לוח משרות דרושים מומחה אבטחת מידע / סייבר, לחיפוש זה נמצאו 173 משרות

Requirements:
4+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) creating, escalating, and managing security incidents and creating incident reports or 4+ years in either a SecOps or DevSecOps role.
Proficient in at least one scripting language (Python, Bash, or Node.js) to build security guardrails and automate manual processes.
3+ years working with security tools including SIEM, Analytics & Intelligence, Intrusion Detection, Malware Detection, Data Loss Protection, and Identity & Access Management.
Experience managing low to high-risk cybersecurity events, alerts, and incidents with event monitoring, analysis, and escalation.
A builders mindset: You aren't just identifying vulnerabilities; you are designing the automated fixes, guardrails, and processes that prevent them from recurring.

Requirements:
Professional experience in Rust or C/C++ (comfort with both, or willingness to pick up the second, is a plus - not a hard requirement)
Security background - experience with developing security products - such as IPS, firewall, researcher, API security, etc
General familiarity with Kubernetes and at least one public cloud (AWS, Azure, or GCP) - production experience is preferred, but strong infrastructure/networking experience elsewhere is also welcome
Comfort working on systems/infrastructure-level software rather than purely application-level code
Hands on AI SDLC experience
Curious
Tech savvy
Good communication skills
Independent
Advantage
Experience with DPI engines, protocol parsers, or signature-matching systems (e.g., Snort/Suricata-style rules)
Exposure to ML/AI approaches for anomaly detection, classification, or rule generation
Linux kernel/networking internals: netfilter/nftables, eBPF/XDP, TCP/IP, TLS
Kubernetes networking specifics: CNI, NetworkPolicy, service mesh data planes (Envoy/Istio)
Container runtime/isolation experience: containerd/CRI-O, namespaces/cgroups
Low-latency/high-throughput systems experience (zero-copy design, lock-free structures)
Familiarity with attacker techniques and IPS/IDS evasion
Comfort with ambiguous, greenfield technical work.

Requirements:
Desired Background
A seasoned group manager with 3+ years of experience in Cyber Security, including leading teams and/or team leaders.
A strong background in malware research, endpoint protection, or file security
Experienced change leader with demonstrated AI transformation leadership
Proven ability to set technical direction and deliver across multiple teams
A problem solver, capable of finding creative solutions and getting things done
Fluent in English
It would be great if you also have:
Hands-on background in reverse engineering, detection research, or threat intelligence
Experience applying AI or machine learning to security problems
Published material, Public speaking or conference presentations.

Requirements:
2+ years of hands-on experience in application penetration testing.
Strong understanding of OWASP Top 10 and CWE Top 25, with proven experience identifying vulnerabilities and supporting practical remediation strategies.
Familiarity with high-level programming languages (Java, JS, Python, etc.).
Relevant App PT training and certifications such as EWPTX, OSWE, etc.
Strong English communication skills, with the ability to communicate technical topics clearly in client-facing discussons.
Advantage: Deep understanding of the LLM Top 10, AI security risks, MCP security risks, and AI/LLM hacking techniques.
Advantage: Proven experience in secure code review or high-level code auditing.
Advantage: Knowledge of Secure SDLC practices, and methodologies, including Microsoft SDL, OWASP SAMM, and OWASP ASVS.

Requirements:
2-3 years of experience as a DFIR team member
Experience with performing digital forensics in a cloud environment
Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis
Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping
Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL
Strong understanding of targeted attacks; able to create customized tactical remediation plans
Good written and verbal English communication skills

Requirements:
3+ years of hands-on experience with securing large organizational networks, including security controls, OS hardening, network devices security, etc.
Strong understanding of governance, risk management, and operational processes.
Familiarity with cybersecurity frameworks (NIST CSF, ISO 27001 concepts), risk assessment, mitigation planning, and third‑party risk management.
Significant experience in at least five subjects from the following list:
Vast knowledge and expertise in cyber-security IT systems and cloud infrastructure
Deep understanding of Microsoft IT on-prem and cloud infrastructure, e.g., Entra-id, Office365, AD, GPO, protocols.
Practical experience with cloud environments - AWS, Azure, GCP- A significant advantage
Practical experience in consulting services and risk assessment
Practical experience with security configuration and maturity assessment
Knowledge of security controls, e.g., AV, EDR/XDR, DLP, Device control, etc.
ZTNA design & deployment experience.
Experience with implementing security monitoring procedures & systems (SOC, SIEM, SOAR)

Requirements:
3-4 years in cybersecurity GRC, IT risk, compliance, audit/assurance, or related process‑oriented security roles.
Strong understanding of governance, risk management, and operational processes.
Familiarity with cybersecurity frameworks (NIST CSF, ISO 27001 concepts), risk assessment, mitigation planning, and third‑party risk management.
Basic conceptual understanding of cloud/SaaS shared responsibility models.
Ability to communicate technical issues in business‑aligned language.
Hands-on experience with security controls - an advantage.
Strong writing, communication, and facilitation skills.
Comfortable collaborating with internal stakeholders and external customers.

Requirements:
Experience leading a cyber threat intelligence or threat research team.
At least 6 years of experience in cyber threat intelligence or cybersecurity research.
Demonstrated experience writing public blog posts and in-depth research papers.
Strong knowledge of the cyber threat landscape and intelligence methodologies.
Excellent written and spoken English, with the ability to present research to customers and other external audiences.
Strong WEBINT research and virtual HUMINT skills, including source discovery, validation, and long-term source management, are an advantage.

Requirements:
Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum of 7 years of experience in application security, with at least 3 years in a leadership role.
Proven experience in implementing and managing SSDLC frameworks.
In-depth knowledge of security frameworks and methodologies.
Strong understanding of threat modeling methodologies, secure coding practices and common vulnerabilities (e.g., OWASP Top Ten).
Proficiency in programming languages such as Java, Python, C#, or similar.
Experience in implementing security tools and technologies such as ASPM, SAST, DAST in complex and high-scale environment.
Excellent communication and leadership skills, with the ability and passion to drive change across the organization.
Relevant certifications such as CISSP, CISM, or CSSLP are desirable.
Proven experience in a similar role at another leading software development company.

Requirements:
5+ years of experience in fintech or payments fraud analytics. You are a seasoned IC who has scaled fraud programs in complex, high-volume environments.
AI/ML Expertise: Proven experience leveraging Generative AI, LLMs (e.g., RAG, agentic workflows), and Machine Learning to solve real-world risk problems. You don't just use these tools; you know how to build with them.
Technical Powerhouse: Mastery of Python (for data science and automation) and SQL (performance tuning, CTEs, window functions). You are comfortable working alongside engineers and data scientists.
Network Analysis: Deep experience with graph databases (Neo4j, TigerGraph) and link-analysis techniques to identify organized criminal networks.
Demonstrated ability to translate complex quantitative findings into executive‑level insights and influence roadmaps across product, engineering, finance, and support.
Strategic Influence: While this is not a management role, you have a track record of influencing technical roadmaps and advising senior leadership on risk-reward trade-offs.
Advanced data‑visualization skills (Looker, Tableau, Omni, Superset, or equivalent) with a portfolio of self‑service dashboards adopted by the company‑wide.
Domain Depth: Expert knowledge of the payments lifecycle, including CNP, ACH, and RTP risk, as well as the specific fraud challenges of the SaaS and marketplace sectors.
Regulatory Fluency: A solid understanding of PCI DSS, Nacha rules, and the emerging regulatory landscape surrounding AI in financial services
Prior experience scaling fraud programs in a marketplace, SaaS, or creator‑economy context - Advantage.
Education: Bachelors or Masters degree in a quantitative field (e.g., CS, Statistics, Mathematics, Economics) or equivalent technical experience- Advantage..

Requirements:
3+ years in privacy compliance at a law firm or large company, in Israel or abroad.
Extremely Fluent or highly skilled in English.
Strong knowledge of GDPR, US privacy laws, and regulated technologies.
Experience negotiating data agreements.
Experience with AI-related advisory and agreements.
Privacy compliance and AI due diligence in corporate transactions.
Experience handling data breaches.