דרושים » תוכנה » network analyst Cyber security protection

We are seeking a highly energetic and talented security analyst to join our Managed Detection and Response (MDR) team. As an MDR security analyst, your primary responsibility will be to identify and respond to security threats across our service customers. You will utilize the groundbreaking our Threat Hunting System to proactively seek out unknown threats and enhance our hunting capabilities. Leveraging the Cloud data warehouse, you will develop threat hunting technics to effectively detect and address security threats. Moreover, you will serve as a trusted advisor to our MDR service clients, providing valuable insights into their security posture and the threat landscape they face
This position offers an exceptional opportunity for network security enthusiasts who are passionate about Network Security, Malware Analysis, Threat Hunting, and Threat Intelligence.
Responsibilities:
Act as a Customer Security Advisor, conducting threat-hunting activities and performing security assessments on customer networks. Effectively communicate findings, recommendations for remediation, and mitigation strategies to customers
Serve as an escalation point for the SOC analysts, assisting in the investigation, analysis, and response to security incidents
Develop cyber kill-chain indicators of an attack and hunting heuristics to enhance the ongoing threat-hunting process
Enhance the product accuracy and its capacity to detect emerging threats within the dynamic security landscape.

GeoEdge is the global leader in ad security, trusted by hundreds of the world's top ad platforms, publishers, and app developers. Our mission: make the internet safer by stopping malicious, deceptive, and low-quality ads before they ever reach a user. The Role
Malvertising attackers hide their campaigns behind cloaking, obfuscation and, more and more, AI. As a Senior Security Researcher in our Security Research Lab, you'll hunt those campaigns down, figure out how they work, and turn what you find into detection that runs in real time across billions of ad impressions. You'll work with a small, hands-on research team and partner closely with R&D and data Science, and your findings will reach customers and the wider security community. What You'll Do Hunt for and investigate new malvertising campaigns, scams and evasion techniques across the ad supply chain Reverse-engineer malicious ad creatives, JavaScript and landing pages to understand how they target users and avoid detection Turn research findings into detection logic, signatures and data signals, working with R&D and data Science to ship them to production Build tools and automation, including LLM- and agent-based workflows, that speed up research and threat hunting Track attacker infrastructure and campaigns over time, and measure the precision and coverage of our detections Write threat reports and blog posts, and help present GeoEdge research externally Support Customer Success on escalations with technical analysis of specific incidents

We are seeking a Head of Research to build and lead our research group reporting to the Co-founder and CTO. You'll set the research agenda for how AI agents, spanning coding agents, SaaS AI platforms, cloud, and endpoints, can be abused, and you'll turn that research into the detections and runtime protections that define our product. You'll build the team, the threat intelligence function, and the processes that keep us ahead of a threat landscape that changes weekly. This is a hands-on leadership role. You'll still go deep on platforms and attack paths while scaling research into a core differentiator of the company. You will help define the field of Agentic Security and be one of its leading voices.

Responsibilities

Lead and grow the research team: Hire, mentor, and manage AI security researchers. Build a culture of rigor, speed, and ownership.

Own the research direction: Proactively identify emerging agentic threats and platforms, prioritize research projects, and set a roadmap aligned with product and customer needs.

Build threat intelligence processes: Establish how we collects, triages, and operationalizes threat intelligence on agentic attacks. This includes in-the-wild abuse, malicious MCP servers, skills and extensions, and new techniques from the research community.

Drive research into product: Partner closely with engineering and product so findings become production detections, runtime policies, and governance capabilities. Own the coverage and quality of our detection logic.

Define detection strategy: Set standards for detection logic across environments, including coverage models, efficacy measurement, and false positive and false negative management at enterprise scale.

Stay hands-on: Lead deep dives into platform architectures, monitoring and enforcement boundaries, and end-to-end PoCs for the most critical attack paths.

Represent us externally: Publish research, advisories, and vulnerability disclosures. Speak at leading security conferences and build our reputation as the authority on agentic security.

Support customers and the field: Provide research expertise for customer engagements, incident investigations, and strategic accounts.

we're looking for a curious and driven junior Full Stack Developer to join our dlp next team, where you'll work on cutting-edge cloud-native data loss prevention and genai security across our network security platform. if you're eager to grow your skills while working with modern cloud technologies, agentic ai workflows, and generative ai security, we want to hear from you.
you'll work alongside experienced engineers on platforms that protect enterprise data and secure generative ai applications across network security, email security, sase, endpoint, saas, and cloud security. as organizations race to deploy genai, threats are evolving fast - insider misuse, data exfiltration via ai chatbots, policy violations through agentic workflows. we're building the intelligent systems that detect and prevent these risks in real time. you'll learn fast, contribute meaningfully, and help shape how enterprises safely adopt ai.
develop and maintain features for dlp next cloud and genai security across our network security platform under mentorship from senior engineers
build detection and policy enforcement systems for data loss prevention - both traditional and genai-specific threats
work on agentic security workflows: understanding how ai agents interact with data and designing systems to detect policy violations
collaborate with product managers and cross-functional teams to understand requirements for emerging genai threats (chatbot data exfiltration, prompt injection risks, insider misuse)
participate actively in code reviews, testing, and debugging - this is how you'll grow
explore how prompt engineering, language models, and ai arbitration improve our classification and detection accuracy
contribute to building scalable, secure systems that protect thousands of enterprises and millions of users
learn and adopt best practices for cloud-native development, testing, and deployment.

Required Senior Detection & Response Analyst
Job Summary
Join our brand new D&R team and help service our biggest customers, who trust us to offer a tailored service responding to high-severity threats across their enterprises. As a leading AI SOC platform covering the full SecOps lifecycle from triage to response, we blend deep security expertise with cutting-edge AI. We investigate every alert at forensic depth, disrupting the traditional MDR market and empowering security teams at companies like Nvidia, MGM Resorts, Salesforce, and Equifax. If you're excited to jump in, do high-impact work, and help shape how modern SOCs operate as we grow fast, we'd love to have you.
Responsibilities:
Investigate and resolve high-severity threats escalated by our AI SOC platform across major enterprise customers
Lead triage, containment, and remediation of live incidents, working directly with customer security teams
Write and maintain playbooks, detection content, and escalation procedures under the direction of the Head of Detection & Response
Communicate findings clearly to customer SOC teams and stakeholders, translating technical detail into risk and recommended actions
Feed real-world incident learnings back to Product and Research to improve detection logic and the platform itself
Use AI-native tooling and automation to scale your own output, and help shape how the team works with it
Participate in an on-call rotation for critical customer incidents.

we are looking for a MXDR Analyst to join the team of cybersecurity analysts monitoring services 24/7. The role includes development of detection analyses, triage of alerts, investigation of security incidents, proactive threat hunting and enhancement of sensors and overall visibility status.
The suitable candidate should be a team player with previous experience in SOC, SecOps or security monitoring, independent, and with a can-do attitude.
Responsibilities:
Working across all areas of Sygnias SOC, including continuous monitoring and analysis, threat hunting, security compliance, security event auditing and analysis, rule development and tuning, and forensics.
Solving security incidents in accordance with defined service level agreements and objectives.
Prioritizing and differentiating between potential incidents and false alarms.
Addressing clients enquiries via phone, email, and live chat.
Working side-by-side with customers, providing insightful incident reports.
Working closely with peers and higher-tier analysts to ensure that your analysis work meets quality standards.
Identifying opportunities for improvement and automation within the MXDR Operation Lead, and leading efforts to operationalize ideas.
Identifying and offering solutions to gaps in current capabilities, visibility, and security posture.
Correlating information from disparate sources to develop novel detection methods.

The Threat Intelligence Analyst will conduct research both independently and in collaboration with other team and department members to detect cybersecurity threats and produce analytical reports and other intelligence deliverables.

The successful candidate possesses an intelligence or research background, experience in cybersecurity-related roles, and excellent written and verbal communication skills in English.

Responsibilities:

Monitor the threat landscape to identify new trends, intelligence sources, threat actors, attack tools, and techniques, providing unique perspectives from both KELA and outsourced sources.
Conduct Open-Source, Deep, and Dark Web research, including collecting, analyzing, cross-referencing, and interpreting data from multiple sources.
Produce threat intelligence reports, in-depth research, and presentations.
Present your research in webinars and client-facing events.

join us as a software tech lead and help drive the technical vision of a talented development team at the forefront of innovation. if you thrive in dynamic environments, have a passion for building scalable solutions, and want to make a real impact on thousands of users worldwide, this is your chance to provide technical leadership, drive engineering excellence, and contribute to a product recognized by gartner as a market leader.
email security is one of the fastest-growing domains at the company, playing a critical role in protecting organizations against advanced threats. the company has been recognized as a market leader in gartner for email security, reflecting our innovation, scale, and proven success in the field.
our platform serves thousands of paying customers worldwide, operating across multiple geographic regions and supporting a truly global user base. the system is designed as a highly scalable, cloud-native solution, built to handle massive volumes of email traffic with strict performance and reliability requirements.
we work closely with aws to deliver top-tier performance, availability, and security, leveraging advanced cloud services and best practices to provide an exceptional Customer Experience.
technical leadership and mentorship
provide technical leadership and mentorship to developers, driving engineering excellence, promoting best practices, and fostering a collaborative and innovative environment.
innovation and r&d
stay updated with the latest industry trends and technologies, and drive innovation across the team.
ai-driven development leadership
lead the technical design and development of internal ai-powered devtools and engineering productivity solutions.
collaborate cross-functionally with product, UX, customer success, and other stakeholders to define and deliver ai-powered solutions.
guide the team in prompt and context engineering best practices and the development of ai-based capabilities.
technical leadership
drive technical execution, architecture, and delivery, ensuring high-quality solutions are delivered on time.
code review and Quality Assurance
conduct regular code reviews to maintain high code quality and adherence to best practices.
technical excellence
drive engineering standards, system reliability, performance, and continuous improvement across the codebase.
collaboration
collaborate closely with cross-functional teams and customers to solve complex problems and innovate new features

We are looking for a Senior Backend Engineer (AI DLP) to join the team building our next-generation DLP product. The team is extending our data-security platform from understanding sensitive data at rest to protecting it at the moment it is used or shared-including across browsers, GenAI applications, and employee endpoints.

You will help build the control plane behind this product: the services that manage endpoint identity and enrollment, policies, classification, device configuration, telemetry, and the connection between our DSPM intelligence and real-time DLP decisions. This is a role with substantial technical ownership, direct customer impact, and close collaboration across Product, Research, Data, Frontend, and Infrastructure.

Responsibilities
Design and implement core backend components of our DLP control plane.
Own features end-to-end: architecture, implementation, testing, rollout, observability, and production operation.
Build secure, reliable multi-tenant services that communicate with browser extensions and endpoint agents deployed across customer endpoint fleets.
Connect our DSPM classification and policy systems with real-time endpoint enforcement, translating data-at-rest intelligence into actionable protection.
Design APIs and data models that support large endpoint fleets, frequent policy updates, offline clients, credential rotation, and safe software upgrades.
Improve the scalability, performance, reliability, and operational visibility of the DLP platform.
Conduct design and code reviews and help establish strong engineering practices.

What will you do:
Develop and refine machine learning models and generative AI systems to automatically understand and categorize risks in Application Lifecycle Management systems.
Collaborate with product and engineering teams to integrate AI tools seamlessly into existing workflows, enhancing the proactive identification of security risks.
Analyze data from a variety of sources, ensuring that the AI systems adapt to new patterns and insights dynamically.
Participate in the ongoing development of our AI capabilities, pushing the boundaries of automated security risk assessments.
Communicate complex AI concepts and the benefits of proposed solutions to non-technical stakeholders.