Security Architect jobs in Herzliya

Cye is looking for a security architect to join our team!  The cyber architecture team is part of Cye’s professional services delivery department and is dedicated to helping drive Cye customers' cybersecurity maturity forward. as a security architect you would be conducting enterprise level organizations' white-box risk assessments, reviewing design issues or security controls configuration, and offering relevant mitigations to identified risks during penetration testing, executed by Cye’s red teamers.   Responsibilities • Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework. • Review designed or deployed environments, identifying security flaws and recommending mitigations plans • Review Implementation of technical security controls, identify gaps and offer practical mitigations. • Escort, evaluate and improve our clients’ security posture by elevating their infrastructure resilience and implement best-practice organizational procedures • Escort mitigation plans and design practical implementations for security issues e.g., firewall policies review, segmentation & segregation recommendations, Microsoft AD-tier Model implementation etc. • Research and advocate for new security solutions and technologies Qualifications • 3+ years of hands-on experience with securing large organizational networks, including security controls, OS hardening, network devices’ security, etc. • Strong understanding of governance, risk management, and operational processes. • Familiarity with cybersecurity frameworks (NIST CSF, ISO 27001 concepts), risk assessment, mitigation planning, and third‑party risk management. • Significant experience in at least five subjects from the following list: • Vast knowledge and expertise in cyber-security IT systems and cloud infrastructure • Deep understanding of Microsoft IT on-prem and cloud infrastructure, e.g., Entra-id, Office365, AD, GPO, protocols. • Practical experience with cloud environments – AWS, Azure, GCP– A significant advantage • Practical experience in consulting services and risk assessment • Practical experience with security configuration and maturity assessment • Knowledge of security controls, e.g., AV, EDR/XDR, DLP, Device control, etc. • ZTNA design & deployment experience. • Experience with implementing security monitoring procedures & systems (SOC, SIEM, SOAR) Cye helps security and risk leaders gain a clear, defensible view of their cyber exposure, grounded in financial impact and real-world attack paths. By continuously quantifying exposure and validating it in context, organizations can establish a strong baseline, prioritize decisions with confidence, and track measurable reduction over time.

Cye is seeking a Cybersecurity Architect (GRC & Risk) to join our cybersecurity architecture team. In this role, you will lead security governance, risk, and control assessments, conduct third-party due diligence, support maturity assessments, and drive mitigation and architectural review processes. You’ll work closely with CISOs, security leaders, engineering teams, and customers to develop risk-focused methodologies and improve security frameworks. This position is best suited for candidates with a technical GRC, risk, or security assessment background who excel in analysis, interpretation, and structuring of security information. Responsibilities • Lead customer third‑party security due diligence assessments. • Lead mitigation workshops to translate penetration test and assessment findings into prioritized remediation workplans. • Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework. • Develop and refine security methodologies, processes, and architectural guidance. • Maintain internal documentation and ensure alignment between frameworks, processes, and practical implementation. • Analyze technical findings and map them to governance, risk, and control gaps. • Produce clear, structured reports and executive‑ready summaries for technical and non‑technical audiences. Qualifications • 3-4 years in cybersecurity GRC, IT risk, compliance, audit/assurance, or related process‑oriented security roles. • Strong understanding of governance, risk management, and operational processes. • Familiarity with cybersecurity frameworks (NIST CSF, ISO 27001 concepts), risk assessment, mitigation planning, and third‑party risk management. • Basic conceptual understanding of cloud/SaaS shared responsibility models. • Ability to communicate technical issues in business‑aligned language. • Hands-on experience with security controls – an advantage. • Strong writing, communication, and facilitation skills. • Comfortable collaborating with internal stakeholders and external customers. Cye helps security and risk leaders gain a clear, defensible view of their cyber exposure, grounded in financial impact and real-world attack paths. By continuously quantifying exposure and validating it in context, organizations can establish a strong baseline, prioritize decisions with confidence, and track measurable reduction over time.