לוח משרות דרושים מומחה אבטחת מידע / סייבר

We are seeking a highly skilled and experienced Attack Team Leader to lead a specialized attack team focused on developing offensive, production-ready attack capabilities. This is a research and development (R&D) role at the core of our offensive security efforts. You will be responsible for architecting and delivering advanced low-level attack components used in evasion techniques, red team tooling, and adversary simulations.
You will be hands-on in both leadership and development, guiding technical direction, mentoring engineers, and contributing code to offensive attack components.
The Impact You Will Have
Lead the design, development, and deployment of production-grade offensive capabilities targeting application and OS CVEs exploits
Develop attack components for Windows/Linux including OS-level evasion mechanisms
Implement Python bindings to connect native low-level components with Python-based research tools and automation
Research and develop bypass techniques for modern security controls
Collaborate with the Research Team and other R&D stakeholders to implement and refine offensive concepts
Provide technical mentorship and drive engineering best practices within the team
Harness AI coding agents to streamline the above processes

We are seeking a Cyber Research Architect to join our cutting-edge Research Group. This is a full-time hybrid role where you will play a key part in shaping how our products evolve from a cyber perspective, operating as an innovation hub within the company.

You will have the freedom to explore new domains, identify gaps in our products, and pioneer techniques that will directly shape our product architecture and capabilities. From researching emerging technologies to discovering vulnerabilities and developing advanced attacks, you will push the boundaries of whats possible in automated offensive security.

Roles and Responsibilities:

Lead offensive research and vulnerability discovery across diverse and emerging technologies, identifying novel attack surfaces and spearheading new research domains.
Pioneer research into AI/ML systems and LLM-based applications, uncovering adversarial tactics and developing unique attack vectors.
Directly shape product architecture by converting research insights into scalable, high-fidelity offensive capabilities and sophisticated attack modules.
Architect and build advanced tools and frameworks that automate and scale security research operations across the organization.
Identify and emulate the most sophisticated real-world cyber attacks to continuously evolve the company's automated security validation engine.

We are looking for a versatile and innovative Attack-oriented Cyber Researcher to join our R&D team and become part of the revolution. You will conduct state-of-the-art research across multiple environments, ranging from Windows internals and kernel-level security to cloud platforms like AWS, Azure, Web technologies, etc' to stay one step ahead of real threat actors.

Your findings, your code and attack tools will feed directly into our automated attack platform, enhancing its capabilities with new offensive techniques and AI-powered decision-making algorithms.



Roles and Responsibilities:

Perform in-depth research in multiple areas such from AV/EDR evasion, binary exploitation, vulnerability discovery, and subversion of communication channels across both OS-level, domains, cloud-native domains, external surfaces.
Integrate research outputs into production-grade attack functionalities within our automation ecosystem.
Architect and develop AI-driven decision-making modules that enable the platform to mimic experienced attackers, making real-time choices during automated operations.
Develop production-ready attack capabilities using whatever technologies are necessary, Python, C/C++, C#, Java, Office Macros, Bash, PowerShell, Go, Ruby, Assembly, etc.
Mentor and collaborate with fellow R&D team members, fostering a culture of innovation and continuous learning.

Were looking for a hands-on Infrastructure Security Engineer to own and secure our hybrid infrastructure and help us stay ahead of evolving threats.
Your mission:
Secure and operate hybrid infrastructure across Azure, AWS, and on-prem data centers
Identify, assess, and mitigate vulnerabilities in Windows, Linux, and network layers
Configure and manage security controls: Defender for Cloud, Defender for Endpoint, WAFs, Firewalls, Switches
Investigate and respond to SOC alerts, perform root cause analysis, and mitigate advanced threats
Enforce security policies, patching, and compliance (GDPR, SOC2)
Partner closely with Infra, IT, and Security teams to design and improve secure architectures
Evaluate and introduce next-gen security platforms aligned with business needs.

We are looking for an Operational Security Specialist Intern to join our expanding Data Centre team.
As a Data Centre Operational Security Specialist Intern, you will be tasked with driving operational security excellence within our Data Centres. You will write reports, create presentations and communicate with management on the status of physical security operations.
Are you ready to embrace the challenge? Come build the future with us.
Key job responsibilities:
Interface and direct vendors involved in new security construction, repairs, daily security operations and patrols, and planning.
Extract metrics and observe improvements by looking at hard data.
Make suggestions on improving electronic surveillance and access controls.
Direct efforts to educate data center occupants on false alarm reductions.

We are looking for a Threat Intelligence Researcher who can analyze cyber threats and turn technical data into clear, useful insights. You will work closely with a team and clients, create reports, and build simple tools or scripts (mainly in Python) to improve how data is collected and analyzed.
This role requires strong problem-solving skills, good communication, teamwork, and taking responsibility for delivering results.
We are seeking an analytical and experienced Threat Intelligence Researcher to join our team. This is a technical role that necessitates bridging the gap between traditional intelligence analysis and software engineering principles.
You will be responsible for producing strategic and technical intelligence reports and developing automation and scripting solutions for the team.
Specifically, your focus will be on:
Intelligence Reporting: Conduct in-depth investigations and produce comprehensive reports based on customer requests.
Client Engagement: Participate in customer-facing meetings as required to present findings or gather requirements.
Tool Development: Design, implement, and maintain internal tools, scripts, and data scrapers (primarily utilizing Python) to streamline data collection and analysis.
Actionable Intelligence Production: Convert raw technical data into finished, actionable intelligence products, including detailed technical reports, the creation of YARA/Sigma rules, and executive-level briefings.

We are looking for an experienced Senior SOC Analyst to join our SOC team.
Responsibilities:
Being an active part of our SOC monitoring team.
Part of the daily tasks include investigating security-related cyber incidents while using a wide variety of different security systems.
The investigations are mostly independent and require strong analytics and creative thinking while using a wide variety of intelligence sources alongside common security tools.
Writing investigation reports (tickets), and direct interaction with clients / end-users via email or phone.

lookout for a highly skilled Senior Network Cyber Security Specialist to join our team. This role is critical for securing and maintaining robust, scalable, and secure network infrastructures in complex, multi-cloud environments (primarily Azure and AWS), cloud-native security controls and be able to handle end-to-end network security across distributed systems, hybrid environments, and multiple security domains. You will be a key player in securing the enterprise at every layer of the OSI model.



What youll do:
Comprehensive Network Security Management:
Secure and optimize complex hybrid networks, integrating Software-Defined Networking (SDN) across on-premises, Azure, and AWS, while implementing micro-segmentation strategies using tools like NSX, Azure Virtual Network (VNet) Peering, and AWS Security Groups.
Implement next-gen firewalls and intrusion detection/prevention systems (IDS/IPS), such as Palo Alto Networks or Fortinet.
Design end-to-end encrypted network connections with advanced key management techniques and certificate-based authentication to secure data in transit across public and private interfaces.
Threat Detection and Incident Response:
Implement real-time threat detection and response systems using machine learning and advanced analytics.
Establish incident response frameworks to handle high-priority security events.
Multi-Environment Security Integration:
Architect and secure highly available, multi-region, and multi-environment networks, utilizing Azure Global VNet Peering, AWS Global Accelerator, and cross-region replication to ensure data security and high-performance across geographies.
Ensure security compliance and policy enforcement across cloud, on-premises, and edge environments through centralized security management tools such as Azure Policy, AWS Config, and Terraform Sentinel.

The ideal candidate will specialize in security tools like EDR, data protection, email protection, DNS protection, Cloud Security and SASE. Responsibilities include configuring, maintaining, and automating security tools, addressing weaknesses, and researching new threats. The candidate will build, install, and configure security solutions, ensuring operational compliance with established baselines. He will also evaluate controls for improvement, write technical standards, and stay informed on emerging security trends.



Job Description:
Evaluate, implement, and manage a wide range of cybersecurity products.
Lead information security projects from evaluating the system up to deployment across the organization.
Response to cybersecurity incidents.
Assisting in deploying automation of operational processes and procedures.
Identify weaknesses, propose, plan, and deploy improvements to address and enhance the infrastructure design.
Research new and emerging security attacks and develop techniques to control risks.
Maintain operational configurations of all in-place security solutions per the established baselines.
Works closely with IT teams to implement technical and procedural controls.
Evaluate each control, technology, and gap for potential improvement and refinement.
Follow security-related policies, standards, procedures, and guidelines.
Replies to security-related inquiries from prospects, customers, and other entities.
Reports to the Security Operations Manager.

As a Security Research Team Leader, you will lead a high-impact research team dedicated to decoding the "DNA" of enterprise assets, from Cloud instances to Industrial OT. You will bridge the gap between deep technical discovery and product innovation for our CAM and CPA lines. You will drive the transition from manual research to AI-automated intelligence at scale within a collaborative environment.
Responsibilities
Team Leadership: Directly manage and mentor a specialized team of researchers, overseeing task prioritization and professional development.
AI Integration: Implement AI and LLM-driven workflows to automate asset identification, fingerprinting, and technical documentation parsing.
Cross-Functional Synergy: Act as the primary technical liaison between Research, Product (CAM/OT), and Engineering to translate findings into features.
Technical Deep Dives: Lead research into network protocols (TCP/IP) and device signatures to improve discovery and classification engines.
Data-Driven Strategy: Use Python and SQL to query massive datasets, identify emerging asset patterns, and build functional research scripts.

Security Lead BOA Ideas has been delivering smart, scalable web solutions for nearly two decades, specializing in Shopify, application development, and third-party system integrations. We love connecting systems almost as much as we enjoy connecting with our clients. We are a growing software company seeking a Security Lead to take full ownership of our company-wide security posture. This hands-on, cross-functional role will focus on building and leading security practices across development, infrastructure, and internal operations, with a strong emphasis on cloud and infrastructure security.
What you’ll do
* Take end-to-end ownership of security across the company
* Define and implement security standards, policies, and best practices
* Lead our cloud and infrastructure security efforts
* Identify risks, prioritize them, and drive remediation with relevant teams
* Select and implement security tools
* Integrate security into our development lifecycle
* Work closely with engineering teams to promote secure development practices
* Define and enforce internal security policies
* Conduct periodic reviews, audits, and security assessments

we are looking for an Android Security Research team leader to manage a team of super-talented malware researchers and reverse engineers. Our teams help top-level companies improve their security mechanisms using our insights on the latest malware trends, adversarial shifts, and new techniques. Combining intelligence, sophisticated forensics, and data science helps us catch the most relevant and up-to-date threats and threat actors.
What will you do?
* Lead and mentor a team of security researchers across multiple projects
* Own long-term malware and security research of a variety of Android frameworks, technologies, and domains
* Detect large-scale malware campaigns and help bring their operations down
* Review and enhance your team's research reports and code
* Collaborate with other teams throughout the organization
* This role is a management position with 40% hands-on technical work
* Find the bad guys - take them down
About us:
we are a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact-whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, our company provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection.

Required Senior Windows Detection Engineer
What Are We Looking For?
Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As the Senior Windows Detection Engineer, you will research and detect the latest malware and exploits targeting the EPP platform. You will reverse-engineer samples to design and implement robust detection methods that prevent sophisticated attacks. Additionally, you will develop custom research tools and PoCs to enhance security across millions of endpoints.
Why us?
Because you will meet extraordinary challenges facing the newest attacks and tech obstacles and overcoming them.
You will work with the very BEST in the industry in a flexible and independent environment.
You will influence the design of a disruptive product that will shape the security industry of tomorrow.
What will you do?
You will be responsible for detecting the newest malware and exploits based on our EPP platform. The role includes an end to end responsibility for behaviour based detection capabilities, starting from reversing the samples, designing new methods to detect or prevent those, and implementing it in the product in the end. You will be developing and using internal research tools, PoCs and discovering new ways to detect/prevent exploitation attacks (EoP, drive-by attacks and more). At the end of the day, your deliveries will enhance the security of dozens of millions of Windows endpoints which are protected by our platform.