לוח משרות דרושים מומחה אבטחת מידע / סייבר בתל אביב יפו, לחיפוש זה נמצאו 85 משרות

Are you a technical leader who thrives on solving complex security breaches- We are looking for a DFIR Expert to join our team. In this role, you will lead high-impact forensic investigations, drive incident response efforts, and shape the future of our DFIR service. You will serve as the highest escalation point, working hands-on to contain threats and protect our clients' environments.

What You`ll Do

Investigate & Respond:

Conduct deep-dive digital forensics investigations across file systems, memory, and networks.

Leverage EDR, SIEM, firewalls, and diverse datasets to handle containment, eradication, and recovery.

Lead the Effort:

Act as the technical and management lead during incidents, managing communication both internally and externally with clients.

Innovate & Automate:

Develop custom tools to automate triage and accelerate the investigation process.

Introduce and maintain systems to keep the team mission-ready.

Own the Service:

Collaborate with pre-sales, account managers, and subcontractors to scale the DFIR service, expand customer reach, and drive business growth.

Deliver Clarity:

Provide in-depth incident reports and comprehensive Root Cause Analysis.

we are looking for a Application Security Architect.
The Application Security team ensures the security of products. In this role you will evaluate security architecture, design and implement technology, processes, and procedures by collaborating closely with developers, product managers, and other members of the security team.
What You'll Be Doing:
Initiate and improve processes, tools, and documentation that will support application security requirements
Identify security design gaps in existing and proposed architectures, services and products
Evaluate architecture, design, and code to identify and resolve potential vulnerabilities and security risks
Work closely with development teams to prioritise and resolve application security issues and implement security best practices, frameworks, etc.
Assist in identifying and responding to security issues in environment

we are looking for a Security Engineer.
The Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption - governing AI assistants, coding agents, and MCP integrations while keeping employees productive. You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team.
What You'll Be Doing:
Operate and maintain our corporate security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controls
Experience hardening endpoints and enforcing device policy via MDM/EDR - security baselines, disk encryption, local admin restrictions, and USB/peripheral controls
Monitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, and SaaS
Maintain identity security controls - SSO/MFA coverage, privileged access, joiner/mover/leaver, and access reviews
Secure our SaaS footprint - security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platforms
Implement and maintain DLP controls across email, endpoints, and SaaS
Run endpoint patching and vulnerability management, and coordinate remediation with owning teams
Run POCs and rollouts of IT security tools - evaluating vendors, testing controls, and deploying them in collaboration with IT and external vendors
Secure the company's use of AI tools - implement guardrails for AI assistants, coding agents, and MCP integrations, and build detections for AI-specific threats such as prompt injection and data exfiltration via connectors

Mesh Payments is looking for a hands-on Security & IT leader to serve as the foundational pillar of our internal technology and security operations. In this unique role, you will be the sole owner of our IT infrastructure while playing a critical part in protecting a fast-growing, cloud-native fintech platform.
In this position, you will have the autonomy to choose the best tools for the job, manage our corporate environment from the ground up, and have a direct impact on protecting the financial data of global enterprises while ensuring our team has the best technical tools to succeed.
What youll do:
IT Operations & Employee Experience
Youll work closely with the CTO, engineering, and business teams, combining hands-on execution with real ownership and impact.
Manage corporate SaaS platforms, identity management (SSO), and Google Workspace.
Compliance & audits (SOC2, PCI)
Acting as the security point of contact for customers, auditors, and internal teams
Act as the primary technical point of contact for all employees, providing hands-on support and troubleshooting.
Deploy and operate endpoint security and management tools (EDR, MDM, DLP) across a distributed workforce.
Cloud & Infrastructure Security

Improve and maintain the security posture of our AWS/GCP-based cloud infrastructure.
Operate cloud security platforms, such as Upwind / Wiz / Oligo, or similar solutions to prioritize and remediate risks.
Design and enforce secure access controls and least-privilege IAM policies.
Investigate cloud security alerts and support incident response.
Application Security
Integrate security into the SDLC and CI/CD pipelines by automating SAST, SCA, and secret scanning.
Secure containerized workloads (Kubernetes / EKS) focusing on runtime protection and image hardening.
Provide guidelines and safeguards for AI-powered development processes and AI models within our SaaS platform.
Compliance & Security Culture
Support SOC2 and PCI DSS compliance initiatives and audit readiness.
Serve as the primary security focal point for external auditors.
Contribute to security awareness and best practices across the company, explaining the rationale behind security requirements.

We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.
A day in the life and how youll make an impact:
Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools.
Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows.
Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring.
Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats.
Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization.
Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc) to identify requirements and prioritize security needs.
Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration.
Perform or manage penetration testing initiatives to identify security weaknesses.

Were looking for Principal Cloud Security Researcher with a strong security background to join our innovative Research team.

EDR protects the endpoint. our company protects everything else, anticipating and disrupting active attacks across the modern stack and stopping them before they reach the business.

our company is the leader in Zero-Impact Breach Prevention, delivered through Agentic Runtime Security for the modern infrastructure - cloud, SaaS, identity, and AI. By delivering the runtime detection and response that security teams already rely on for endpoints, extended to the infrastructure endpoint tools cant see, our company provides Zero-Impact Breach Prevention, in runtime.

The Role

We're looking for a Principal Cloud Security Researcher to serve as a senior technical leader within our Research team. This is a high-impact individual contributor role -- you won't manage people, but you'll shape the direction of our entire research function, mentor researchers, and act as a force multiplier across the organization.

You'll be the person who takes a vague threat signal and turns it into a detection strategy, a published finding, or a product capability. You'll operate as a trusted deputy to the research team lead, owning the most complex and ambiguous research challenges while raising the technical bar for the team.



What You'll Do

Drive Groundbreaking Research

Own and drive our most critical research initiatives end-to-end - from initial threat hypothesis through detection logic, product integration, and external publication.
Set the technical direction for cloud threat research across AWS, Azure, and GCP, identifying emerging attack surfaces and novel techniques before they become mainstream threats.
Investigate real-world cloud and SaaS security incidents, dissecting attacker tradecraft and extracting insights that evolve our detection capabilities.
Pioneer new forensic investigation techniques and detection methodologies for cloud-native and SaaS environments - pushing the state of the art, not just following it.
Be a Voice in the Community

Represent our company as a thought leader through high-quality research publications, conference presentations (BlackHat, DEF CON, RSA, fwd:cloudsec, and similar venues), and open-source contributions.
Build and maintain our reputation as a research-driven company that advances the field - not just a vendor with a blog.
Engage with the broader security research community, fostering relationships and collaborative knowledge-sharing.
Shape the Product

Bridge research and product - translate threat findings into actionable product requirements, working closely with engineering and product teams to ensure our CDR platform stays ahead of evolving threats.
Design and develop advanced detection algorithms that directly feed into our platform, closing the gap between research insight and customer protection.
Elevate the Team

Act as the team's go-to technical authority. When researchers hit a wall on complex cloud attack chains, IAM edge cases, or detection gaps - you're who they turn to.
Mentor and grow other researchers through research reviews, pair investigations, code reviews, and by setting quality standards and methodology best practices.
Influence technical decisions org-wide - contributing to architecture, tooling, and strategic research priorities.
Step in as the research team lead's deputy when needed - driving prioritization, representing research cross-functionally, and ensuring continuity.

Perform penetration tests across infrastructure, web, mobile, and enterprise environments.
Execute end-to-end security assessments, from planning and testing to reporting and remediation recommendations.
Present findings and support clients throughout the remediation process.
Work directly with local and global clients on complex cybersecurity engagements.

Senior hands-on offensive security professional responsible for delivering complex, objective-driven Red Team and Adversary Simulation engagements for local and global clients. The role combines deep technical execution with the ability to independently take ownership of Red Team projects, including threat-informed adversary emulation, covert Red Team operations, Purple Team exercises, attack path analysis, and advanced penetration testing across enterprise, cloud, application, identity, and hybrid environments. The position requires strong offensive tradecraft, sound technical judgment, and the ability to manage assigned engagements from planning through delivery, while contributing to reusable tooling, knowledge sharing, technical quality, and client advisory. It requires the ability to translate realistic attack scenarios into clear insights that improve clients prevention, detection, response, and overall cyber resilience.
Job description
Take ownership of assigned Red Team, adversary emulation, Purple Team, and threat-led offensive security engagements, from planning and rules of engagement through execution, reporting, and client debrief.
Emulate realistic threat actors and execute multi-stage attack chains, including reconnaissance, initial access, persistence, privilege escalation, credential access, lateral movement, command and control, defense evasion, and achievement of agreed business objectives.
Design threat-informed scenarios and map adversary tactics, techniques, and procedures to MITRE ATT&CK and other relevant threat-led testing frameworks.
Assess enterprise environments across Active Directory, Microsoft Entra ID, endpoints, networks, applications, cloud platforms, identity systems, and hybrid infrastructure, chaining weaknesses into realistic attack paths and business impact.
Develop, customize, and maintain offensive tooling, scripts, payloads, command-and-control infrastructure, and operational tradecraft while applying appropriate safety and operational-security controls.
Work closely with SOC, detection engineering, incident response, and security architecture teams to validate detection and response capabilities and translate observed gaps into actionable improvements.
Communicate directly with clients, present technical and executive results, and provide risk-based recommendations aligned with the clients threat landscape and business priorities.
Contribute to technical quality reviews, knowledge sharing, research initiatives, reusable methodologies, and the continued development of the teams Red Team capabilities.

As a Security Researcher , you will play a key role in shaping the future of modern runtime and AI security. You will investigate how real-world attacks unfold across applications and cloud environments, and turn those insights into innovative, production-grade security capabilities.

This role is ideal for a deeply technical researcher who is driven to understand attacks at their core - not just identify surface-level indicators. You will research exploitation chains, runtime behavior, attacker techniques, and emerging AI attack patterns, then apply that knowledge to build protections that are precise, resilient, scalable, and grounded in how attacks actually work.

Specifically, you will:

Research real-world attack techniques targeting modern applications, cloud-native environments, and AI-driven systems.
Design, develop, validate, and deploy detection algorithms based on technical research, large-scale runtime telemetry, threat intelligence, and exploit PoCs.
Shape the strategy for detection data collection by defining the required telemetry, collection points, and data quality standards needed to support effective protection.
Drive research efforts end-to-end, from initial exploration and technical investigation to production-grade protection capabilities for active threats.
Work closely with engineering and product teams to turn research into practical security capabilities.

Malvertising attackers are already using AI to hide their campaigns. We're building the detection technology that beats them, and we need a leader who can make it the best in the world. As our VP Security & Research, you'll report directly to the CEO and own our malvertising detection vision, combining deep security research with AI and agentic innovation. You'll lead our security research team, uncover new attack techniques before they reach users, and turn that insight into detection that works in real time at massive scale. You'll build a research agenda that puts us on the stage at the world's top security conferences, and partner with Product, R&D, Data Science, Customer Support, and other key functions inside and outside the company to bring it to market. You'll be the security and research voice of us for customers, partners, and the wider security community.

What You'll Do
Set the strategy and roadmap for our malvertising detection and security research.
Lead, mentor, and grow the security research team.
Drive AI and agentic innovation in detection, working with R&D and Data Science to turn research into production-grade capabilities.
Uncover and track emerging malvertising threats, evasion techniques, and attacker campaigns across the ad ecosystem.
Own detection quality: push for uncompromising precision, coverage, and speed.
Drive original research and publications, and represent us at leading security conferences.
Partner with Product, R&D, Data Science, Customer Support, and other key functions in the organization and outside of it.
Report to the CEO and management on research impact, threat landscape, and priorities.

We are seeking a Business Operations Manager to partner closely with the COO and executive leadership, driving strategic initiatives, cross-functional execution, and operational excellence across the organization.

This is a maternity leave replacement role, with the opportunity to continue in the position permanently for the right candidate.

Reporting directly to the COO, you will combine business operations leadership with Chief of Staff responsibilities. You will help turn company strategy into execution, lead high-impact cross-functional initiatives, improve how teams work together, and build scalable processes and systems that support rapid growth.

You will work closely with executive leadership, Product, R&D, Marketing, Studio, and Customer Experience to bridge gaps, remove friction, and turn complex, cross-functional challenges into clear plans and effective execution.



Key Responsibilities

Strategic Execution & Governance

Leadership Alignment: Partner with executive leadership to translate company strategy into actionable operational plans and department OKRs/KPIs.
Company Operating Rhythm: Support the company's operating rhythm, including leadership syncs, quarterly reviews, cross-functional standups, and strategic offsites.
Special Projects: Lead high-impact, cross-functional initiatives from inception through rollout.
Executive Advisory & Chief of Staff Support: Serve as a trusted partner to the COO and CEO, supporting executive priorities, helping drive cross-functional projects, and tracking progress on key strategic initiatives.
Process Design & Operational Excellence

Cross-Functional Workflow Optimization: Review existing handoffs between teams to identify bottlenecks, reduce cycle times, and improve operational efficiency.
Scale & Automation: Identify manual or inefficient processes across the business and implement automation, tooling, or standard operating procedures (SOPs) to improve how the organization operates at scale.
Cross-Departmental Synchronization

Parent Company Focal Point: Serve as the primary liaison and main point of contact for cross-functional communication and strategic coordination with our parent company in Italy.
Product & GTM Alignment: Connect Product/Engineering with Go-To-Market teams (Marketing, PMM, CX) to ensure smooth launches, clear messaging and enablement, and aligned feature rollouts.
Customer Journey Improvement: Work with CX to identify customer drop-off points and areas of friction, and help drive systemic improvements across the customer journey.
Metrics, Insights & Reporting

Performance Tracking: Maintain executive-level dashboards tracking core operational health metrics, cross-functional SLA adherence, and team efficiency.
Data-Driven Insights: Analyze operational performance data to identify risks, inefficiencies, and growth opportunities across the business, and turn those insights into actionable recommendations.

We're looking for a Senior Security Lead to partner closely with our CISO in driving our security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate.

This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works in our company.

Key Responsibilities:

Partner with the CISO on our security strategy and roadmap, and own the execution of key initiatives

Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through

Translate business objectives into scalable security programs and controls

Act as a key stakeholder in security governance, risk management and decision-making

Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives

Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments

Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency

Foster a culture of accountability, operational excellence and security ownership across the organization

we are looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them.
You will strengthen threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster.
This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure corporate and cloud environments.
You will also help shape how secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution-and want the autonomy and cross-functional access to make security improvements stick-this role is built for you.

We're looking for a sharp, curious Junior AI Security Researcher to join the team at the beating heart of our Autonomous Attacker. Our platform is powered by AI agents running real attacks against real environments every day: Web, Internal Networks, External Networks, Cloud. You'll work hands-on with AI and data at every layer of our platform, learn the system deeply, and help push it forward on whatever front moves the needle most. This is a rare entry point into both offensive security and applied AI. No prior cyber background required, just a sharp analytical mind, obsessive attention to detail, and the courage to chase a question until it answers back.
What You'll Do:
Work hands-on with the AI agents at the core of our platform: study their behavior, their reasoning, their data, and the environments they operate in.
Mine large volumes of AI-generated data to surface patterns and opportunities that only show up at scale.
Use AI as your own force multiplier: write prompts, build evals, cluster findings, and move faster than humanly possible.
Experiment with prompt engineering, fine-tuning, model selection, and agent architecture to push the platform further.
Translate what you find into concrete improvements: write specs, open PRs, and ship them. You may well touch production code.
Push things forward. Pull the right people into the room, ask the "stupid" questions, and never let a thread die.