Cybersecurity Analyst jobs in Tel Aviv-Yafo

We're Miggo — a cybersecurity startup on a mission to stop app-layer breaches before they happen. Founded in 2023 and backed by top tier cyber VCs, we’re building the world’s first Application Detection & Response (ADR) platform. Why? Because 80% of cyber attacks target the app layer, and current tools just don’t cut it. Miggo brings visibility into how apps actually behave at runtime, spotting risky flows and shutting down threats in real time. If you're excited to shape the future of app security from the inside out — join us. At Miggo, we live by four core principles: We make it customer-focused, putting user needs at the heart of everything we build. We make it happen, driven by a can-do mindset and an obsession with winning. We make it better, always pushing boundaries, learning new things and owning our impact. And most importantly, we make it together — one team, working hard, laughing harder, and thriving on diverse perspectives. What you'll do Miggo is looking for a Security Analyst who loves to deeply analyze CVEs and build effective mitigations. Sitting at the intersection of security research and data analysis, you’ll work closely with research and engineering teams across the company to develop high-impact security controls that keep our customers safe. In this role, you will: • Own the answer to “do our mitigations actually work, and how do we know?” • Build tools to evaluate and improve agentic workflows that generate WAF rules and runtime detections. • Prioritize and analyze newly disclosed CVEs on a daily basis to support effective WAF rule creation. • Analyze coverage levels across various CVE groups, attack vectors, and bug classes. • Conduct data-driven research to optimize automated workflows and recommend next-generation mitigation capabilities. • Perform ad-hoc data analysis to support security research and engineering initiatives. You’re a great fit if you: • Love diving deep into newly disclosed CVEs actively exploited in the wild. • Enjoy analyzing complex security data to uncover actionable insights that drive product and engineering decisions. • Want to define and monitor quality metrics that ensure the efficacy of security products. • Excel at collaborating with engineers to trace data flows, identify anomalies, and refine data pipelines. • Continuously question assumptions, challenge inconsistencies, and hold high standards for both data and security integrity. • Naturally lean on quantitative evidence to prove a point and back up your security hypotheses. What you have • 5+ years of experience as a security researcher. • Proven ability to extract, synthesize, and present clear insights from complex security datasets. • Strong quantitative approach to problem-solving. • Prior experience with Web Application Firewalls (WAF) or runtime detections is a plus. • Hands-on experience or background in Data Analysis / Data Science is a strong advantage. Why You’ll Love Working at Miggo? At Miggo, you’ll sit where security research meets real-world data. Your analysis will directly shape how our mitigations are built, measured, and improved, and how our customers stay protected against the newest threats. You’ll join a small, passionate team building from the ground up, where your ideas, research, and insights will have a visible impact every day.

About Tavily: We're building the infrastructure layer for agentic web interaction at scale. Our API is designed from the ground up to power Retrieval-Augmented Generation (RAG) and real-time reasoning in AI systems. By connecting LLMs to high-quality, trustworthy web content, we help developers build agents that are not only intelligent - but also informed. We work with some of the most innovative teams in AI - from small startups shaping the ecosystem to the largest enterprises deploying AI at scale. Whether it’s powering sales assistants, research copilots, or internal knowledge tools, we’re the missing link between LLMs and the real world. About the Role: We are looking for an IT & Security Analyst to join our team. This role sits at the intersection of IT operations, information security, and governance — ideal for someone who enjoys variety and problem-solving. You'll manage our endpoint and SaaS environment, support security operations, and contribute to our compliance and risk management program. Key Responsibilities: IT Operations • Administer Microsoft Intune for endpoint management, device enrollment, and compliance policies. • Manage user access provisioning and deprovisioning following least-privilege principles. • Maintain the SaaS application inventory, including license management and access reviews. • Support onboarding and offboarding, including identity lifecycle management. Information Security • Support the vulnerability management program — tracking, prioritizing, and coordinating remediation. • Monitor threat intelligence feeds and translate findings into actionable recommendations. • Assist with incident response and security tooling administration. GRC • Support compliance initiatives aligned with frameworks such as SOC 2, ISO 27001, or NIST. • Assist with the third-party risk management program, including vendor assessments. • Complete security questionnaires from customers and partners. • Maintain security policies and support evidence collection for audits. Required Qualifications: • 2+ years in an IT, information security, or combined IT/security role. • Hands-on experience with Microsoft Intune and endpoint management. • Experience managing user access and permissions in a corporate environment. • Familiarity with SaaS platforms and IT asset management. • Exposure to vulnerability management tools and processes. • Understanding of threat intelligence concepts. • Familiarity with at least one compliance framework (SOC 2, ISO 27001, NIST, CIS, etc.). • Experience with security questionnaires and/or third-party risk assessments. • Strong written and verbal communication skills.

Cato Networks is the converged network and security cloud for the AI era. As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents. Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide. We are seeking a highly energetic and talented security analyst to join Cato Networks' Managed Detection and Response (MDR) team. As an MDR security analyst, your primary responsibility will be to identify and respond to security threats across our service customers. You will utilize the groundbreaking Cato Threat Hunting System to proactively seek out unknown threats and enhance Cato Networks hunting capabilities. Leveraging the Cato Cloud data warehouse, you will develop threat hunting technics to effectively detect and address security threats. Moreover, you will serve as a trusted advisor to our MDR service clients, providing valuable insights into their security posture and the threat landscape they face This position offers an exceptional opportunity for network security enthusiasts who are passionate about Network Security, Malware Analysis, Threat Hunting, and Threat Intelligence. Responsibilities • Act as a Customer Security Advisor, conducting threat-hunting activities and performing security assessments on customer networks. Effectively communicate findings, recommendations for remediation, and mitigation strategies to customers • Serve as an escalation point for the SOC analysts, assisting in the investigation, analysis, and response to security incidents • Develop cyber kill-chain indicators of an attack and hunting heuristics to enhance the ongoing threat-hunting process • Enhance the product accuracy and its capacity to detect emerging threats within the dynamic security landscape Requirements and skills • Proven hands-on experience in the cybersecurity industry • Excellent customer service skills • Strong knowledge of networking architecture and protocols, including TCP/IP, DNS, SSL, SMB, HTTP, IP Routing, etc. • Comprehensive understanding of the cybersecurity landscape, common threats, and attack scenarios, such as malware infections, command and control (C&C) communication, drive-by attacks, phishing, and network scans • Practical experience with security technologies, including firewalls (FW), intrusion prevention systems/intrusion detection systems (IPS/IDS), antivirus (AV), security information and event management (SIEM) systems, endpoint protection, and network forensics tools • Analytical mindset, capable of formulating hypotheses and validating them through in-depth analysis and technical evidence • Fluent in English with exceptional communication skills • Proficiency in at least one scripting language such as Python or Ruby • Advantageous: Experience with Extended Detection and Response (XDR) solutions • Advantageous: Previous experience working in Managed Security Service Provider (MSSP) or Managed Detection and Response (MDR) providers as a Threat Hunter or Security Analyst • Ability to work effectively as a team player, demonstrating responsibility and strong organizational skills Education • Advantage – BSc. in Computer Science, Information technology, Mathematics or similar

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Role Overview Nebius is seeking an experienced Security Analyst - Tier 2 for its Security Operations Center (SOC). This role is a hands-on position built for depth, serving as the investigative core of the SOC, focused on evidence and grounded conclusions. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office. You are welcome to work in our offices in Tel Aviv, Israel. Key Responsibilities • Investigate escalated security alerts across endpoint, identity, cloud, email, and network layers. • Determine scope, impact, and root cause using EDR, SIEM, and supporting telemetry. • Escalate suspected incidents to the Incident Response team and complex investigations to Tier 3. • Provide structured feedback to relevant stakeholders on detection or prevention quality, false-positive patterns, and coverage gaps discovered during investigations. • Contribute to and refine SOC runbooks, triage guides, and investigation procedures. • Review Tier 1 escalations, coach on handoff quality, and act as the analytical reference during triage. • Document investigations to a standard that supports handoff, quality review, and lessons learned. • Participate in the on-call rotation, acting as the investigative point of contact outside business hours. Required Qualifications: Experience • Around 5-7 years of hands-on security operations experience, with proven depth in alert investigation. • Experience taking investigations to a clear verdict, including confirmed incidents. Technical Expertise • Strong working command of EDR platforms and SIEM-based investigation, including writing and adapting queries independently. • Solid understanding of attacker techniques, with the ability to map findings to MITRE ATT&CK in analysis and reporting. • Investigation capability across at least two of: endpoint, identity, cloud, email, or network domains. • Windows and Linux internals at the depth required for log and artifact analysis: processes, authentication flows, and persistence mechanisms. • Solid networking fundamentals: TCP/IP, DNS, HTTP/S, and the ability to interpret network telemetry. • Scripting ability (Python or similar) for analysis at scale, and familiarity with SOAR platforms. • Certifications such as BTL2, OSDA, or CDSA are an advantage. Leadership & Communication • Intellectual honesty, clearly distinguishing important and vague data, what is known, what is assumed, and what is still unknown. • Collaborative escalation habits, hands off with context and stays available to support what comes next. • Structured written communication, writing investigation notes that tell the story on their own. • Fluent in English, written and verbal, comfortable working with international teams and stakeholders. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Description Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth. We are looking for a Security Engineer. Take a central role in safeguarding cloud environments like Kubernetes and container services from potential cyber vulnerabilities. Your contributions will enhance our runtime security platform, ensuring premier protection for our clients. Responsibilities • Develop, test, and roll out detection mechanisms to pinpoint and address security vulnerabilities specific to Upwind’s environment. • Keep pace with the latest cloud security practices and trends, bringing in fresh ideas to elevate Upwind’s defenses. • Engage directly with customers to gather feedback, understand their needs, and ensure their concerns are addressed in our threat detection mechanism. • Incorporate feedback and adhere to recognized industry standards, fortifying Upwind’s reputation in cloud security. • Collaborate effectively with our Research and Backend teams to enhance and adapt our platform. Requirements • Currently enrolled as a student in engineering or computer science • Experience in cybersecurity, with an emphasis on cloud environments. • Solid understanding of networking and networking in cloud platforms. • Knowledge of OS, specifically Linux & Windows, complemented by familiarity with tools like Python, Bash, Docker, and K8s. • Ability to adapt and learn, working effectively both solo and within a team setting.