דרושים » אבטחת מידע וסייבר » CTI Analyst

The Cyber Threat Intelligence Hunter will sit within Unit 42 Managed Threat Hunting and support proactive, intelligence-led hunting across customer environments. This role combines hands-on threat hunting with cyber threat intelligence analysis, helping multinational organizations stay one step ahead of adversaries and cyber threats.
Key Responsibilities
Analyze public and private threat intelligence, Unit 42 research, adversary campaigns, malware activity, infrastructure, indicators, and TTPs.
Translate threat intelligence into actionable hunting hypotheses, investigation workflows, hunting queries, and customer-facing findings.
Execute existing threat hunting reports and hunting workflows, investigate results, and support timely customer reporting.
Investigate scheduled hunt detections and compose clear, professional reports when relevant.
Investigate hunting leads based on IOCs, threat intelligence, internal detections, customer telemetry, and emerging adversary behaviors.
Monitor the threat landscape and prepare initial context for emerging campaigns, enabling the global team to continue deeper investigation and hunting.
Collaborate with threat hunters, detection engineers, incident responders, MDR, and Unit 42 researchers to operationalize intelligence quickly and effectively.
Escalate major, unclear, or high-impact security events to the Threat Hunting leadership team when necessary.
Provide ongoing feedback on findings, hunting reports, queries, intelligence workflows, and operational processes to support continuous improvement.

We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers
Requirement for 5 working days per week: Sunday to Thursday or Monday to Friday.
Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams.

We are expanding our Fraud Intelligence Unit and need passionate, sales-focused, fraud fighters to join our team.

Reporting to the Global Fraud Intelligence Director, you will be responsible for conducting deep-dive, targeted analysis of fraud patterns to support high-impact, engagement strategies for prospective customers, with the goal of supporting the sales team and business in securing revenue growth. Unlike broader trend analysis roles within the team, this position focuses on generating highly tailored insights for a defined set of priority prospects, helping articulate the need for our advanced fraud and financial crime prevention solutions.

You will work closely with internal stakeholders to analyse us and external data with a hypothesis-driven approach, uncovering specific vulnerabilities, attack patterns, and risk exposures relevant to individual organisations or segments. Your work will translate complex data into compelling, evidence-based narratives that highlight both the impact of fraud and the urgency of addressing it.

Key responsibilities:
Support the Sales team in the generation and progression of revenue-generating opportunities.
Conduct deep, targeted analysis of our data to identify customer- or segment-specific fraud patterns, risks, and vulnerabilities.
Apply advanced analytical techniques and hypothesis-driven investigation to uncover insights that are not visible through high-level trend analysis.
Leverage AI-assisted analytical tools to enhance the scale and speed of analysis, while applying rigorous data validation and expert judgment to ensure accuracy and relevance.
Translate analytical findings into tailored, prospect-relevant narratives that clearly articulate fraud exposure, business impact, and the value of mitigation strategies.
Develop insight-driven materials that support commercial engagement, including customer-specific briefings, strategic reports, and pre-sales narratives.
Collaborate closely with sales, marketing, and regional teams to align analytical tasks with customer priorities and commercial objectives.
Design and develop effective data visualisations that simplify complex findings and strengthen the impact of customer-facing storytelling.
Present findings internally as well as directly to customers, demonstrating credibility through data-backed insights and clear articulation of fraud risks.
Build and maintain analytical frameworks, datasets, and repeatable methodologies that support scalable customer-focused analysis.
Identify opportunities to enhance analytical workflows through automation and AI, while ensuring critical thinking and professional judgment guide all conclusions.
Stay current with emerging fraud trends, analytical techniques, and AI capabilities, applying them to continuously improve the precision and impact of insights.

We're looking for a Threat Hunting Expert to join our team and shape the future of threat detection. In this role, you'll be at the forefront of identifying and analyzing emerging threats, helping to shape the features of our Threat Detection platform. You'll be crafting detection logic and hunting strategies that enable security teams to identify and respond to advanced threats across their entire environment.


WHAT YOU WILL DO

Work directly with customers to help them solve concrete security pain points and operational use cases using , primarily during POVs and onboarding.
Perform advanced threat hunting across customer datasets to identify meaningful security findings, including compromise evidence, exploitation indications, suspicious activities, and visibility or posture gaps.
Build and evolve internal tools and AI-powered capabilities that support threat hunting, anomaly detection, and exploratory analysis.
Translate immediate customer security needs into ad-hoc security content, including detections, threat hunting notebooks, and investigative workflows.
Participate in customer-facing sessions alongside Sales Engineers and Technical Account Managers to present findings, explain security context, and walk through capabilities and content.
Deliver technical demonstrations, workshops, trainings, and hands-on sessions that show customers how to use for their security workflows.
Research emerging threats, including new CVEs and active campaigns, in collaboration with the CTI team, and translate them into immediate detections and threat hunting content.
Publish public-facing technical content on threat hunting and SecOps, including blog posts, webinars, open-source tools, and research findings.

As a CyOps Analyst, you will be investigating security alerts from the Cynet platform in order to detect threats and conduct live incident response engagements, investigating and analyzing programs and software using analysis programs to identify threats and classify malware based on previous threats and commonalities, investigating and issuing threat intelligence and malware analysis report. The SOC works closely with the Research team to perform tests and uncover new attack vectors to enhance, develop, and configure threat hunting tools. Additional responsibilities include:
* Identifying unknown threats for our global clients through advanced threat hunting services to complement the standard Security Operations Center services.
* Performing analysis and forensics on security threats, malware and attacks in the wild, using industry standard platforms and tools.

About Us:
Cynet is a leader in threat detection and response, designed to simplify security for organizations of all sizes. Our mission is to empower lean security teams and their partners with an AI-powered, unified platform that autonomously detects, protects, and responds to threats - backed by 24×7 security experts. With a Partner First mindset , we focus on helping customers and partners stay protected, operate confidently, and achieve their goals. Our vision is to give every organization true cybersecurity peace of mind, providing fast, accurate protection without the noise or complexity.

we are looking for a MXDR Analyst to join the team of cybersecurity analysts monitoring services 24/7. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status. The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a can-do attitude.
Responsibilities:
Working across all areas of SOC, including continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning, and forensics.
Solving security incidents in accordance with defined service level agreements and objectives.
Prioritizing and differentiating between potential incidents and false alarms.
Addressing clients enquiries via phone, email, and live chat.
Working side-by-side with customers, providing insightful incident reports.
Working closely with peers and higher-tier analysts to ensure that your analysis work meets quality standards.
Identifying opportunities for improvement and automation within the MXDR Operation Lead, and leading efforts to operationalize ideas.
Identifying and offering solutions to gaps in current capabilities, visibility, and security posture.
Correlating information from disparate sources to develop novel detection methods.

This is a hands-on role that balances deep technical work alongwith building and running the function: the Lead drives high-severity incidents end-to-end, serves as the escalation ceiling, and sets the standards and structure the team operates by.

Youre welcome to work in our offices in Tel Aviv, Israel.

Your responsibilities will include:

Build and lead global IR capability - select and mature DFIR tooling, and establish the playbooks and follow-the-sun operating model across EMEA, Asia, and APAC while hiring and developing a team of responders.
Lead the technical response to major incidents hands-on - from escalation through containment, eradication, and recovery - and act as the final technical authority on the most complex cases.
Personally conduct end-to-end forensic investigations across cloud, platform, and endpoint environments - log analysis at scale, host and network forensics, memory analysis, malware triage, and timeline reconstruction.
Define and enforce consistent investigation standards across the team: severity and escalation criteria, cross-region handoff quality, and evidence handling that meets legal, regulatory, and forensic requirements.
Partner with the SOC, SOC Automation, Threat Intelligence, Threat Hunting, and Platform Security teams to improve detection fidelity and reduce MTTD and MTTR.
Serve as the technical voice of incident response to executive leadership, Legal, and Privacy - delivering clear, risk-based briefings, regulatory-ready documentation, and root cause analyses (RCA).
Raise the teams technical bar through case reviews and hands-on mentoring, and drive lessons-learned into measurable improvements in controls and readiness.

Our Security Operations (SecOps) team is seeking an experienced Security Operations and Incident Response Analyst to elevate our active defense capabilities. In this role, you will take a hands-on approach to our daily threat detection mission actively monitoring and triaging alerts while identifying creative ways to automate the security lifecycle.
This role is ideal for a seasoned analyst who has mastered the fundamentals of security monitoring and is ready to apply those insights to cloud security and detection engineering. You will be an active participant in our daily monitoring operations, using that front-line visibility to proactively tune our alerting logic, eliminate noise, and build higher-fidelity detections.
Working within a collaborative, globally distributed team, you will partner with key stakeholders, hold a significant voice in shaping our tooling, and follow a structured career progression tailored to your professional growth.
What You'll Be Doing:
Monitor & Respond - Serve as a key responder across our cloud and corporate environments, actively triaging alerts, investigating active threats, collecting evidence, and driving incidents to swift containment.
Analyze Cloud Risks - Investigate cloud-native alerts, analyzing infrastructure context and telemetry to isolate, validate, and remediate active risks.
Collaborate Cross-Functionally - Partner with internal engineering and infrastructure teams when needed to coordinate containment, remediation, and post-incident root-cause analysis.
Optimize Detections & Playbooks - Collaborate with senior engineers to tune alerting logic, suppress noise, and develop higher-fidelity detection rules, while identifying opportunities to optimize automated playbooks for alert enrichment and triage.

Interested in Cyber Security and looking to work on real-world threats?
Join our company's Network Security Research team, where you'll help develop protections that keep organizations around the world safe from emerging attacks. Our team researches new threats, analyzes network vulnerabilities, develops detection and prevention technologies, and delivers frequent security updates to customers worldwide.
This role combines hands-on security research, threat analysis, and product content development, offering the opportunity to work on a wide variety of technologies, attack techniques, and emerging trends-including the growing use of AI in Cyber Security.
Key Responsibilities
Research, develop, and release network protections and security updates for our company's Network Security products.
Reproduce and analyze malicious attacks and campaigns to better understand threats and design effective mitigations.
Investigate network protocols and identify new detection opportunities.
Hunt for emerging threats using our company's cloud-scale data and develop new analysis techniques.
Explore how Generative AI and LLMs can improve threat research, detection, and security analysis.
Share research findings through technical blog posts and other internal and external publications.
Collaborate closely with researchers and developers to bring new protections from research into production.

Required Exposure Analyst (Customer-Facing)
About us:
We are a leading hybrid cloud security company thats changing the way organizations approach cyber risk. We transform exposure management by showing our customers exactly how attackers might combine misconfigurations, vulnerabilities, and identity exposures across cloud and on-prem environments to compromise critical assets. With us, our customers can see all the ways attackers might get in-and the best ways to stop them with a fraction of the effort.
About You & The Role:
Are you someone who loves connecting with people just as much as you love talking tech? We are looking for a highly empathetic, customer-focused Exposure Analyst to join our managed services team. In this role, youll be the friendly face and trusted advisor helping our premium customers get the absolute best out of the platform.
Youll dive deep into security postures, translate complex attack paths into simple, actionable steps, and build the kind of trust that makes IT and Security teams excited to work with you.
Responsibilities:
Be the Trusted Advisor: Own the primary technical relationship for a portfolio of enterprise and mid-market customers, establishing yourself as their go-to security partner representing us in the customers organization.
Daily Posture Reviews & Action: Conduct daily reviews and analyses of your customers' security postures using the platform. You'll turn complex findings into clear, risk-based insights and proactively open remediation tickets.
Weekly Check-ins & Deep Dives: Lead engaging weekly calls with your customers, hosting targeted deep-dive sessions to guide them on configuration, best practices, and new features to ensure optimal ROI.
Bridge the Gap: Drive remediation outcomes by pushing discussions directly with the customers IT, DevOps, and Cloud teams-not just their security teams-helping them prioritize efforts based on attack path analysis.
Deliver the Big Picture: Proactively track progress and provide monthly reports to both technical and executive stakeholders. Youll also co-host Executive Business Reviews (EBRs) alongside our Customer Success team.
Champion the Customer: Act as the lead technical escalation point, partnering with our internal R&D, Product, and Support teams to make sure your customers' needs are always heard and resolved.