לוח משרות דרושים הייטק אבטחת מידע / סייבר, לחיפוש זה נמצאו 486 משרות

we are looking for highly capable Incident Response Expert. The Incident Response Expert role includes conducting in-depth forensic analysis, investigation and response to real-world cyber threats. A significant part of our investigations is performed onsite at the client location, in collaboration with the clients IT and security teams.
Main Responsibilities:
Participate in forensic and incident response investigations, including large scale sophisticated attacks, conduct log analysis, host and network-based forensics and malware analysis.
Participate in threat hunting: proactively hunt for targeted attacks and new emerging threats in clients networks; as well as security assessments and simulations.
Identify indicators of compromise (IOCs) and tools, tactics, and procedures (TTPs) to help ascertain whether and how breaches have occurred.
Utilize and develop tools and methodologies to improve Sygnias existing investigative and hunting technological stack.
Collaborate with IT and Security teams during investigations.
Generate and present a comprehensive and professional report of findings from investigations.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do
Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.

Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.

Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.

Secure AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.

Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.

Investigate and respond to application security incidents, including root cause analysis and durable corrective action.

Contribute to secure development lifecycle and to compliance work.

we are looking for a MXDR Analyst to join the team of cybersecurity analysts monitoring services 24/7. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status.
The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a can-do attitude.
Responsibilities:
Working across all areas of Sygnias SOC, including continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning, and forensics.
Solving security incidents in accordance with defined service level agreements and objectives.
Prioritizing and differentiating between potential incidents and false alarms.
Addressing clients enquiries via phone, email, and live chat.
Working side-by-side with customers, providing insightful incident reports.
Working closely with peers and higher-tier analysts to ensure that your analysis work meets quality standards.
Identifying opportunities for improvement and automation within the MXDR Operation Lead, and leading efforts to operationalize ideas.
Identifying and offering solutions to gaps in current capabilities, visibility, and security posture.
Correlating information from disparate sources to develop novel detection methods.

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research/ anti-bot defense/ web-scraping /threat hunting, with a proven ability to take initiative and conduct independent research with a track record of high-level results. In other words, not just an individual contributor, but a true talent that is seeking to make a mark in the industry. You will lead technical threat research, author analytical reports, and proactively monitor ongoing and emerging threats to keep us steps ahead of adversaries. Responsibilities
* Hunting, detecting, monitoring, and researching threats against Alice clients.
* Analysis of threat groups and TTPs across different fraudulent ecosystems.
* Researching and monitoring multiple sources through the clear, deep, and the dark web.
* Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients. Work closely with client account leads and stakeholders, as well as collaborating with fellow analysts to produce intelligence reports.
* Review, enrich and provide analyst tradecraft for other team members as part of the delivery process. Prepare assessments of current threats and trends based on collection, research and analysis of classified intelligence collected by the teams.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research/ anti-bot defense/ web-scraping /threat hunting, with a proven ability to take initiative and conduct independent research with a track record of high-level results. In other words, not just an individual contributor, but a true talent that is seeking to make a mark in the industry. You will lead technical threat research, author analytical reports, and proactively monitor ongoing and emerging threats to keep us steps ahead of adversaries. Responsibilities
* Hunting, detecting, monitoring, and researching threats against Alice clients.
* Analysis of threat groups and TTPs across different fraudulent ecosystems.
* Researching and monitoring multiple sources through the clear, deep, and the dark web.
* Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients. Work closely with client account leads and stakeholders, as well as collaborating with fellow analysts to produce intelligence reports.
* Review, enrich and provide analyst tradecraft for other team members as part of the delivery process. Prepare assessments of current threats and trends based on collection, research and analysis of classified intelligence collected by the teams.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Our team is looking for a Senior Backend Developer with a passion for solving complex scaling problems with a good understanding of efficient, forward-looking system design. Our desired candidate has a can-do attitude that will inspire and help us build rocket ships. om scratch'

What You'll Do


Shape the Core - Design, build, and scale the companys infrastructure at the heart of our product.
Raise the Bar - Continuously refine system architecture, set high technical standards, and push for engineering excellence.
Collaborate Across the Board - Work hand-in-hand with R&D, product, and other teams to deliver powerful cross-platform features.
Engineer for Scale - Architect and build features that thrive in the AI era.
Be a Force Multiplier - Drive improvements in our development processes, tools, and frameworks, so the whole team can move faster and smarter.

Lead secure application design and embed security across the SDLC - from threat modeling to CI/CD.
About the Role
Lead secure application design and support development teams throughout the SDLC. You'll integrate and optimize security controls such as SAST, DAST, SCA, and secrets scanning within CI/CD pipelines, review security findings, perform threat modeling, and work with engineering teams to prioritize and implement effective mitigations.
What You'll Do
Design and review secure application architectures across web, API, microservices, and AI-enabled environments.
Perform threat modeling and hands-on security reviews focused on the OWASP Top 10, API risks, business logic flaws, and data exposure.
Review application code, architecture, and security controls to identify practical risks and remediation paths.
Help engineering teams embed security into the SDLC, including SAST, DAST, SCA, and CI/CD security controls.
Translate technical vulnerabilities into clear business risks for product, engineering, and executive stakeholders.

Were seeking a Senior Security Researcher to drive end-to-end research initiatives that strengthen our detection capabilities. In this role, youll investigate emerging attack surfaces, craft and implement innovative detection logic, and test your findings in real-world environments. Its a hands-on position ideal for someone eager to transform research insights into effective, production-grade security defenses.


Responsibilities
Research AI Agent and LLM-related risks, such as prompt injection and jailbreaking and implement sophisticated detection strategies.
Conduct research on cloud, web, and API security to uncover new threats and attack vectors.
Develop, refine, and design world-class detection logic and rules to enhance our runtime protection.
Perform threat-hunting activities across large data sources to identify emerging attack patterns
Drive full-cycle research: from hypothesis and experimentation to production validation.
Collaborate with engineering and product teams to deliver actionable insights.

Required Senior Incident Response Security Consultant, Mandiant, Cloud (Hebrew)
About the job
As an Incident Response Consultant, you will provide industry-leading incident response, assessment, transformation, managed detection and response, and training services with in-depth tactical support. You will help organizations effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident. You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment, remediation, and crisis management.
In this role, you will work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.Part of Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
Responsibilities
Lead large, client-facing incident response engagements, examine cloud, end-point, and network-based sources of evidence.
Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations.
Build scripts, tools, or methodologies to enhance Mandiants incident investigation processes.
Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Responsibilities:
Take an ambiguous security challenge from "this might be possible" to a working POC that proves the company`s approach, grounded in technical reality.
Research the customer need, cybersecurity gap, and technical feasibility behind an idea before and while you build.
Own the end-to-end execution loop: scope the problem, build the prototype, evaluate it, document the approach, and ship it.
Partner closely with Product, R&D, and GTM. Dont just write about emerging problems. POC the solutions so customers see something real.
Make the calls on architecture, tooling, and tradeoffs, moving quickly from ambiguity to a tangible prototype.
When a POC succeeds, lead the transition to Engineering and Product so it can receive the resources required for productization.
Stay ahead of the rapid evolution in AI and proactively bring relevant insights into the team.

Were looking for a highly skilled Junior Offensive Security Researcher to find new attack vectors, from initial exploitation to impact in the emerging world of Agentic AI, LLMs, and their surrounding ecosystem.

This role is ideal for researchers who are passionate about breaking new ground in the growing world of AI and impacting the future landscape of our products.

What Youll Do
Responsibilities:
Research emerging agentic technologies and uncover new exploits, attack vectors and risks. From initial exploitation to impact.
Build tooling, harnesses, and test frameworks to scale attack discovery and make research repeatable. And contribute to internal red team infrastructure.
Investigate the surrounding ecosystem, not just the model. This includes: plugins, connectors, MCP servers, orchestration frameworks, and different types of infrastructure. Mapping how weaknesses in one component can develop into full compromise.
Work with product and engineering to translate offensive findings into new defense capabilities.

The Senior Product Manager will play a key role in the product life cycle with an emphasis on customer requirements, as well as generating and defining the product vision. The Senior Product Manager will work closely with multiple departments, including product management, engineering, UX/UI, sales, customer support, finance, and marketing, to ensure customer requirements are met.

This is an exciting opportunity to join a fast-growing, innovative company, be part of a strong team, and lead a product that solves a high-profile problem in the Cloud Security space. You will be joining the companys product team and leading a significant domain.


Your Opportunity:
Own and lead the vision, strategy, and execution for the Cloud Threat Detection domain, driving end-to-end product development of threat detections and stories, AI risk assessment, eBPF agent, container runtime protection and more. to help customers reduce risk and achieve continuous cloud compliance

Engage directly with customers and prospects to gather insights, validate assumptions, and ensure product decisions align with real-world security challenges.

Collaborate cross-functionally with engineering, design, and research teams to deliver high-impact features and platform capabilities

Drive both inbound and outbound product efforts

Define product strategy and roadmap

we are looking for a Lead SoC Architect
Responsibilities

Definition and detailed hardware specifications of subsystems in the SoC

Breaking down the sub-system architecture into microarchitectural blocks with the related firmware, and SW components.

Understanding the system in which the SoC is integrated to and designing the SoC to perfectly fit into the datacenter system.

We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.



While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.

Key Responsibilities

Application Security & Secure Engineering

Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security

Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance

DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.