology changes, incidents, and business risk. 
Establish clear team charters, engagement models, escalation paths, quality standards, and career-development frameworks. 
Provide the CISO and senior leadership with clear visibility into adversary exposure, validated weaknesses, emerging threats, and remediation progress. 
Red Team and adversary emulation 

Lead realistic, intelligence-led adversary simulations across cloud, identity, applications, infrastructure, endpoints, networks, and operational processes. 
Design campaigns that evaluate prevention, detection, response, escalation, and recovery capabilities against relevant threat scenarios. 
Develop and maintain adversary-emulation plans mapped to relevant threat actors, tactics, techniques, and procedures. 
Ensure every engagement operates under documented authorization, rules of engagement, safety controls, deconfliction procedures, and evidence-handling requirements. 
Deliver concise technical and executive reporting that explains demonstrated impact, attack paths, root causes, and prioritized improvements.