דרושים » אבטחת מידע וסייבר » Information Security Manager

Requirements:
Experience: 10+ years in information security, IT, and/or security architecture, with demonstrated leadership across security operations, infrastructure, and cloud environments.
Expertise:
Security frameworks and risk management (e.g., NIST CSF/800-53, ISO 27001, SOC 2), including control ownership and audit readiness.
Cloud security for AWS/Azure/GCP and hybrid architectures (identity, network, logging/monitoring, workload protection, CSPM/CWPP concepts).
Advanced networking and network security (firewalls, segmentation, SD-WAN, Zero Trust, VPN/secure remote access, DNS security).
Virtualization (Nutanix, VMware).
Storage systems (Netapp).
Identity & Access Management (SSO, MFA, PAM, lifecycle automation) and strong authentication/authorization patterns.
Application Security and DevSecOps (secure SDLC, code review practices, SAST/DAST, dependency and container security, CI/CD integrations).
Vulnerability management (scanning, prioritization, patching governance) and security hardening for endpoints, servers, and cloud workloads.
Security operations tooling and processes (SIEM, SOAR, EDR/XDR), logging strategy, detection engineering, and incident response.
Proven ability to lead through influence, driving a security-first culture across IT and business units while navigating complex organizational changes.
A track record of building high-performing teams by fostering a culture of continuous learning and clear career pathing for security professionals.
Exceptional ability to translate complex technical risks into business-impact narratives for leadership.
Strong "leader-as-a-partner" mindset, balancing security requirements with the need for business agility and speed.
Proficiency in developing security frameworks for the safe adoption of Generative AI and LLMs.
Certifications: CISSP and/or CISM, cloud security/architecture certifications (AWS/Azure/GCP) or equivalent experience.
Skills: Strong analytical and problem-solving skills, Strategic thinker with the ability to translate long term vision into practical execution, Comfortable navigating ambiguity and balancing competing priorities, Genuine interest in emerging technologies, including AI and security automation, Results-oriented with strong focus on measurable outcomes, Excellent written and verbal communication, stakeholder management, and program/project management.

Requirements:
Extensive experience in information security leadership, including prior ownership of a security program at scale at SaaS companies.
Strong understanding of security frameworks, cloud security, risk management, and secure software development.
Expertise in security governance, threat modeling, and compliance frameworks (SOC 2, ISO 27001, GDPR, and emerging AI regulations).
Proven ability to manage incidents, lead cross-functional teams, and implement organisation-wide security practices.
Effective communicator with experience supporting enterprise customers and executive stakeholders.
Proven ability to represent the companys security posture to enterprise customers, partners, auditors, and regulators.
Relevant certifications (CISSP, CISM, or equivalent) preferred.
Experience as CISO in a publicly traded company or IPO planning is preferred.

Requirements:
5+ years of experience in Security Operations, Cloud Security, or IT Systems Administration in a high-growth environment.
Experience owning and managing employee-facing systems and IT environments- a must
Strong hands-on experience with cloud platforms (preferably AWS) - a must.
Experience with identity platforms and SaaS security (Google Workspace / SSO).
Familiarity with cloud security platforms (Upwind / Wiz / Orca or similar).
Experience securing container environments (Kubernetes / AWS EKS).
Strong Service-oriented mindset with excellent collaboration and communication skills.
Fluent English
Nice to Have
Experience in fintech or highly regulated environments.
Practical experience with PCI DSS and SOC2 audits.
Familiarity with MDM solutions (e.g., Kandji, Jamf) and EDR tools.
Working experience with Jira and GitHub.

Requirements:
Requirements:
Strong interest in offensive security and Red Team methodologies.
Foundational understanding of Active Directory architecture, domain trust, Kerberos, GPOs, and domain privilege structures.
Familiarity with network protocols such as SMB, LDAP, DNS, and HTTP.
Knowledge of common attack techniques such as enumeration, privilege escalation, exploitation, credential dumping and C2 operations.
Ability to write or assist in technical documentation and reporting in English.
Comfortable working in a collaborative environment and eager to learn from experienced team members.
Experience with security tools such as - Nmap, Metasploit, Kali Linux, Burp Suite Pro, etc., as well as other various commercial and self-developed testing tools.
Comfortable with basic scripting and using CLI tools.

Advantages:
Personal projects, CTF participation, or lab-based experience in offensive security.
Exposure to cloud environments (Azure, AWS, GCP).
Programming/scripting experience in Python, PowerShell, C++, C#, etc.
Hands-on experience with C2 frameworks (e.g., Cobalt Strike, Mythic, Sliver).
High level of spoken and written English, including the ability to clearly explain technical topics to both technical and non-technical audiences.

Requirements:
What you have:
4+ years of experience in Application Security, Penetration Testing, or Product Security in a SaaS company.
Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).
Deep understanding and hands-on experience of web application security, including OWASP Top 10, authentication, encryption, and secure coding principles.
Proficiency in scripting or programming languages (Python, JavaScript, Go, etc.) for security automation.
Experience with cloud security best practices (AWS, GCP, or Azure).
Hands-on experience with DevSecOps and integrating security tools into CI/CD pipelines.
Strong communication skills, with the ability to explain security risks and recommendations to technical and non-technical stakeholders, including executive management.
Experience working with large-scale, complex R&D environments

Bonus Points:
Being introduced by our team member.

Requirements:
10+ years experience as a system administrator/equivalent
10+ years experience managing an IT department and teams
Experience Planning and managing physical IT & Security infrastructure
Experience managing medium to large scale windows-based infrastructure across multiple locations
Experience with Macs and their relevant management systems (e.g. Jamf)
Familiarity with Web & DB servers, mainly Windows based
Familiarity with Kubernetes and DevOps - an advantage
Familiar with industrial workflows - an advantage
Experience in managing remote teams
Strong managerial skills both with employees, peers and management level
Experience with Procurement processes in medium-large scales
Proven skills of IT suppliers/Vendors management
Experience with AWS cost optimizations.

Requirements:
Position Requirements

Prior experience as an Information System Security Officer or equivalent and at least eight years experience in the following areas:

Information Systems Security.

Implementation and administration of security processes and procedures.

Establishing and administering material control programs, including transfer, transmission, reproduction, destruction, and accountability.

Management of an accredited secure facility.

Delivering security awareness trainings and compliance programs.

Required Education/Skills:

Demonstrated leadership or command experience within the IDF, Police, or ISA

Working knowledge of cloud technologies and cloud-security frameworks.
Masterss degree in a relevant discipline (or equivalent) with 8+ years of security experience in support of sensitive programs within Defense Industry.

Must possess a high level of understanding of security related policies, procedures, and initiatives.

Ability to apply knowledge of security requirements in a complex multi-level secure environment to ensure program compliance.

Ability to work independently to identify, assess & resolve unique security situations to facilitate contract performance within the bounds of security.

Highly proficient written and verbal communications skills with emphasis on clear and concise presentation of complex information.

Must have a professional demeanor, good people skills, ability to communicate effectively, and be able to perform in a dynamic environment.

Full professional proficiency in English; portions of the recruitment process will be conducted in English.
Strong analytical and technological systems-evaluation capabilities.
Background in a global, matrixed corporate or cloud-service organization.

Requirements:
1-2 years of experience in security compliance frameworks such as ISO 27001 and SOC 2.

High level of professionalism, analytical, detail-oriented, proactive, organized, responsible, deadline-focused, self-driven and highly motivated with a can do attitude.

Ability to work with cross-functional teams, maintain strong working relationships, and maximize collaboration.

BSc. in Computer Science, Information Systems or other information security-related certificates - Advantage.

Experience with Jira and Confluence - Advantage.

Experience in implementing compliance tools - Advantage.

Experience working in a Global, International, SaaS Company as an in-house Compliance function - Advantage.

Excellent written and verbal communication skills.

Requirements:
At least 3 years of a relevant experience (from military service and/or industry).
Bright, curious and determined team player, who strive for excellency.
Problem solver, in-depth thinker with growth mindset.
Demonstrated in-depth understanding of the life cycle of advanced security threats, attack vectors and variant methods of exploration.
Deep technical understanding of network fundamentals and common Internet protocols.
Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix and MacOS), including host-based forensics and experience with analyzing OS artifacts.
Fluency with one or more scripting language (i.e. Python).
Multidisciplinary knowledge and competencies, such as:
Hands-on experience in data analysis (preferably network traffic or log analysis) in relevant data analysis and data science platforms (Jupyter, Splunk, pandas, SQL).
Familiarity with cloud infrastructure, web application and servers, android and iOS mobile platforms.
Experience with malware analysis and reverse engineering.
Familiarity with enterprise SIEM platforms (e.g. Splunk, QR.adar, ArcSight).
Excellent communication and interpersonal skills. Fluent English, including the ability to document and explain technical information in a concise, understandable manner.

Requirements:
7+ years of experience in offensive security operations, Red Teaming, threat hunting, or threat research
Deep knowledge of attack techniques, TTPs (Tactics, Techniques, and Procedures), adversary simulations, and threat-hunting methodologies
Hands-on experience with Red Team tools, frameworks (e.g., Metasploit, Cobalt Strike, Burp Suite), and custom exploit development
Strong experience with cloud platforms (AWS, GCP, Azure) and containerized environments (Kubernetes, Docker)
Familiarity with the MITRE ATT&CK Framework and its application in Red Team and threat-hunting scenarios
Proficiency with scripting and automation languages for tool development, threat detection, and attack simulation
Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis
Ability to effectively communicate and collaborate with cross-functional teams, translating complex security concepts into actionable insights
A passion for continuous learning, research, and innovation in the fields of offensive security, threat hunting, and cyber threats.