לוח משרות דרושים הייטק אבטחת מידע / סייבר בהרצליה, לחיפוש זה נמצאו 36 משרות

We seek an embedded security researcher to join us in developing cutting-edge cybersecurity projects.
Responsibilities
As an embedded security researcher, you will be dealing with:
Embedded systems reverse engineering.
Kernel driver research and development.
Real-time Embedded End-to-End Low-Level software development on various unique embedded platforms and environments.

We are looking for an embedded security researcher to join us in developing cutting-edge cybersecurity projects.
Responsibilities
As an embedded security researcher, you will be dealing with:
Embedded systems reverse engineering.
Real-time Embedded End-to-End Low Level software development on various unique embedded platforms and environments.

We are seeking a talented and versatile Senior Threat Detection Engineer to work with us in Herzliya with expertise in iOS and Android security. As a key member of our engineering team, you will play a crucial role in designing and developing complex compromise detection solutions and providing advanced professional services to customers to assist them in determining whether their mobile devices have been compromised.

Responsibilities:
Design and develop mobile focused on-device and off-device malware and compromise detection solutions that enable forensic analysis, including infrastructure, features, classification logic, tools, proof of concepts, heuristics and signatures for Android and iOS devices.
Represent the Company in front of customers by providing advanced professional services including malware and indicator of compromise analysis to determine if devices have been compromised, as well as professional training sessions.
Develop and implement components and features using C, C++, Python, assembly, Java, JavaScript, Go, Rust and other programming languages as needed, while employing secure coding practices and ensuring optimal performance, responsiveness, and cross-platform compatibility in line with product specifications.
Represent the company in front of potential customers and partners by conducting technical demonstrations, participating in meetings and other pre and post sales engagements.
The position may require local and international travel.

About our company As a global semiconductor leader, our company  builds the hardware trust foundations powering modern computing - from trusted platform module (TPM) chips safeguarding millions of personal computers to complex root-of-trust architectures across cloud platforms and servers. Security is Embedded into the core of everything we design. As the global regulatory and threat landscape evolves, ensuring our products meet rigorous, gold-standard cybersecurity compliance and certifications is central to our mission and customer trust. About the Role We are looking for a highly motivated Security Certifications & Compliance Engineer to join our team and play a key role in ensuring our products meet the highest security, compliance, and certification standards. This position combines technical security expertise, compliance activities, product security governance, and collaboration with development teams to support industry-leading security products.
What You'll Do Certifications: Lead and support security certification activities, including Common Criteria (CC), FIPS 140-3, CSPN, OCP SAFE, and additional certification programs. Compliance & Frameworks: Support compliance initiatives related to the Cyber Resilience Act (CRA), Secure Development Lifecycle (SDL), NIST SSDF, and customer cybersecurity requirements. Cross-Functional Teamwork: Work closely with engineering teams, management, customers, certification bodies, and security experts across the organization. External Collaboration: Work closely with external laboratories and certification authorities throughout certification processes. Security Readiness: Review development processes, project documentation, and deliverables to ensure compliance and security readiness. Risk & Threat Assessment: Participate in threat modeling, risk assessments, security reviews, and secure development activities. Audits & Standards: Prepare for and support internal audits, external audits, and customer security assessments. Development Security system (DSS): Maintain, improve, and drive periodic activities for the Corporate Development Security system, including supporting security infrastructure, defining asset classifications, and driving employee awareness initiatives. Documentation: Prepare, review, and maintain certification documentation, including Security Targets, Security Policies, certification reports, and lifecycle evidence.

we are looking for a Security Researcher - Hybrid.
You will have room to pursue open-ended research, explore new ideas, and independently lead complex projects from an initial question through validation and publication. Staying current with emerging technologies and understanding how they change the attack surface are central to our work.
As a Security Researcher, you will be:
Pursuing original security research to discover vulnerabilities, uncover new attack techniques, and strengthen protection for the modern workspace.
Reverse-engineering software to support the product and conduct vulnerability research.
Designing experiments and developing proofs of concept and tools to validate research findings.
Translating attack techniques into detections and validating their effectiveness
Publishing research and communicating findings to technical and non-technical audiences.
Tracking new AI platform, browser, IDE, and desktop capabilities, and testing for new attack paths or detection gaps

we are looking for a Senior Security Researcher.
As a member of our research team, you will investigate emerging attack surfaces across operating systems, cloud environments, and modern enterprise technologies.You will reverse-engineer complex software, discover vulnerabilities, and conduct original, publishable research.Researchers are encouraged to explore new ideas and turn promising findings into published research shared with the global security community.
As a Senior Security Researcher, you will be:
Researching of latest threats on Web API technologies, microservice architectures and containerized applications.
Conducting deep security research across operating systems, cloud environments, enterprise software, and emerging technologies
Developing proofs of concept and research tools
Leveraging AI to scale and accelerate the research workflow
Publishing research via technical blogs, whitepapers, and top-tier security conferences
Collaborating with detection and product teams to translate research into security capabilities

We are looking for an experienced Security Architect to design and implement cybersecurity architectures, define security policies, and support the development of secure cloud environments. The ideal candidate brings strong hands-on cybersecurity experience, a deep understanding of cloud security, and expertise in modern security frameworks and technologies.

At our company, youll collaborate with expert colleagues around the globe to solve problems most people will never even know exist!
Youll be part of building unique solutions shaped by real investigative methodologies, enabling our customers to identify, investigate, visualize and prevent criminal, terror and security threats worldwide.
These solutions are used by law enforcement, national security, and national and military intelligence agencies in almost 100 countries to turn massive, diverse data into clear, actionable intelligence for a safer world.
At our company, we are looking for a Junior Intelligence Analyst to join our team. In this role, you will combine investigative expertise, customer-facing engagement, and product knowledge to help customers maximize the value of our intelligence solutions. You will work closely with customers around the world, providing training, generating intelligence insights, and helping improve investigative methodologies and workflows.
As a worker you will:
Deliver product demonstrations, onboarding programs, workshops, and training sessions to customers and internal stakeholders worldwide.
Generate intelligence insights, investigations, and reports based on OSINT methodologies and analytical best practices.
Support customers in improving investigative workflows and achieving better operational outcomes through effective use of our company solutions.
Drive product adoption and user engagement by identifying usage trends, friction points, and opportunities for improvement.
Participate in product validation activities, including beta testing and feedback collection, ensuring new capabilities meet operational needs.
Serve as a trusted advisor to customers while collaborating closely with Product Management, Customer Success, and Sales teams.
Act as a voice of the customer by sharing field insights, emerging trends, and user requirements that help shape product enhancements and strategy.

we are looking for a talented Application Security Specialist to join our team. In this role, you will take an active part in application penetration testing, threat modeling, Secure SDLC activities, and AppSec initiatives that help evaluate and improve security posture. The position includes hands-on security testing of web, mobile, API, thick client, AI/LLM integrations, and MCP-based application components, identifying and validating vulnerabilities, assessing real business impact, supporting customers with clear remediation guidance, and contributing to application security processes, tools, and best practices.
Responsibilities:
Perform hands-on application penetration testing across web, mobile, API, thick client, AI/LLM integrations, and MCP-enabled application components.
Perform threat modeling and secure design reviews to identify risks early in the development lifecycle.
Support development teams with practical remediation guidance and secure implementation recommendations.
Perform Secure Software Development Lifecycle and secure coding training for developers.
Evaluate and improve customers application security development lifecycle, including secure coding practices, vulnerability management, remediation workflows, and security gates.
Participate in client-facing discussions, including assessment scoping, finding walkthroughs, remediation alignment, and retest updates.

our DFIR team is responsible for responding to our clients' cyber incidents and crises.
Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks.
Responsibilities
Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery
Perform incident response in a cloud environment (Azure, AWS etc.).
Perform digital forensics investigations
Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors
Perform hunt-evil and find-evil activities for proactively detecting attacks
Work closely with our in-house red team, CTI, and cyber architect teams
Work closely with worldwide companies, CISOs, and technology experts

we are looking for a security architect to join our team! 
The cyber architecture team is part of professional services delivery department and is dedicated to helping drive customers' cybersecurity maturity forward. as a security architect you would be conducting enterprise level organizations' white-box risk assessments, reviewing design issues or security controls configuration, and offering relevant mitigations to identified risks during penetration testing, executed by red teamers.  
Responsibilities:
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Review designed or deployed environments, identifying security flaws and recommending mitigations plans
Review Implementation of technical security controls, identify gaps and offer practical mitigations.
Escort, evaluate and improve our clients security posture by elevating their infrastructure resilience and implement best-practice organizational procedures
Escort mitigation plans and design practical implementations for security issues e.g., firewall policies review, segmentation & segregation recommendations, Microsoft AD-tier Model implementation etc.
Research and advocate for new security solutions and technologies

Cye is seeking a Cybersecurity Architect (GRC & Risk) to join our cybersecurity architecture team. In this role, you will lead security governance, risk, and control assessments, conduct third-party due diligence, support maturity assessments, and drive mitigation and architectural review processes. Youll work closely with CISOs, security leaders, engineering teams, and customers to develop risk-focused methodologies and improve security frameworks. This position is best suited for candidates with a technical GRC, risk, or security assessment background who excel in analysis, interpretation, and structuring of security information.
Responsibilities:
Lead customer third‑party security due diligence assessments.
Lead mitigation workshops to translate penetration test and assessment findings into prioritized remediation workplans.
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Develop and refine security methodologies, processes, and architectural guidance.
Maintain internal documentation and ensure alignment between frameworks, processes, and practical implementation.
Analyze technical findings and map them to governance, risk, and control gaps.
Produce clear, structured reports and executive‑ready summaries for technical and non‑technical audiences.

Our Security team is seeking a Security Architect to drive cross-PR&D security alignment, lead complex security design reviews, and shape the security architecture of our strategic cross-technology initiatives. This role serves as the senior technical security authority across our R&D ecosystem- partnering with product, platform, and infrastructure teams to embed security into every layer of our Secure Software Development Lifecycle (SSDLC) and to guide us toward a robust, modern, and secure architecture.
The ideal candidate is highly professional, demonstrates a can-do attitude, and brings the seniority and presence to engage R&D architects and senior stakeholders as a peer. You will need strong technical depth, excellent communication skills, and the ability to translate complex security considerations into clear business and engineering decisions across a diverse range of stakeholders.
What you'll do:
Drive cross-PR&D alignment of the Secure Software Development Lifecycle (SSDLC), establishing consistent standards, controls, and practices across all engineering groups.
Lead complex security design reviews for new technologies, systems, services, and strategic cross-tech initiatives.
Define and own the security architecture for high-impact cross-team initiatives, ensuring security is embedded from the earliest design stages.
Serve as the security counterpart to PR&D architects- representing security in architecture forums, design discussions, and strategic technology decisions.
Partner with DevOps, Infrastructure, Platform, and R&D teams to integrate security into CI/CD pipelines, infrastructure-as-code, and shared platform services.
Perform threat modeling and architectural risk assessments to identify and mitigate weaknesses before they reach production.
Develop and maintain security guidelines, reference architectures, and best practices that scale across the organization.
Evaluate and recommend security tools and technologies to continuously strengthen our security posture.
Stay current on emerging threats, vulnerabilities, and architectural patterns, translating them into actionable improvements to our security strategy.

Our Security team is looking for a highly skilled and security-savvy Application Security Engineer to lead our product and application security efforts. In this role, you will drive security design, ensure secure coding practices, and validate our services and environments against the highest security standards.
You will work closely with our R&D and Product teams to identify, mitigate, and prevent security risks throughout the software development lifecycle (SDLC). You will own security initiatives, mentor developers on security best practices, and play a key role in shaping the security posture of our products.
The ideal candidate is highly motivated, eager to learn, and has a security by design mindset. This role provides career growth opportunities, enabling you to deepen your expertise in AppSec, DevSecOps, and cloud security.
What you'll do:
Partner with development and product teams to integrate security best practices into the SDLC
Lead threat modeling and architecture security reviews to proactively identify and mitigate risks
Conduct security assessments, including code reviews, vulnerability scans, penetration testing, and secure product design reviews
Stay up to date with emerging security threats, vulnerabilities, and industry trends, ensuring we remain ahead of evolving risks.
Support and contribute to security incident response activities, including root cause analysis and post-incident improvements
Automate security processes and integrate security tools within CI/CD pipelines
Develop and deliver secure coding training to engineering teams.

Senior-level individual contributor responsible for driving product strategy, roadmap, and go-to-market execution for cryptographic security portfolio, including data encryption, PKI, TLS, security SDKs/APIs, and FIPS 140-compliant solutions.



Key Responsibilities

Define and drive product vision, strategy, and roadmap for enterprise encryption, PKI services, TLS implementations, and key management solutions; engage directly with enterprise customers, federal agencies, and partners.

Serve as subject matter expert on FIPS 140 requirements and support CAVP/CMVP certification processes, including lab coordination.

Own product strategy for developer cryptographic SDKs and APIs, enabling encryption, certificate lifecycle management, and key management integration and oversee Secure Development Lifecycle (SDL) practices, including threat modeling, secure coding standards, cryptographic implementation reviews, and vulnerability management.

Drive release communications, customer-facing advisories, and cross-functional delivery for cryptographic SDK/API products.

Identify innovation opportunities including post-quantum cryptography readiness, Zero Trust integration, and crypto-agility