לוח משרות דרושים מומחה אבטחת מידע / סייבר, לחיפוש זה נמצאו 172 משרות

Youll work alongside world-class engineers and security experts to conduct deep technical research, simulate real-world attacks, and create impactful proof-of-concepts (PoCs) that showcase how to protect AI-driven systems. This role is ideal for a hands-on security researcher who thrives on curiosity, creativity, and rigor, someone who wants to shape the future of AI security in a fast-moving product startup.

What Youll Do:

Drive AI Security Research: Investigate vulnerabilities in AI models, agentic platforms, and infrastructure- covering risks like prompt injection, adversarial manipulation, and model abuse.
Build Proof-of-Concepts: Develop technical PoCs that demonstrate real-world security threats and defenses, supporting both product validation and thought leadership.
Research new Prompt injection techniques: Implement novel techniques of adversarial attacks on AI systems in our automated red team module to evaluate resilience and inform customer-focused security offerings.
Track Competitors & Trends: Research the broader ecosystem of AI and cybersecurity to identify competitor capabilities, market shifts, and innovation opportunities.
Collaborate Across Teams: Partner with engineering and product to translate research into practical protections, product features, and marketing content.

Were looking for a Security Vulnerability Researcher to be a core driver in how our product empowers security teams. You will be expected to deeply understand customer needs and translate them directly into product features that deliver real value. You'll own key parts of our frontend stack, drive key architectural decisions, and turn complex security data into clear, actionable business insights.



This is a hands-on role for a seasoned offensive researcher who thrives on technical depth and creativity. Youll collaborate closely with product, marketing, and engineering teams to deliver research that drives customer trust, informs product direction, and shapes industry thought leadership.

What Youll Do

Perform AI-Focused Vulnerability Research: Investigate security risks in AI models, APIs, and infrastructure to uncover exploitable weaknesses and publish insights that strengthen our market leadership.
Lead Red Teaming Against AI Systems: Simulate adversarial attacks on AI pipelines and APIs, creating impactful PoCs that showcase real-world risk and defensive strategies.
Build Customer-Facing Proof-of-Concepts: Partner with product and engineering teams to design and deliver PoCs that align with customer use cases and highlight security capabilities.

You will own security end to end: strategy and execution, both. You inherit a working program, with an annual SOC 2 Type II audit, an established tool stack, and clear vendor-gating rules already in place. You will work closely with our Application Architect, our IT team, Legal, and engineering leads across Israel, the US and the UK. The role reports to a member of the executive team.

This is a player-coach role. One week you present the annual risk review to management; the next you are pulling audit evidence, tuning a cloud alert rule, or reading a vendor's risk scan yourself. If you need a large team under you to be effective, this is probably not the right fit. If you like owning the whole problem, it is a good one.

What you will do:

Own the annual SOC 2 Type II audit end to end: controls, evidence collection, external auditors and consultants. The bar we hold ourselves to is zero deviations.
Run supply-chain security: vendor risk assessments and security questionnaires, gating rules for new vendors, and contract security terms together with Legal. We do not onboard vendors without SOC 2 or ISO 27001, and critical findings block the deal.
Own application security with runtime-context prioritization: focus engineering on what is actually exploitable in production, and filter out the scanner noise.
Run day-to-day security operations: cloud security posture across AWS and GCP, EDR, email security, identity and zero-trust access, alert triage and remediation follow-up with the owning teams.
Manage the annual penetration-testing program: scoping, vendor selection, findings triage and remediation tracking with R&D.
Own incident response: keep the plan current, run it when needed, and handle notification duties toward our cyber insurer.
Run the security awareness program and the security portion of employee onboarding.
Manage the security budget, tool renewals and vendor relationships.
Set governance for AI tools used across the company: usage guidelines, risk registers, and security review of new AI vendors.

We are seeking an experienced Data Protection Lead to join the Cyber Security organization.

This role combines hands-on Data Leakage Prevention (DLP) engineering with Data Security Posture Management (DSPM) to deliver end-to-end data protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them.

You will own the data protection lifecycle from discovery and classification through policy enforcement and incident response. The role requires deep technical proficiency in DLP platforms and DSPM tooling, combined with the ability to collaborate with Security, IT, Engineering, Product, Privacy and GRC teams to reduce data exposure risks and embed strong data governance practices.

Your responsibilities will include:
Lead and own the organizations data protection domain, including strategy, standards, and hands-on technical implementation
Engineer, deploy, and continuously tune DLP policies across endpoints, email, SaaS, network proxies, and cloud platforms - covering both inline and API-based enforcement modes.
Design and implement DSPM solutions to gain continuous visibility into sensitive data posture, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments.
Drive data discovery initiatives to identify and inventory sensitive data across databases, SaaS applications, endpoints, and cloud storage.
Define and implement data classification frameworks, labeling standards, and data handling policies integrated with DLP and DSPM controls.
Build and maintain DLP detection rules, regular expressions, fingerprinting, and machine learning-based classifiers to minimize false positives and maximize coverage.
Integrate DSPM findings into DLP enforcement workflows to create a closed-loop data protection architecture.
Define and enforce data access governance, including least-privilege principles and monitoring of sensitive data access patterns.
Monitor, triage, and investigate DLP alerts and DSPM-identified risks, collaborating with SOC and Security teams on escalation and remediation.
Conduct risk assessments and identify gaps in data protection controls across systems, pipelines, and business processes.
Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to data security and privacy.
Collaborate with Engineering, IT, Product, and GRC teams to embed data security controls into CI/CD pipelines, systems, and workflows.
Maintain documentation, runbooks, and guidelines for DLP operations, DSPM posture management, and data security practices.

we are looking for an Enterprise Networks Engineer with strong automation skills to design, implement, and optimize enterprise networks in Tel Aviv, including wired, wireless, and VPN infrastructure.

Your responsibilities will include:

Work on the design, implementation, and optimization of enterprise wired and wireless networks, ensuring scalability, security, and high availability
Build and maintain network connectivity between branch offices around the world, partnering with global teams to standardize architecture and operations
Manage and ensure the reliable operation of remote access systems (VPN), including capacity planning, resiliency, and continuous improvements
Deploy, maintain, and continuously improve automation and monitoring tools; define best practices and drive automation-first operations
Diagnose and resolve complex network issues, including cross-region and cross-provider incidents; perform root cause analysis and implement preventative measures
Test, evaluate, and introduce new equipment and emerging technologies; contribute findings and recommendations into global R&D streams
Collaborate with telecom service providers in Israel and globally; lead escalations, manage SLAs, and drive service improvements

This is a hands-on role that balances deep technical work alongwith building and running the function: the Lead drives high-severity incidents end-to-end, serves as the escalation ceiling, and sets the standards and structure the team operates by.

Youre welcome to work in our offices in Tel Aviv, Israel.

Your responsibilities will include:

Build and lead global IR capability - select and mature DFIR tooling, and establish the playbooks and follow-the-sun operating model across EMEA, Asia, and APAC while hiring and developing a team of responders.
Lead the technical response to major incidents hands-on - from escalation through containment, eradication, and recovery - and act as the final technical authority on the most complex cases.
Personally conduct end-to-end forensic investigations across cloud, platform, and endpoint environments - log analysis at scale, host and network forensics, memory analysis, malware triage, and timeline reconstruction.
Define and enforce consistent investigation standards across the team: severity and escalation criteria, cross-region handoff quality, and evidence handling that meets legal, regulatory, and forensic requirements.
Partner with the SOC, SOC Automation, Threat Intelligence, Threat Hunting, and Platform Security teams to improve detection fidelity and reduce MTTD and MTTR.
Serve as the technical voice of incident response to executive leadership, Legal, and Privacy - delivering clear, risk-based briefings, regulatory-ready documentation, and root cause analyses (RCA).
Raise the teams technical bar through case reviews and hands-on mentoring, and drive lessons-learned into measurable improvements in controls and readiness.

we are looking for a Lead Detection Engineer .This is an individual contributor role with full technical ownership. You'll set the direction for detection engineering: the standards, the tooling, the coverage strategy, and the automation that operationalizes it all. You'll work closely with SOC analysts and Platform Engineering to make detection a first-class engineering discipline.

Youre welcome to work in our offices in Tel Aviv, Israel

Your responsibilities will include:

Detection coverage strategy across endpoint, identity, cloud, and infrastructure - how it's measured, prioritized, and continuously improved.
Detection-as-Code pipeline: version control, testing, peer review, CI/CD, and deployment practices for all detection logic.
Architecture connecting detections to enrichment, triage, and automated response workflows.
Technical standards for how detections are designed, tested, documented, deployed, and retired.
Detection quality: fidelity metrics, false positive reduction, coverage measurement, and continuous validation loops.
Design and build high-fidelity behavioral detections across SIEM and EDR platforms.
Research emerging attacker techniques and translate threat intelligence into scalable, evasion-resistant detections.
Validate detections through threat simulations and continuous detection testing.
Partner with SOC analysts to close the feedback loop between detections and real investigations.
Define and track detection engineering metrics; communicate coverage posture and effectiveness to security leadership.
Make architectural decisions that scale as the team and organization grow.

This role focuses on designing and implementing secure architectures across corporate networks and cloud environments. You will play a key role in defining secure solutions, reviewing system designs, and ensuring security is embedded across enterprise infrastructure.

The ideal candidate brings strong hands-on expertise in network and cloud security, along with the ability to work closely with IT, Infrastructure, DevOps, and Engineering teams to drive secure and scalable implementations.

Youre welcome to work in our offices in Amsterdam.

Your responsibilities will include:

Design and implement secure architectures across corporate networks, cloud platforms, and hybrid environments.
Define and maintain security standards, guidelines, and reference architectures aligned with organizational requirements.
Review and approve architecture and design of new systems, infrastructure, and network changes.
Design and support secure enterprise network architectures, including segmentation, Zero Trust, and remote access solutions.
Define and implement controls for firewalls, ZTNA, proxies, and network access control (NAC).
Design secure cloud architectures including IAM, networking, and workload protection.
Ensure proper implementation of cloud security controls such as segmentation, encryption, and monitoring.
Define and support identity and access management controls, including SSO, MFA, and privileged access.
Contribute to endpoint security architecture, including EDR/XDR and device hardening standards.
Identify security risks and architectural gaps and recommend mitigation strategies.
Participate in architecture reviews, risk assessments, and security design discussions.
Collaborate with SOC, Vulnerability Management, IT, and Engineering teams to improve overall security posture.
Support implementation of security architecture initiatives and improvements across the organization.

We are looking for a skilled Security Automation Engineer to join our SOC Automation team and play a key role in building and scaling automation across Security Operations. This is a hands-on role - you will design, develop, and integrate automation solutions across SIEM, EDR, and other security platforms, contributing to our SOAR capabilities from the ground up.

You will work in a technologically rich environment, integrating with a wide range of security and infrastructure systems across the network - a unique opportunity to build automation at scale in a greenfield setting, with real influence over the architecture and tooling decisions.

We are especially interested in candidates who are curious about leveraging AI and intelligent agents to help evolve next-generation automation and response workflows - and who want to be a driving voice in how we apply those technologies.

Your responsibilities will include:

Automation development

Design and develop automation workflows for incident response and SOC operations
Identify and eliminate manual processes through scalable automation
Build reusable components and maintainable automation patterns
Engineering & integration

Develop integrations using REST APIs, webhooks, and event-driven architectures
Write high-quality, maintainable Python for automation and orchestration
Implement data parsing, enrichment, and transformation across multiple systems
SOAR & platform buildout

Lead or actively contribute to the evaluation, selection, and implementation of SOAR/automation platforms
Design the automation architecture and integration strategy for the team
Build automation capabilities in a greenfield environment - your decisions will shape the foundation
SOC collaboration

Work closely with SOC analysts and incident responders to translate operational needs into automation solutions
Improve end-to-end detection and response workflows through close partnership with the team
AI & innovation

Actively build and evaluate AI/LLM and agent-based workflows applied to security automation
Prototype AI-assisted enrichment, triage, and response solutions and drive them toward production

We are looking for an Senior/Staff Application Security Engineer who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC.

What you will do
Build and maintain Application Security Posture Management (ASPM) at the Company scale.
Automate and support SAST, SCA tools, etc as part of CI/CD pipelines.
Improving SAST, secrets detection rules. Keeping false positive rate low.
Identify, analyze, and remediate application security vulnerabilities.
Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
Develop and maintain secure coding guidelines for development teams.
Conduct, run threat modeling and risk assessments for new and existing applications.
Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc.
Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.
Serve as an application security subject matter expert to other teams.

We are looking for an Senior/Staff Infrastructure Security Engineer to secure our cloud and on-premises infrastructure by implementing security controls, monitoring threats, ensuring compliance with industry standards and respond to security incidents. The ideal candidate has a strong background in cloud security, Linux hardening, and network security.

Your responsibilities will include:

Design and implement security measures to protect cloud and on-premises infrastructure.

Identify and remediate vulnerabilities in cloud environments, networks, and operating systems.

Build and maintain cloud and infrastructure security tools.

Perform security reviews, threat modeling and risk assessments of infrastructure components.

Develop and maintain security guidelines for Network and SRE teams.

Collaborate with Network and SRE teams to integrate security best practices into their processes and systems.

Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.

Serve as an network and infrastructure security subject matter expert to other teams.

we are looking for a Security Researcher.
As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.
You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the Bright Data collection platform to new levels as our customer base continues to grow.
Why You'll Love It:
You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
Got an idea? You can take it straight to the COO - no red tape, no politics.
The people make it - SecRes and Bright Data are genuinely great teams to be part of.
*Fully remote position
Responsibilities:
Conducting in-depth research on tools or services that prevent the free collection of public web data.
Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
Identifying new standards and technologies that could impact our data collection capabilities.
Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
Theres much more

Required Communication and information security
The role includes: working on the organizations information security systems, working and experience with FIRE WALL of various information security manufacturers. Leading large projects and driving many processes and technologies in the organization.
Full-time long-term with promotion options.

We need a Cyber ​​security expert.