לוח משרות דרושים מומחה אבטחת מידע / סייבר בכפר סבא

Required Senior Infrastructure Security Engineer
The Senior Infrastructure Security Engineer Role:
As a Senior Infrastructure Security Engineer, you will be at the forefront of securing our SaaS Cloud Infrastructure. Your role is to research, design, and implement cutting-edge security solutions that align with our policies, standards, and legal requirements.
You will be a vital part of our dynamic team, ensuring security is seamlessly integrated into every phase of the infrastructure's lifecycle.
What makes this role interesting?
Innovative Security Solutions: Spearhead the design and implementation of security solutions, contributing to the evolution of our SaaS Cloud security.
Automation for Scaling: Prioritize automation to enhance security tooling coverage, focusing on detecting, alerting, and remediating vulnerabilities and misconfigurations.
Collaborative Impact: Collaborate with cross-functional teams, including SRE, IT, and Developers, to embed security seamlessly and drive secure practices throughout the organization.
Evangelizing Cloud Security: Develop, advocate, and monitor the adoption of robust cloud security practices, influencing the entire infrastructure positively.
Heres how youll be making an impact:
Architecture Reviews: Conduct security architecture reviews for new and existing product or platform components, ensuring the highest standards of security.
Autonomy and Ownership: Independently triage and resolve security issues, continuously improving incident detection and risk mitigation.
Policy Updates and Audits: Participate in updating security policies, internal and external audits, penetration tests, and vulnerability assessments, contributing to a secure environment.
Subject Matter Expertise: Be a recognized subject matter expert on cloud infrastructure security, sharing knowledge and insights across the organization.

The Hardware/Firmware Product Security Engineer will be a member of the Product Security Assurance team specializing in security considerations for hardware and firmware components in flash storage devices (SSDs). This individual will provide crystal-clear technical direction and risk mitigation guidance for diverse engineering and business leaders at all levels. This person will also lead the evolution of secure development practices for hardware and firmware components. During the product development process, this individual will advise the development team on security requirements and evaluate the architecture with a security lens. The HW/FW Product Security Engineer will lead security risk assessments, guide threat modeling activities, and participate in validation of security requirements at the component or system level. Our ideal teammate has experience architecting and developing hardware/firmware that meets the highest cybersecurity standards, is highly motivated and passionate about technology. This ideal candidate is eager to stay up to date with the latest industry trends and technologies and enjoys participating in industry consortiums. If this applies to you join our collaborative team to develop together the next big thing in data!

Essential duties and responsibilities:

Design and implement security architectures and features for hardware and storage devices
Be a key technical contributor to the continuous improvement of the Secure Development Lifecycle
Develop reference threat models for hardware components and devices overall
Assist development teams in adapting the reference threat model to the product/component specific threat model
Perform security assessments, code audits and design reviews of embedded platforms throughout the secure development lifecycle
Raise awareness and understanding of security considerations with engineers and leaders at all levels of the organization
Collaborate with development teams on security during design/development/testing
Partner with teams to develop robust security validation plans and verify implementations of security controls
Research and develop technical solutions to mitigate security risks
Participate in industry consortiums/standards bodies and conduct research to identify new attack vectors and industry trends