לוח משרות דרושים הייטק אבטחת מידע / סייבר

Were looking for a Staff Application Security Engineer to join our IT and Security team. This role is ideal for a hands-on security professional who is passionate about working closely with engineering teams to design secure software, fix vulnerabilities, and promote a culture of security across the organization.

Youll be responsible for shaping and owning our Secure Software Development Lifecycle (SSDLC), managing security tooling, and leading the assessment of application and API security across our products and services.

Here are a few of the things you will do:
Collaborate directly with engineering teams to define remediation strategies, track implementation, and validate security fixes across the application stack.

Design, implement, and drive SSDLC practices across the company-from security design reviews and threat modeling to proactive triaging in production.

Conduct threat modeling, architecture reviews, and security assessments of cloud-based applications and services, including those leveraging emerging technologies.

Manage HoneyBooks bug bounty program, validating reports and coordinating response and resolution.

Own and operate our suite of AppSec tools including SAST, ASPM, and other security scanners-triaging findings, prioritizing issues, and guiding engineering toward resolution.

Review source code and applications to identify vulnerabilities and collaborate with dev teams on remediation.

Act as the point of contact for findings from penetration tests, automated scanners, and external assessments, helping manage triage and ensure timely fixes.

Continuously research and stay current with application security trends, frameworks, vulnerabilities, and best practices.

Promote a strong security culture across HoneyBook by educating and enabling engineers, architects, and DevOps teams to build secure software from the ground up.

We are seeking an exceptional Identity & Access Management Expert to join us.
As a key member of our team, you will play a critical role in a shaping the future of identity and access management within our organization.
In this role, you will collaborate with diverse professional, leading projects that involve planning and designing processes in large and complex systems while working in a production environment.
You will also evaluate and implement new and existing technologies for strong authentication of users and applications, on - prem and cloud. This position requires strong technical skills, a broad vision, and the ability to lead processes in collaborations with team members and other technical teams.
Join us and have the opportunity to contribute directly to Israel's national security.

We are seeking a talented and passionate Embedded Vulnerability Researcher to join our team focused on offensive research of embedded systems. If you thrive on uncovering low- level vulnerabilities, reverse engineering complex systems, and pushing boundaries of security research, this role is for you.
Conduct offensive research on Low- Level vulnerabilities in Linux, Kernel and Embedded systems.
Reverse engineer code, firmware and system components to identify weaknesses
Work hands-on with systems, tools and advanced research environments to develop and execute exploits.

We are looking for a talented researcher to join our security- research team
Our team focuses on vulnerability research and exploitation in a variety of systems, producing cutting-edge solutions for Israel's most important and innovative operations.
Nowadays, the modern technology landscape is highly security- focused, which requires an in-depth understanding of state-of-the-art platforms in order to locate and exploit their vulnerabilities.
Taking on this challenge on a daily basis, our team makes a profound impact, and each team member gets to enjoy a great sense of accomplishment.
You will be working in a dynamic environment, surrounded by passionate and highly-motivated top researchers.

We are a global leader in ad security and quality solutions, trusted by top publishers, app developers, and ad platforms worldwide. Our mission is to maintain a safe and transparent digital advertising ecosystem, ensuring that users everywhere enjoy a clean and trustworthy online experience. We are expanding our Research Team and are looking for a Junior Malware Researcher with a strong technical mindset, excellent communication skills, and a passion for problem-solving. As a Malware Researcher, you will be responsible for hunting emerging malware and malvertising campaigns and developing effective detection methods to protect our global customers. You will work closely with the R&D and Product teams and be part of a friendly, professional team based in Tel Aviv, supporting customers worldwide.
Responsibilities:
* Detect, monitor, and hunt new malvertising and malware threats.
* Research new attack vectors, delivery methods, and evasion techniques.
* Develop and improve detection logic and signatures.
* Investigate malicious campaigns using internal tools, databases, logs, and external intelligence sources to uncover hidden patterns.
* Analyze web traffic, scripts, redirects, and network behavior to identify malicious activity.
* Collaborate with R&D and Product teams to translate research into production-grade protections.
* Contribute to internal documentation, research reports, and best practices to improve knowledge sharing and support processes.

We are looking for a Junior Cyber Security Specialist with a deep interest and basic knowledge of both information security and computer science. We are a cybersecurity firm specializing in advanced adversary simulation and offensive security testing. We deliver Red Team assessments for Fortune 500 companies, simulating sophisticated, real-world attacks across external, internal, cloud and Active Directory environments. Our services span both stealth-based Red Team operations and risk-focused assessments, covering a wide range of attack surfaces including on-premise and cloud environments.

Responsibilities:
Participate in Red Team and Risk assessments under the guidance of senior team members.
Assist in documenting findings, writing technical reports, and contributing to final deliverables for clients.
Learn and simulate attacker tactics, techniques, and procedures (TTPs).
Support Risk Assessments, where the objective is to identify vulnerabilities, especially in Active Directory, without the requirement for stealth. These engagements provide deep insight into systemic weaknesses and offer high exposure to internal infrastructure.
Contribute to external assessments, such as, perimeter testing, and reconnaissance.
Participate in our internal, hands-on training program, which covers red team TTPs, tool usage, internal methodologies, and real-world scenarios.

Alice is seeking to hire an Intelligence Infrastructure Expert for a full time position. The role includes creation, management, and integration of the company’s unique infrastructure and tools across the different Web environments. The position includes infrastructure establishment and processes management alongside end to end delivery to the different teams within the organization. You will be responsible for the generation of insights, means, and methods provided from diverse intelligence streams enabling the organization’s teams to make the internet a safer place. Responsibilities:
* Monitoring Web and Mobile environments - social media platforms, forums, blogs, mobile applications and darknet to uncover malicious activity.
* Identification, analysis and intelligence gathering on bad actors, sources and platforms, while identifying distribution methods.
* Provide insights on intricate means and methods being used by threat actors to abuse the tech world’s most popular platforms while putting users at risk.
* Identify and address opportunities alongside potential problems in operational processes.
* Research, development and strategizing of new operational methods and logics. We are looking for an expert with a ‘Can Do!’ approach with the following desirable skills, qualities and experience:


About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact—whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection.