דרושים » אבטחת מידע וסייבר » Director of IT Security

We are looking for an experienced and highly driven Head of Security to join our Security leadership team, reporting directly to the CISO.

This is a unique opportunity to play a key leadership role in shaping and scaling the security program of a fast-growing fintech company. As Head of Security, you will serve as the CISO's trusted partner, helping drive the organization's security strategy while leading day-to-day execution across multiple security domains.

Yo will oversee both the Security Operations , Security Engineering and GRC organizations, managing team leads and security professionals across Israel and abroad. This role requires a strong combination of strategic thinking, technical depth, operational excellence, and people leadership.

The ideal candidate brings experience from large-scale, cloud-native environments and has successfully led security programs spanning Security Operations, Security Engineering, Compliance, Risk Management, and Security Architecture. You will work closely with Engineering, Infrastructure, IT, Product, Legal, Compliance, and executive leadership teams to continuously strengthen our security posture while enabling business growth.

What You'll Do
Drive execution of strategic security initiatives across the organization.
Partner closely with the CISO to define and execute our security strategy and roadmap.
Translate business objectives into scalable security programs and controls.
Act as a key stakeholder in security governance, risk management, and decision-making processes.
Help shape the future of Security, including emerging domains such as AI Security and Security Automation.

Organizational Leadership & Business Partnership
Lead and mentor multiple security teams, including Security Operations and Security Engineering, through direct management of team leaders and global security personnel.
Build scalable operating models, KPIs, governance processes, and organizational structures that support Sunbit's rapid growth and global expansion.
Partner closely with Engineering, Infrastructure, Product, IT, Legal, Compliance, Privacy, Risk, and Business leaders to ensure security enables business objectives while managing risk appropriately.
Collaborate extensively with US-based stakeholders and cross-functional teams in a dynamic global environment.
Drive the adoption of AI, automation, and emerging technologies to improve security effectiveness, operational efficiency, and scalability.

we are looking for a Head of Security Reliability to establish and lead the Security Reliability pillar. Reporting directly to the CISO, this leader will be accountable for the ongoing effectiveness, resilience, and operational maturity of security products after implementation.

The role ensures that security platforms remain properly configured, maintained, integrated, monitored, adopted, and optimized to deliver measurable risk reduction. It also owns Third-Party Risk Management (TPRM) program and the security-review process for new products, services, and technologies introduced across the company.

This is a hands-on leadership position for someone who combines security expertise, operational discipline, vendor-management experience, and a strong product mindset. The role partners closely with Security, IT, Engineering, Product, Procurement, Legal, Privacy, Compliance, and business stakeholders.

Key responsibilities

Security product reliability and lifecycle ownership

Own security products and platforms after implementation, from operational handover through optimization, renewal, replacement, or retirement.
Ensure security tools are correctly configured, maintained, integrated, monitored, and aligned with Nebius's risk profile and technical environment.
Define ownership, service levels, operating procedures, support models, and escalation paths for every security platform.
Monitor platform availability, data quality, control coverage, integration health, licensing, capacity, and performance.
Establish disciplined processes for upgrades, configuration changes, testing, exception management, and end-of-life planning.
Continuously assess whether security products deliver their intended outcomes, and improve utilization, coverage, automation, and return on investment.
Reduce overlapping capabilities, configuration drift, operational gaps, and underused tooling across the security stack.
Manage vendor performance, technical escalations, product-roadmap discussions, renewals, and service reviews.
Ensure newly implemented security products transition into operations with clear documentation, ownership, monitoring, and success criteria.
Security configuration and control assurance

Define and maintain secure configuration baselines for security platforms.
Establish continuous control-health monitoring to identify disabled, degraded, misconfigured, or incomplete controls.
Validate that integrations and telemetry remain complete, accurate, and reliable as environment evolves.
Coordinate remediation of control gaps with Security, IT, Engineering, and platform owners.
Maintain evidence demonstrating the operational effectiveness of security controls for audits, certifications, and customer-assurance activities.

We are growing and are looking for a Senior Information Security Manager JD to join our mission to increase access to life-saving treatments.

The Role:

Lead and maintain all certification and compliance efforts, including SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, and CIS benchmarks

Serve as the primary point of contact for all security questions and concerns, internal and external

Own global security awareness strategy and programs, including annual employee training, ongoing awareness campaigns, and phishing simulations

Respond to customer and prospect security questionnaires while maintaining agreed turnaround times

Oversee SOC (Security Operations Center) operations, including log source coverage, detection rule creation and tuning, and SLA/KPI management

Build and manage the Third-Party Risk Management, Business Continuity, and Disaster Recovery programs

Run the vulnerability steering committee across corporate and production environments

Manage vendor risk and the security risk register

Monitor and manage the company's external digital footprint using third-party attack surface management tools

Act as incident commander for security incidents - analyze, escalate, coordinate response, and drive remediation

Help design and execute the annual security roadmap

Manage the company Trust Center

Lead the internal security policy lifecycle - creation, updates, approvals, and distribution

Audit onboarding and offboarding processes from a security perspective

This is a senior, hands-on individual-contributor role with end-to-end ownership of security risk assessments, the security risk register, remediation tracking, risk acceptance, and risk reporting. The successful candidate will work closely with engineering, cloud infrastructure, product, security, compliance, legal, and business teams to ensure that material risks are identified early, assessed consistently, and driven toward clear treatment decisions.

The role requires strong judgment, technical understanding, and the ability to influence stakeholders without relying on formal authority.

Your responsibilities will include

Risk Assessment

Lead security risk assessments for infrastructure, cloud environments, products, applications, business processes, and major technology changes.
Conduct risk assessments for new initiatives, systems, and significant changes, including supporting M&A-related risk assessment work alongside the due diligence team.
Evaluate the design and effectiveness of controls and identify residual risk following mitigation.
Identify emerging and systemic risks that may affect multiple services, regions, or business functions.
Risk Register & Tracking

Maintain the security risk register: log new risks, update status, track owners, and follow items through to remediation or formal risk acceptance.
Support the ongoing refinement of risk assessment and risk register processes, contributing improvements as the practice matures.
Coordinate with other GRC functions on findings and gap assessments that carry risk implications, and independently determine whether a given finding warrants a risk register entry.
Metrics & Reporting

Maintain and improve security risk assessment, scoring, prioritization, and acceptance processes.
Define and monitor meaningful Key Risk Indicators and risk trends.
Translate complex technical risks into clear business impact for senior leadership and governance forums.
Prepare risk reporting that supports security posture reviews, strategic decision-making, and Board-level reporting.
Support auditors, customers, and internal stakeholders on security risk management matters.
Cross-Functional Coordination

Work closely with other GRC functions to ensure risk assessments reflect current operating reality.
Partner with engineering and business stakeholders to embed risk thinking into day-to-day decisions, building trust through clear, practical communication rather than formal authority.
Build trusted relationships with risk and remediation owners while maintaining independent and objective judgment.

As Head of Security for Base44, you'll lead and implement security strategies, ensuring robust protection for our products, clients, and internal systems. With a dotted-line to the company CISO, you'll serve as Base44's primary security authority while ensuring full alignment with our company's corporate security standards, policies, and enterprise-grade compliance requirements.
In your day-to-day, you will:
Design, architect, and implement security features directly into our product codebase
leading pre-sales security engagements meetings, executive security discussions, CISO-level reviews, and vendor security assessments while representing the company's security posture.
Set standards and best practices across R&D and product teams as the sole internal authority for security
Work closely with our company CISO and the broader our company Security departments to align Base44's security posture with corporate policies, compliance frameworks, and enterprise requirements.

We are seeking a Head of Research to build and lead our research group reporting to the Co-founder and CTO. You'll set the research agenda for how AI agents, spanning coding agents, SaaS AI platforms, cloud, and endpoints, can be abused, and you'll turn that research into the detections and runtime protections that define our product. You'll build the team, the threat intelligence function, and the processes that keep us ahead of a threat landscape that changes weekly. This is a hands-on leadership role. You'll still go deep on platforms and attack paths while scaling research into a core differentiator of the company. You will help define the field of Agentic Security and be one of its leading voices.

Responsibilities

Lead and grow the research team: Hire, mentor, and manage AI security researchers. Build a culture of rigor, speed, and ownership.

Own the research direction: Proactively identify emerging agentic threats and platforms, prioritize research projects, and set a roadmap aligned with product and customer needs.

Build threat intelligence processes: Establish how we collects, triages, and operationalizes threat intelligence on agentic attacks. This includes in-the-wild abuse, malicious MCP servers, skills and extensions, and new techniques from the research community.

Drive research into product: Partner closely with engineering and product so findings become production detections, runtime policies, and governance capabilities. Own the coverage and quality of our detection logic.

Define detection strategy: Set standards for detection logic across environments, including coverage models, efficacy measurement, and false positive and false negative management at enterprise scale.

Stay hands-on: Lead deep dives into platform architectures, monitoring and enforcement boundaries, and end-to-end PoCs for the most critical attack paths.

Represent us externally: Publish research, advisories, and vulnerability disclosures. Speak at leading security conferences and build our reputation as the authority on agentic security.

Support customers and the field: Provide research expertise for customer engagements, incident investigations, and strategic accounts.

Required Head of AI Security
As the Head of AI Security, you will be the ultimate authority and strategic leader responsible for securing our AI/ML infrastructure, data pipelines, and deployed models, you will bridge the gap between advanced data science and enterprise-grade security. You will design, implement, and oversee security frameworks that protect our proprietary AI technologies, multi-agent systems, and RAG architectures.
Youll Own:
Our end-to-end AI security strategy across AI/ML infrastructure, data pipelines, LLMs, RAG systems, and autonomous AI agents
Secure-by-design frameworks and security architecture for AI-powered products and platforms
AI threat modeling, adversarial testing, red teaming, and vulnerability management programs
AI governance, internal security policies, and alignment with emerging global AI regulations and standards
Security tooling, automation frameworks, and continuous monitoring capabilities for AI environments
Cross-functional security leadership across Data Science, AI Engineering, Product, Infrastructure, and SecOps teams
Youll Solve:
Protecting AI systems against emerging threats such as prompt injection, model inversion, data poisoning, and training data leakage
Preventing sensitive customer and enterprise data from leaking into training sets or model outputs
Securing complex AI architectures including LLMs, RAG pipelines, and multi-agent systems at scale
Embedding security seamlessly into the ML lifecycle without slowing innovation
Building scalable AI security operations through automation, monitoring, and continuous adversarial testing
Navigating evolving AI governance, compliance, and regulatory requirements across global markets
Youll Impact:
Maintain our reputation as a leader in secure and trustworthy enterprise AI
Build the foundation that allows AI innovation to scale safely and responsibly
Strengthen customer trust by protecting highly sensitive conversational and business data
Create resilient AI systems that can withstand real-world attacks and emerging threat vectors
Drive a security-first AI engineering culture across the organization
Shape the future of AI security, governance, and MLSecOps in a hypergrowth AI company

We are seeking a seasoned security leader to manage a high-caliber research team focused on the security of Identity, SaaS, and Cloud ecosystems. In this role, you will provide technical mentorship and strategic vision, guiding research into service risk profiling and adversarial TTPs analysis. You will be the bridge between cutting-edge research and product innovation, ensuring our findings translate into high-impact security outcomes to stay ahead of modern adversaries.
Key Responsibilities
Define the research roadmap for Identity, SaaS, and Cloud risks, ensuring the team's outputs align with the evolving threat landscape and company goals.
Lead and grow a diverse team of security researchers, providing the technical guidance and career development necessary to maintain a world-class research organization.
Leverage your experience in a product-focused environment to ensure research outcomes directly influence service security strategies and customer-facing solutions.
Oversee the execution of high-fidelity attack simulations and TTP deconstruction, ensuring the 'how-to' of secure service usage is clearly defined and actionable.
Partner with Engineering, Product Management, and Threat Intel teams to transform raw research into robust mitigation strategies and resilient service blueprints.
Represent the team's research internally and externally, positioning the organization as a premier authority on Identity-centric and Cloud security.

Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our VP Security & Research, you'll report directly to the CEO and own our malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts us on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of us for customers, partners, and the wider security community.

What You'll Do
Set the strategy and roadmap for our malvertising detection and security research.
Lead, mentor, and grow the security research team.
Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities.
Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem.
Own detection quality: push for uncompromising precision, coverage, and speed.
Drive original research and publications, and represent us at leading security conferences.
Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it.
Report to the CEO and management on research impact, threat landscape, and priorities.

we are seeking a deeply experienced Security Analyst - Tier 3 for its Security Operations Center (SOC). This role is a senior individual-contributor position, leading challenging investigations, setting the standards the SOC operates by. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office.

Your responsibilities will include:

Lead complex, multi-stage, multi-domain investigations end to end, from scoping through deep technical analysis to a clear determination of impact and root cause.
Serve as the SOC's senior escalation point and the quality gate for investigations across the team.
Support the Incident Response team during confirmed incidents with continued telemetry investigation, scoping, and analytical depth.
Continuously sharpen how the SOC investigates, identifying gaps in methods, runbooks, and tooling through daily casework and turning them into concrete improvements.
Mentor Tier 1 and Tier 2 analysts through case reviews, coaching, and pairing during investigations.
Partner with Security Engineering, Platform Security, Threat Intelligence, SOC Automation, and additional teams to turn what the SOC learns into stronger detection and response across .
Participate in readiness activities - tabletops, post-incident reviews, and purple-team engagements.
Participate in the on-call rotation as the senior point of contact outside business hours.