Security Architect jobs in Tel Aviv-Yafo

A leading cybersecurity and cloud consulting company is looking for a hands-on Security Architect with 4+ years of cybersecurity experience and proven expertise in either Cloud Security Architecture or Application Security to help design and secure modern cloud and application environments. What You'll Do: Design and review secure architectures across cloud, application, and cloud-native environments. Conduct security architecture reviews and threat modeling to identify risks and define mitigation strategies. Partner with engineering, DevOps, and product teams to embed security throughout the SDLC and cloud infrastructure lifecycle. Design and implement security controls across cloud platforms, applications, APIs, containers, and Kubernetes. Lead security architecture for cloud transformation, platform modernization, and AI-enabled initiatives. Translate security risks into business impact, guide implementation, and communicate recommendations to technical and business stakeholders. Requirements: 4+ years of experience in Cybersecurity with strong expertise in either Cloud Security Architecture or Application Security Architecture - Must Hands-on experience designing secure architectures in cloud environments and/or modern application ecosystems Strong expertise in at least one of the following: AWS, Azure or GCP security or Application Security, Secure SDLC, Threat Modeling, and Secure Software Design Experience with containers, Kubernetes, APIs, cloud-native technologies, DevSecOps practices, and CI/CD security controls. Ability to identify security risks, guide engineering teams through remediation, and communicate effectively with technical and business stakeholders. Experience reviewing application code Experience with Infrastructure as Code (Terraform, CloudFormation) Security certifications (CISSP, CISM, CCSP, CCSK, or cloud certifications) - Advantage Background in Penetration Testing or Offensive Security - Advantage Active Top Secret civilian clearance - Advantage

We're looking for an AI & Application Security Architect to join the Cyber Defense Division of one of Israel's leading financial organizations. This is an opportunity to take a key role in shaping the organization's security approach across AI, cloud, and application environments, defining security standards and guardrails, and supporting strategic technology initiatives in a complex enterprise environment. What You'll Do: Lead the organization's security architecture approach across AI, cloud, and application environments Define security principles, standards, and approved architectures for AI and application solutions Define security policies and guardrails for the secure adoption and development of AI and GenAI solutions Perform Threat Modeling and identify security risks early in the design process Review and approve security architectures and requirements for complex systems and strategic technology initiatives Address emerging technologies and evolving security threats while balancing innovation, security, privacy, and business needs Requirements: Significant experience in Information Security and Application Security Architecture Deep understanding of AI security risks, controls, and AI Security Frameworks Strong knowledge of AI risk and security standards, such as OWASP Top 10 for LLM/GenAI Deep understanding of security risks and controls related to AI Agents, MCP, LLM Tooling, RAG, and Vector Databases Strong understanding of AI architectures, Generative AI, Machine Learning, RAG, and MLOps Experience with data protection, data classification, access controls, encryption, data leakage prevention, and API security Hands-on experience with Threat Modeling, risk analysis, and designing security solutions for complex systems Experience securing cloud platforms and services across AWS, Azure, GCP, and/or SaaS environments Hands-on experience with AI platforms, AI technologies, and cloud-based AI services

We're looking for a Cyber Application Security Architecture Team Lead to join the Cyber Defense Division of one of Israel's leading financial organizations. This is an opportunity to lead the application security architecture domain, shape secure development standards and practices across the organization, and guide complex strategic initiatives across application, cloud, and AI environments. What You'll Do: Lead and professionally manage a team of Application Security Architects Define and lead the organization's Secure Software Development Lifecycle (SSDLC) approach Review and approve security architectures for complex systems and strategic technology initiatives Lead Architecture Governance processes and define organization-wide application security standards Provide security architecture guidance for projects across application, cloud, and AI environments Perform Threat Modeling and identify security risks early in the design and development lifecycle Work closely with development managers, architects, and technology teams to embed security throughout the development process Requirements: Must Haves: 5+ years of proven experience leading Information Security Architecture in enterprise environments Proven experience providing professional leadership to technology teams and security experts Significant experience implementing Secure SDLC and integrating security tools such as SAST, DAST, SCA, and ASPM into CI/CD processes Hands-on Application Security experience, including identifying and mitigating application vulnerabilities Experience performing Threat Modeling, architecture reviews, defining security requirements, and designing risk mitigation solutions Experience with Cloud Security Architecture across AWS, Azure, and/or GCP environments Deep understanding of Web, Mobile, API, Cloud, Microservices, and Container architectures Strong knowledge of application security methodologies and standards such as OWASP Top 10, OWASP API Security, SAMM, and BSIMM Excellent English, including the ability to read and write technical documentation and lead professional discussions Strong professional leadership skills and the ability to lead experts and drive cross-functional initiatives Nice to Have: Formal people management experience Software development background in Python, Java, Node.js, Go, or similar programming languages Familiarity with AI/GenAI security risks and securing LLM and Agent-based solutions

We're looking for a Cloud & Infrastructure Security Architect to join the Cyber Defense Division of one of Israel's leading financial organizations. In this role, you'll lead security architecture across complex infrastructure and cloud environments, define security standards and guardrails, and support strategic technology initiatives across On-Premise, Hybrid, and Cloud environments. What You'll Do: Lead security architecture across infrastructure and cloud environments, including On-Premise, Hybrid, and Cloud Design and review secure architectures across AWS, Azure, and GCP environments Conduct Security Architecture Reviews, Threat Modeling, and risk assessments for systems, infrastructure, cloud services, and emerging technologies Define security standards and guardrails for infrastructure and cloud environments Lead security aspects of Kubernetes, Containers, Infrastructure as Code (IaC), and CI/CD architectures Design security solutions across Identity, Network Security, Segmentation, and Zero Trust Lead security considerations for AI and GenAI infrastructure and services, with a focus on secure integration within Cloud and enterprise environments Work closely with Architecture, Infrastructure, Cloud, Network, and Development teams Requirements: Must Haves: 4+ years of experience in Information Security and Cyber Security Architecture, with strong expertise in Infrastructure and Cloud Security Significant experience designing, implementing, and/or securing AWS, Azure, or GCP environments, with deep expertise in at least one platform and familiarity with Multi-Cloud environments Deep understanding of infrastructure architectures, including Networking, Compute, Virtualization, Storage, Identity, Encryption, and Security Controls Experience with Hybrid Cloud architectures, Segmentation, and Zero Trust Experience with data protection, data classification, access control, encryption, data loss prevention, and API security Hands-on experience with Threat Modeling, risk analysis, and designing security solutions for complex systems Proven ability to professionally lead and collaborate with Architecture, Infrastructure, Cloud, Network, and Development teams Nice to Have: Experience with CNAPP, CSPM, or CWPP solutions and implementing Cloud Security Guardrails in Enterprise environments Familiarity with AI/GenAI security risks and securing AI environments in the Cloud Relevant Cloud or Security certifications such as AWS/Azure/GCP Security certifications or CISSP

A leading cybersecurity and cloud consulting company providing hands-on security services and securing critical Cloud and On-Prem environments. The role includes leading secure application design and supporting development teams throughout the SDLC, integrating security controls such as SAST, DAST, SCA, and secrets scanning into CI/CD pipelines, performing threat modeling, and working closely with engineering teams to prioritize and implement effective security mitigations. Join a growing cybersecurity company focused on developing advanced security solutions for modern digital environments. Lead secure application design and support development teams throughout the SDLC. In this role, you'll work closely with engineering and product teams to integrate and optimize security controls, review security findings, perform threat modeling, and ensure security is embedded throughout the development lifecycle. What you'll do: Design and review secure application architectures across Web, APIs, Microservices, and AI-enabled environments. Perform threat modeling and hands-on security reviews, with a focus on OWASP Top 10, API risks, business logic flaws, and data exposure. Review application code, architecture, and security controls to identify risks and recommend practical remediation solutions. Support engineering teams in embedding security throughout the SDLC, including SAST, DAST, SCA, secrets scanning, and CI/CD security controls. Review and prioritize security findings and guide development teams through effective remediation. Translate technical vulnerabilities into clear business risks for engineering, product, and executive stakeholders. Requirements: 3+ years of experience in Application Security or Secure Software Development. Experience designing secure application architectures and reviewing complex application ecosystems. Ability to audit and review code in at least one programming language. Hands-on experience with threat modeling methodologies, such as STRIDE. Experience working with SAST, DAST, SCA, findings triage, and guiding engineers through remediation. Strong understanding of modern application environments, including APIs, Microservices, Cloud-Native applications, and AI/LLM integrations. Excellent communication skills and the ability to work effectively with engineering teams, product stakeholders, and senior leadership.

Lead secure application design and embed security across the SDLC — from threat modeling to CI/CD. Lead secure application design and support development teams throughout the SDLC. You'll integrate and optimize security controls such as SAST, DAST, SCA, and secrets scanning within CI/CD pipelines, review security findings, perform threat modeling, and work with engineering teams to prioritize and implement effective mitigations. What you'll do • Design and review secure application architectures across web, API, microservices, and AI-enabled environments. • Perform threat modeling and hands-on security reviews focused on the OWASP Top 10, API risks, business logic flaws, and data exposure. • Review application code, architecture, and security controls to identify practical risks and remediation paths. • Help engineering teams embed security into the SDLC, including SAST, DAST, SCA, and CI/CD security controls. • Translate technical vulnerabilities into clear business risks for product, engineering, and executive stakeholders. What you bring • 4+ years in cybersecurity, with strong application security or secure software development experience. • Proven experience designing secure application architectures and reviewing complex application ecosystems. • Ability to audit code in at least one programming language. • Hands-on experience with threat modeling methodologies, such as STRIDE. • Experience with SAST, DAST, SCA, findings triage, and guiding engineers through remediation. • Strong understanding of modern application stacks, including APIs, microservices, cloud-native applications, and AI/LLM integrations. • Excellent communication skills with engineers, product teams, and leadership. Why join Moveo You'll play a critical role in embedding security into how we build software — partnering closely with engineering and leadership to protect our products and our clients' trust, in a fast-paced, tech-forward environment.

This is a 9-month temporary position As a Product Security Architect, you will join a highly technical, fast-moving Product Security team to advance and secure Axonius's platform and its modern AI-driven capabilities. Operating in an environment with deep R&D collaboration and a hybrid schedule, you will own the development lifecycle's security strategy, ensuring modern cloud and distributed systems are engineered safely by design. This role directly supports core development teams across Israel and Portugal, ensuring robust posture alignment from initial planning through deployment. Responsibilities • Collaborate with R&D teams to identify, prioritize, and drive security requirements and mitigation strategies throughout the development lifecycle. • Conduct architecture, design, and threat modeling security reviews for web, cloud (AWS), and distributed systems. • Produce explicit, actionable security architecture documents, design specifications, and technical guidelines for engineering. • Lead incident response efforts during active product cyber security events, driving cross-functional remediation across engineering teams. Minimum Qualifications • 3+ years of experience in application security or product security roles. • 2+ years of hands-on software development experience. • Professional experience analyzing, reading, and evaluating codebase architecture within a product-centric tech stack. • Hands-on experience working directly in AWS cloud environments and building application threat models. • Active experience utilizing AI/LLM-based tools (e.g., Claude, Augment) to optimize development workflows, research, or productivity. • Professional fluency in both written and verbal communication in English. Preferred Qualifications • Hands-on security architecture experience integrating and securing AI/LLM technologies directly within modern commercial B2B products. • Professional experience designing security frameworks for both modern cloud/SaaS stacks and legacy medical device/hardware environments. • Industry-recognized security certifications such as CISSP, OSCP, or CCSP. • Proven track record of published security research, CVE submissions, bug bounty participation, or security conference presentations. • Bachelor’s or Master’s degree in Computer Science, Engineering, or a related technical discipline. #LI-REMOTE, #LI-ZR1 About Axonius: Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence. Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world. Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.

Product Security Architect We are looking for a Senior Product Security Architect to join Tipalti’s Product Security team and help strengthen security across our products and software development lifecycle. The role is hands-on and engineering-focused, working closely with development and product teams to identify security risks, improve application security, and implement practical security solutions throughout the development lifecycle. Why join Tipalti? Tipalti is the AI-powered platform for finance automation, elevating how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. Our platform provides a comprehensive suite of finance automation solutions designed for mid-market businesses across accounts payable, global payouts, procurement, employee expenses, corporate cards, supplier management, tax compliance, and treasury. Tipalti partners with leading financial institutions such as Citi, Wells Fargo, J.P. Morgan, and Visa, enabling over 5,000 global companies to efficiently and securely pay millions of suppliers and payees across 200+ countries and territories, in 120 currencies. At Tipalti, we pride ourselves on our collaborative culture, the quality of our product, and the capabilities of our people. Tipalti offers competitive benefits, a flexible workplace, career coaching, and an environment where diverse individuals can thrive and make an impact. Founded in Israel in 2010, Tipalti is a global business headquartered in the San Francisco Bay Area (Foster City), with offices in Tel Aviv, Plano, Toronto, Vancouver, London, Amsterdam, Tbilisi, and Medellin. In this role, you will be responsible for: • Work closely with development and product teams on application and product security throughout the software development lifecycle. • Perform hands-on security reviews of applications, APIs, services, and code. • Identify, investigate, validate, and assess product security vulnerabilities and security findings. • Provide practical remediation guidance and work with development teams through remediation. • Perform threat modeling and security analysis for new and existing product capabilities. • Work with application security tools and technologies including SAST, SCA, DAST, API Security, WAF, and related security controls. • Improve and automate Product Security processes, tooling, and security checks across the development lifecycle. • Assess security across modern application environments including web applications, APIs, microservices, containers, Kubernetes, and cloud-native services. • Support secure coding practices and provide practical security guidance to development teams. • Support vulnerability disclosure and Bug Bounty activities, including technical validation, risk assessment, and remediation follow-up. • Contribute to the continuous improvement of Product Security practices and capabilities across Tipalti’s engineering organization. About you • 5+ years of hands-on experience in Application Security, Product Security, or a closely related software security role. • Strong understanding of software development and the ability to read, understand, and review application code with .NET, JavaScript/TypeScript, or comparable modern technologies. • Hands-on experience identifying and analyzing application and API security vulnerabilities. • Experience performing threat modeling and application security reviews. • Strong understanding of authentication, authorization, session management, web security, API security and mobile security. • Strong knowledge of OWASP Top 10s and their practical remediation. • Hands-on experience with application security technologies such as SAST, SCA, DAST, API Security, WAF. • Experience with microservices, APIs, containers, Kubernetes, and cloud-native environments. • Knowledge of AWS security and/or Azure security. • Understanding of modern CI/CD and software development environments. • Strong analytical and problem-solving skills with the ability to turn security findings into practical technical recommendations. • Strong communication and collaboration skills and the ability to work effectively with engineering, product, and security teams. Advantage • Experience developing security tooling or automation. • Experience with CI/CD and software supply chain security. • Experience with fintech, payments, or security-sensitive SaaS products. • Experience with vulnerability research, Bug Bounty, or vulnerability disclosure programs. • Familiarity with AI/LLM application security, AI coding tools, MCP, or agentic systems. • Security research, open-source contributions, or other demonstrated hands-on security work. Our tech teams retain a fast-paced, start-up vibe that encourages innovation and critical thinking. At Tipalti, you’ll have the opportunity to work with a diverse, global team of engineers, developers, and product leaders who are collectively building the future of our best-in-class product suite as we transform financial operations for the future. About Our Tel Aviv Offices: Hybrid Work Model - Tipalti offers a hybrid work model, with two days per week working from home and three days per week from our beautiful offices in North Tel Aviv. Shuttle Services - Shuttle services are available from the nearest train station and across Tel Aviv to the office. Parking - Parking is available for all employees. Snacks & Treats - Enjoy a selection of snacks and treats available on every floor. #LI-hybrid Transparency Note: While you'll see three Product Security listings on our careers board, we are actually looking to fill a single open seat. The job descriptions are identical- only the seniority levels differ. We believe great talent comes in different shapes, and we value practical skills and capability over rigid experience requirements. Wherever you are in your career journey, if you have the right drive and expertise, feel free to apply to the level that fits you best- we’d love to hear from you. Our Mission Our mission is to elevate how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. We are the AI-powered platform that automates finance. Tipalti is fueled by a commitment to our customers and a desire to build lasting connections. Our client portfolio includes high-velocity businesses such as Amazon Twitch, GoDaddy, Roku, WordPress.com, and ZipRecruiter. We work hard for our 99% customer retention rate which is built on trust, reliability and innovation. Tipalti means we handled it" - a mission to which we are constantly committed. Accommodations Tipalti champions inclusive teams, in which every voice counts. We are committed to recruiting diverse candidates with varied personal experiences and abilities. We welcome applications from candidates belonging to historically underrepresented or disadvantaged groups, and maintain an equitable Talent Acquisition process that is free from discrimination. As an equal opportunities employer, Tipalti complies with employment and human rights laws across the various jurisdictions in which we operate. Should you require reasonable adjustments or accommodations during the recruitment process, including access to alternate formats of materials, meeting spaces, or other accommodations that could better enable your full participation, please reach out to [email protected] for assistance. AI Use We may use artificial intelligence and automated systems (collectively "AI") to screen, assess, and select candidates during our recruitment process. This includes resume screening, skills assessment, and candidate matching. You have the right to request human review of any automated decision. For more information about how we collect and use personal data and information during recruitment, please refer to our Job Candidate Privacy Notice. For additional questions about our use of AI during our recruitment process, you can contact [email protected]. Privacy We are committed to protecting the privacy interests of job applicants and candidates. For more information about our privacy practices during our Talent Acquisition process, please refer to our Job Candidate Privacy Notice below: Job Candidate Privacy Notice | Tipalti www.tipalti.com/privacy/job-candidate-privacy-notice/

Transmit Security gives businesses the modern tools they need to build secure, trusted and end-to-end digital identity journeys to innovate and grow. CX-focused, cybersecurity conscious leaders rely on Transmit Security’s xCIAM platform to provide their customers with smooth experiences protected from fraud across all channels and devices. Transmit Security serves many of the world’s largest banks, insurers, retailers, and other leading brands, collectively responsible for more than $1.3 trillion in annual commerce. About the Role: Providing an identity security platform to some of the most sensitive organizations in the world, product security is key in Transmit Security. As a Product Security Architect, you will be responsible for designing, shaping, and evolving the security architecture of all of our SaaS services. You’ll be focused on proactively reducing security risks by performing architectural reviews, providing guidance and governance for security programs, owning application security training all through close collaboration with development and DevOps teams. What you’ll do: • Security Architecture & Design • Security Reviews and Threat Modeling • Application Security Training • SDLC Security • Establish and provide guidance around application security and DevSecOps security programs What you’ll need: • Deep understanding of Web technologies and web application security including deep understanding of common vulnerabilities in application and infrastructure security. • Deep understanding of identity and authentication standards such as OIDC, OAuth, SAML • Strong background in security architecture • Experience running security reviews • Excellent coding capabilities and skills to identify application security issues in code

Island is shaping the future of work - creating an enterprise workspace for both knowledge workers and agents - where access, security, and AI-powered productivity are built in. Our enterprise agentic control plane boosts productivity across devices, browsers, applications, networks, and data while protecting sensitive information, simplifying access, and helping enterprises scale AI safely. Behind all of that is a team of people who care deeply about their craft and want to do the biggest and best work of their careers. At Island, character and drive matter more than your resume. Backed by Coatue Management, Insight Partners, Sequoia Capital, Cyberstarts, and other world-class investors, Island is used by millions of people at some of the planet’s largest enterprises. Come build with us. Together, we’re changing how the world works. Key Responsibilities • Cloud Security Architecture & Hardening: Design and enforce security baselines, configurations, and reference architectures across our multi-cloud footprint (AWS/GCP/Azure). Evaluate new cloud services and features for security implications and create hardened deployment standards for IaaS, PaaS, and serverless components. • Security Engineering & Automation: Develop and deploy security-as-code solutions, integrating security controls directly into CI/CD pipelines and leveraging Infrastructure-as-Code (IaC) tools to ensure continuous configuration integrity and compliance. Develop custom automation for detection, alerting, and triage workflows, leveraging cloud SDKs and APIs. • Cloud Security Monitoring & Observability: Design, implement, and maintain cloud-native security monitoring solutions (e.g., utilizing services like CloudTrail, GuardDuty, Security Command Center) to ensure comprehensive visibility across the cloud control plane and data plane. • Incident Triage & Response: Support the security team in investigating and responding to critical security events and vulnerabilities, creating runbooks, and contributing to post-incident remediation and architectural improvements. • Security Enablement & Awareness: Collaborate with product, engineering, and IT teams to improve security awareness, deliver training, and drive adoption of security best practices across Island, specifically for IaaS, PaaS, and secure DevOps practices. Requirements • Deep expertise in designing, implementing, and reviewing secure cloud architectures, including network segmentation, policy enforcement, and infrastructure hardening. • Expert knowledge of cloud security principles and secure DevSecOps practices, including experience securing Kubernetes/containerized workloads, managing cloud identity (IAM), and establishing security baselines. • Proficiency in scripting and automation (e.g., Python, Bash, PowerShell) to build scalable security tooling, including extensive experience with Infrastructure-as-Code (IaC) security and policy-as-code tools. • Strong understanding of detection engineering, security operations workflows, and vulnerability management, with a specific focus on protecting cloud infrastructure and services. • Hands-on experience (3+ years) with Cloud Security Posture Management (CSPM) tools, cloud security monitoring solutions, and security information/event management (SIEM). • Solid grasp of modern attack techniques, threat actor behaviors, and vulnerability exploitation patterns in cloud environments (e.g., misconfigurations, cloud identity compromises). • Curiosity-driven, operations-focused mindset with a passion for keeping adversaries out and operations resilient. • Experience in building or running purple teaming activities is a strong plus, particularly penetration testing of cloud infrastructure and identifying design flaws. Data Privacy You can find information on how we process and protect your personal data in our Candidate and Employee Privacy Notice. For any privacy-related questions, contact us at [email protected].

About Us Riskified empowers businesses to unleash ecommerce growth by taking risk off the table. Many of the world’s biggest brands and publicly traded companies selling online rely on Riskified for guaranteed protection against chargebacks, to fight fraud and policy abuse at scale, and to improve customer retention. Developed and managed by the largest team of ecommerce risk analysts, data scientists and researchers, Riskified’s AI-powered fraud and risk intelligence platform analyzes the individual behind each interaction to provide real-time decisions and robust identity-based insights. Riskified is proud to work with incredible companies in virtually all industries including Acer, Gucci, Lorna Jane, GoPro, and many more. We thrive in a collaborative work setting, alongside great people, to build and enhance products that matter. Abundant opportunities to create and contribute provide us with a sense of purpose that extends beyond ourselves, leaving a lasting impact. These sentiments capture why we choose Riskified every day. About the Role The Application Security team at Riskified ensures the security of Riskified’s products. In this role you will evaluate security architecture, design and implement technology, processes, and procedures by collaborating closely with developers, product managers, and other members of the security team. What You'll Be Doing • Initiate and improve processes, tools, and documentation that will support application security requirements • Identify security design gaps in existing and proposed architectures, services and products • Evaluate architecture, design, and code to identify and resolve potential vulnerabilities and security risks • Work closely with development teams to prioritise and resolve application security issues and implement security best practices, frameworks, etc. • Assist in identifying and responding to security issues in Riskified’s environment Qualifications • 5+ years application security hands-on experience • Experience performing security design and code reviews, threat modeling and customizing application security solutions • Strong understanding of common security attacks and their remediation • Hands-on experience with AI tools and AI-based security solutions • Experience performing security design reviews and security testing for AI systems, LLM-based applications, and AI agents • Experience with programming languages: Ruby, Scala, Python, JavaScript, etc. (Advantage) • Ability to work well with developers and product management • Experience working in high scale SaaS environment (Advantage) • Knowledge of microservice architecture, web technologies and APIs (Advantage) • Ability to explain complex security problems • Excellent problem solving skills Life at Riskified We are a fast-growing and dynamic tech company with 750+ team members globally. We value collaboration and innovative thinking. We’re looking for bright, driven, and passionate people to grow with us. Our Tel-Aviv team is currently working in a hybrid of remote and in-office work. We have recently moved to our new space in Tel Aviv - check it out here! Some of our Tel Aviv Benefits & Perks: • Equity for all employees, Keren Hishtalmut, pension • Private medical insurance, extra time off for parents and caregivers • Commuter and parking benefits • Team events, fully-stocked kitchen,lunch stipend, happy hours, yoga, pilates, functional training, basketball, soccer • Wide-ranging opportunities to volunteer and make an impact • Commitment to your professional development with global onboarding, skills-based courses, lunch & learns • Awesome Riskified gifts and swag! In the News Geektime: Riskified Goes Public Walla!: Happy Hour at the Riskified Offices Geektime Insider: A look at Riskified Tel Aviv Globes: Riskified to contribute the highest amount up to date to Tmura Globes: Riskified is among Israel’s fastest growing companies TechCrunch: Riskified Prevents Fraud on Your Favorite E-commerce Site Riskified is deeply committed to the principle of equal opportunity for all individuals. We do not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, disability, veteran status, or any other status protected by law.

Description As a Cloud Security Architect, you will be part of Deloitte Cyber Security team working among Israel and global companies, Helping client build their Next Gen Cloud solution. your responsibilities would include: • Designing and implementing cloud security strategies and policies that meet an organization’s specific needs. • Ensuring the security of cloud-based data and applications against unauthorized access, theft, and other threats. • Conducting security assessments and audits to identify vulnerabilities and develop plans to address them. • Collaborating with IT professionals, including network engineers, developers, and system administrators, to integrate cloud security measures into existing systems and processes. • Staying up-to-date on the latest cloud security technologies, trends, and best practices. Requirements • 3-4+ years of experience in public cloud architecture • Hands-on experience with GCP, AWS, AZURE cloud platforms and various SaaS applications • Experience with secure adoption of SaaS applications in an organization • Experience in Identity management and authentication systems and protocols (Active Directory, LDAP, SAML, OAuth, RADIUS) • Ability to present cloud security concepts to C-level business and technology stakeholder • Good knowledge with Security compliance and frameworks such as CSA CCM • High English proficiency • Cloud environments security auditing experience - Advantage. • Cloud migration projects execution experience - Advantage • Relevant cloud security certificates (AWS ,AZURE, Google, CCSK , CCSP) – An advantage • Experience with container orchestration platforms - specifically Kubernetes. • Knowledge of cloud networking concepts and common network protocols. • Experience in scripting and OOP in various languages e.g.: bash, PowerShell, Python, TypeScript etc. • B.A/M.Sc. in Data Science, Computer Science, Mathematics, Statistics, etc- an advantage We at Deloitte believe that diversity and inclusion among our people is a critical component of our success and that is why we cultivate an organizational culture that contains and embraces diversity in all its forms.

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA’s Networking AI Platforms Security group is redefining silicon and networking security for next-generation, high-performance infrastructure. We are seeking a Senior Switch Silicon Security Architect to define end-to-end security across switch silicon, firmware, networking protocols, and management stacks. Working with architecture, engineering, and product teams, this role will shape security from early design through validation, manufacturing, and deployment. What you'll be doing: • Research, design, and drive the implementation of hardware and software security architectures for switch platforms that meet internal requirements, customer needs, and industry standards. • Develop threat models and define end-to-end security architectures for hyperscale networking solutions spanning silicon, firmware, high-performance networking protocols, and management stacks. • Partner across NVIDIA with hardware, software, research, and product teams to shape the strategic direction of switch silicon and fabric-level security. • Define and drive multi-generation security roadmaps for switch silicon, networking protocols, and fabric-level solutions. • Engage directly with customers to understand their security requirements and translate them into switch silicon and system architectures that address both component and solution-level needs. • Represent NVIDIA in industry standards bodies and collaborate with external partners to shape emerging security standards and drive interoperability across silicon and networking ecosystems. What we need to see: • B.Sc., M.Sc., or Ph.D. in Electrical Engineering, Computer Engineering, Computer Science, or equivalent practical experience. • 7+ years of experience in silicon security, SoC architecture, embedded systems security, or a related field. • Proven hands-on experience architecting and implementing hardware roots of trust, secure boot, attestation, secure lifecycle and debug mechanisms, and key provisioning. • Strong foundation in applied cryptography at scale, including hardware trade-offs, PKI, key and identity management, post-quantum cryptography, and encryption technologies. • Hands-on experience architecting secure hardware–firmware interfaces for SoCs and embedded devices. • Deep understanding of high-performance networking protocols and their end-to-end security implications. • Strong communication and influencing skills, with a proven ability to drive initiatives in a fast-paced organization. Ways to stand out from the crowd: • Experience influencing industry security standards or collaborating with cloud customers and external partners on hardware and end-to-end networking security architectures. • A proven track record of taking innovative security technologies from research and architecture through implementation and deployment in production silicon. • Deep expertise in securing high-performance networking protocols and fabrics, including Ethernet, InfiniBand, and NVLink, with a strong understanding of the switch’s role in end-to-end confidential computing and trusted execution environment architectures. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. Widely considered to be one of the technology world’s most desirable employers, NVIDIA offers highly competitive salaries and a comprehensive benefits package. As you plan your future, see what we can offer to you and your family www.nvidiabenefits.com/

NVIDIA is seeking best-in-class ASIC Design Engineers to design and implement the world’s leading CPU's and SoC's. This position offers you the opportunity to have real impact in a dynamic, technology-focused company impacting product lines ranging from consumer graphics to self-driving cars and the growing field of artificial intelligence. NVIDIA is a “learning machine” that constantly evolves by adapting to new opportunities that are hard to pursue, that only we can take on, and that matter to the world. We have crafted a team of excellent people stretching around the globe, whose mission is to push the frontiers of what is possible today and define the platform for the future of computing. NVIDIA is building a new group in Israel, this group will deliver security engines and risc-V processor IPs to all of NVIDIA product lines working with all NVIDIA groups around the world. We are looking for an Architect with a security experience to help lead the Arch work on security engines and secure boot flows. You will work closely with NVIDIA security architects, design engineers, verification engineers, and SW engineers to accomplish your tasks. What you will be doing: • Participate in Architecture development and document specifications. • Work with RTL and the verification team to ensure that the design meets the spec. • Help deliver a design that meets the high security standards of NVIDIA and our customers. What we need to see: • A BSc and/or MSc from a major university in electrical engineering or computer engineering • At least 10 years of relevant experience in ASIC design, uArch and Arch in the areas of crypto engines and root of trust. • A good system level understanding and experience working with multiple groups including ASIC design, FW and SW. • Good interpersonal skills. And team player With competitive salaries and a generous benefits package, NVIDIA is widely considered to be one of the technology world’s most desirable employers. We employ some of the most forward-thinking and hardworking people in the world. Are you passionate about becoming a part of an outstanding team supporting the latest technology? If so, we want to hear from you. NVIDIA is an equal-opportunity employer. We value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It's an outstanding legacy of innovation that's fueled by great technology—and outstanding people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, encouraging environment where everyone is motivated to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is seeking a security architect who is interested in a chance to define, and implement next-generation security features for data centers’ networks. The position will take on a lead role, working with teams with varied strengths across NVIDIA and with external partners to research security requirements for networking products. What you'll be doing: • Lead, research, design, develop, and implement solutions for attestation and confidential compute in network devices. • Apply innovative security primitives using attestation capabilities. • Collaborate across external and internal teams and with customers. • Define next generation architecture following standards bodies and developing proof-of-concepts for attestation and confidential compute. What we need to see: • BSc, MSc, or PhD in Electrical Engineering, Computer Science, or Computer Engineering or equivalent experience. • At least 5 years of experience. • Background in attestation protocols such as DICE, SPDM, TPM, CoRIM • Background in confidential compute and trusted execution environments solutions such as ARM CCA and PCIe TDISP • Programming and debugging fundamentals across languages such as Python, and C/C++. • Strong communication skills and a genuine passion for working together as a team are vital. Ways to stand out from the crowd: • Proven security research experience and publications in top security conferences. • Experience with high-scale deployment challenges and threat modeling • Architectural background and hardware-software codesign. NVIDIA has some of the most forward-thinking and talented people in the world working for us. If you're an autonomous researcher passionate about connecting AI applications with the infrastructure that powers them, we want to hear from you.

NVIDIA Networking product security team is looking for an outstanding technical security architect with hands-on experience to help us improve the security posture of NVIDIA networking products. In this role you will partner with firmware, hardware, and architecture teams on the security architecture, to reduce risk, threats, and vulnerabilities while driving new security features that affect millions of devices all over the world! What you'll be doing: • Be involved in the security architecture of NVIDIA Networking firmware — trust boundaries, privilege separation between firmware domains, device identity and key storage, secure boot and chain of trust, and secure update and anti-rollback flows. • Perform security threat modeling of firmware and embedded subsystems across NVIDIA Networking products. • Analyze complex firmware and hardware/firmware interactions to identify security weaknesses, including boot flows, privileged execution environments, and host- and network-facing management interfaces. • Define security features and mitigations spanning the full device lifecycle — provisioning, attestation, debug authorization, runtime hardening, and field update. Guide the engineering teams throughout the implementation. • Translate threat models into actionable security requirements and architectural decisions, and review designs and implementations against them. • Partner with hardware and ASIC architects to specify the security primitives firmware depends on, and define how they are used across the product line. • Drive secure development practices for firmware — memory-safe coding patterns in C, static analysis, and fuzzing of firmware-exposed interfaces — and make sure development processes meet security and coding standards. What we need to see: • Academic degree in computer science, electrical engineering, or related field. Candidates with equivalent work experience will also be considered. • Demonstrated experience of 5+ years in product security, firmware security, or security research, including hands-on work with embedded or firmware codebases. • Experience defining security policy models — authorization schemes, RBAC, and administrative role separation — including how policy is expressed, enforced, and administered in production. • Familiarity with applied cryptography (including secure boot, code signing, and attestation), threat modeling, common attack vectors, and mitigation techniques. • Ability to work independently, and collaboratively in a constantly evolving environment. • Excellent communication and interpersonal skills. Ways to stand out from the crowd: • M.Sc. or PhD in computer science, electrical engineering, or related technical field. • Experience with hardware/software interfaces in networking devices — register and MMIO programming models, DMA, mailbox and doorbell mechanisms, PCIe configuration and management interfaces, and the firmware that drives them. • Experience with hardware roots of trust and hardware-enforced isolation (MPU/MMU, secure enclaves, fuse/OTP-based provisioning) in SoCs or ASICs. • Hands-on experience with networking software — device drivers, control plane, management interfaces, or embedded network operating systems — and an understanding of how these components interact with firmware. • Familiarity with high-scale deployment, the data center security ecosystem and its operational challenges. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

NVIDIA is seeking a technical leader interested in defining, crafting, implementing, and guiding the implementation of security research, architecture, implementation, and design for next-generation NVIDIA Networking products. You'll be expected to take a strong hands-on role, working with diverse teams across NVIDIA and with external partners to meet security requirements for our state-of-the-art network products. NVIDIA’s invention of the GPU 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. More recently, GPU deep learning ignited modern AI — the next era of computing — with the GPU acting as the brain of computers, robots, and self-driving cars that can perceive and understand the world. Today, we are increasingly known as “the AI computing company”. We are looking to grow our teams with the smartest people in the world. If you're creative and autonomous, we want to hear from you! What you'll be doing: • Research, design, develop and implement architecture solutions (Hardware and software) meeting internal and external security requirements and standards. • Apply innovative hardware security primitives to enable next generation secure software extensions supported by hardware. • Design next generation production and provisioning systems. • Collaborate with partners on the implementation of open-source software. • Collaborate across the company to guide the direction of Its (USB, I2C, I3C, UART, PCI) working with hardware, software, research and product teams. • Architectural modeling, validation, microarchitectural definition, following standards bodies, and developing infrastructure enabling trusted platforms using hardware security methods. • Work with customers, partners to identify and address security issues and threats. What we need to see: • BSc, MS or PhD in Electrical Engineering, Computer Science or Computer Engineering, or equivalent experience. • 7+ years of relevant experience. • Experience with production and provisioning design of SoC systems. • Have directly worked on several of the following: • Key management systems and HSM operation. • First-hand work experience with IO interface including: I2C, I3C, SPI, UART, USB, PCIe • Computing platform boot architecture in embedded devices and servers • RISC-V architecture, Root-of-trust, and security processors. • Familiarity with embedded systems and programming low-level firmware. • Familiar with Security-by-design hardware and principles of privileges. • Programming and debugging fundamentals across languages such as: Verilog, Python/Perl scripting, ARM assembly and C/C++. • The ability to work in a dynamic collaboration oriented team is required and strong communication skills and a real passion for working as a team are essential. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

NVIDIA's Networking AI Platforms Security group is redefining how security operates at scale by embedding AI at the core of its detection, defense, and engineering workflows. We are seeking a Senior Security Architect to design, build, and deploy intelligent AI agent systems tackling NVIDIA's most complex security challenges. Working alongside security architects, engineering, and platform teams, this role offers a rare opportunity to shape the future of AI-powered security at one of the world's most innovative companies! What you'll be doing: • Design and deploy AI agent systems for security workflows: PQC transition, attacker-defender frameworks, threat modeling, and automated mitigation deployment. • Build frameworks integrating LLMs, RAG, and automation pipelines with security data sources and engineering workflows. • Partner with product and architecture organizations to embed security requirements early and translate threat landscapes into scalable solutions. • Own the full agentic system lifecycle: architecture, prototyping,productization, testing, and operational stewardship. What we need to see: • BS, MS, or Ph.D. in Computer Science, Electrical Engineering, or related field, or equivalent experience; Ph.D. preferred. • 5+ years of experience. • Proven experience building agentic systems, LLM integrations, RAG pipelines, or workflow orchestration in production. • Strong security foundation: cryptography, PKI, key management, Root of Trust technologies, Cloud security and secure software design. • Excellent Python skills and system design abilities across software, firmware, and cloud environments. • Strong communication skills with the ability to drive cross-functional projects in a high pace organization. Ways to stand out from the crowd: • Experience with PQC migration, cryptographic inventory, or crypto-agility programs. • Background in security automation: attacker-defender simulation, red-team tooling, SAST/DAST, or vulnerability management. • Data science experience on large-scale networking and security telemetry: anomaly detection, behavioral analytics, or risk scoring. • LLM fine-tuning expertise or open-source/research contributions in AI and security intersection. With highly competitive salaries and a comprehensive benefits package, NVIDIA is widely considered to be one of the technology world's most desirable employers. We have some of the most forward-thinking and hardworking people on the planet working for us and, due to unprecedented growth, our special engineering teams are growing fast. If you're a creative and autonomous engineer with a genuine passion for technology, we want to hear from you. NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect Manager to lead our cybersecurity architecture function, with a strong focus on Kubernetes security, cloud infrastructure, cloud-native architectures, and secure software development. The role is responsible for defining and implementing security architecture principles, designing secure cloud-native environments, and embedding security throughout infrastructure provisioning and software development lifecycles. The successful candidate will combine deep technical expertise in Kubernetes and cloud security with proven team leadership, architectural design, and cross-functional collaboration skills. They will work closely with Cloud Engineering, DevOps, R&D, Platform Engineering, IT, and Security teams to ensure that security is built into the organization’s technology foundations. Your responsibilities will include: Cybersecurity Architecture • Define and maintain the organization’s cybersecurity architecture, reference architectures, security standards, and design principles. • Lead security architecture reviews for new systems, applications, infrastructure, and technology initiatives. • Translate threat models, business requirements, and risk assessments into practical security controls. • Establish security-by-design principles across cloud, infrastructure, application, and platform architectures. • Identify architectural security gaps and drive remediation roadmaps. Kubernetes and Cloud-Native Security • Design and implement security architectures for Kubernetes-based environments and cloud-native platforms. • Secure Kubernetes clusters, control planes, worker nodes, namespaces, workloads, and cluster-to-cluster communications. • Define and enforce Kubernetes security best practices, including RBAC, workload identity, network policies, admission controls, Pod Security Standards, and secrets management. • Secure container images and registries, including image scanning, provenance, signing, and supply chain integrity. • Implement runtime security, workload isolation, threat detection, and monitoring for containerized environments. • Secure Kubernetes ingress, service-to-service communications, APIs, and service mesh architectures where applicable. • Establish security controls for container orchestration platforms across development, testing, and production environments. • Evaluate and manage Kubernetes security risks, misconfigurations, excessive privileges, exposed services, and vulnerable workloads. Cloud Infrastructure Security • Lead security architecture across AWS and/or Microsoft Azure, including cloud-native and hybrid environments. • Define secure cloud landing zones, identity and access management, network segmentation, encryption, logging, and key management. • Implement preventive and detective security controls using cloud-native security services and centralized policy enforcement. • Drive cloud security posture management and remediation using CSPM, CNAPP, and related technologies. • Ensure alignment with organizational security requirements and relevant industry standards. Secure Development and DevSecOps • Integrate security throughout the Software Development Life Cycle (SDLC), from design and coding to deployment and production operations. • Partner with R&D, DevOps, and Platform Engineering teams to embed security into CI/CD pipelines. • Define and implement automated security controls, including SAST, DAST, Software Composition Analysis (SCA), secrets detection, and container image scanning. • Establish secure coding standards, threat modeling practices, API security requirements, and secure software supply chain controls. • Promote developer-friendly security tooling and reusable security patterns that minimize friction and accelerate delivery. • Drive remediation of vulnerabilities and architectural weaknesses in collaboration with engineering teams. Security Engineering and Risk Management • Develop technical security standards, architecture patterns, and security control baselines. • Conduct threat modeling, attack-path analysis, architecture risk assessments, and security design reviews. • Define security requirements for identity, access, data protection, network security, workload isolation, and observability. • Collaborate with Security Operations to improve security telemetry, detection capabilities, and incident readiness. • Evaluate emerging security technologies and recommend solutions based on risk reduction, operational effectiveness, and architectural fit. • Track security findings and drive measurable improvements in the organization’s security posture. Team Leadership and Collaboration • Lead, mentor, and develop a team of cybersecurity architects and security engineers. • Define team strategy, technical priorities, delivery plans, and measurable performance indicators. • Build effective partnerships with Cloud Engineering, DevOps, R&D, Platform Engineering, and other technology stakeholders. • Communicate complex architectural risks and technical trade-offs to senior management and engineering leadership. • Foster a culture of engineering excellence, automation, accountability, and continuous improvement. We expect you to have: • 7+ years of experience in cybersecurity, security engineering, cloud security, or security architecture. • 3+ years of experience managing technical teams or leading senior technical professionals. • Strong practical knowledge of Kubernetes architecture and container security in production environments. • Demonstrated experience securing cloud-native workloads and distributed systems. • Strong expertise in AWS and/or Microsoft Azure security architecture. • Hands-on understanding of Kubernetes RBAC, network policies, admission controllers, workload security, secrets management, and container runtime security. • Experience with Docker or other container technologies, Kubernetes deployment workflows, and container registries. • Strong understanding of cloud networking, IAM, encryption, key management, logging, and workload protection. • Practical experience with Infrastructure as Code and automated security controls. • Experience securing CI/CD pipelines and integrating security into software development processes. • Knowledge of threat modeling, vulnerability management, security architecture reviews, and risk assessment methodologies. • Proven ability to influence engineering teams and translate security requirements into scalable technical solutions. • Excellent communication skills in English. Key Success Metrics • Improved security posture and reduced attack surface across Kubernetes and cloud environments. • Reduction in critical misconfigurations, excessive privileges, and recurring architectural vulnerabilities. • Increased adoption of secure-by-design architecture patterns across engineering teams. • Improved security coverage and automation across CI/CD pipelines and infrastructure provisioning. • Reduced time to remediate critical security findings. • Consistent implementation of Kubernetes and cloud security baselines. • Improved collaboration between cybersecurity, cloud infrastructure, platform, and development teams. • Development of a high-performing cybersecurity architecture team. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role Nebius is looking for an experienced Security Architect to join the Cyber Security organization, reporting to the Security Architect Manager. This role focuses on designing and implementing secure architectures across corporate networks and cloud environments. You will play a key role in defining secure solutions, reviewing system designs, and ensuring security is embedded across enterprise infrastructure. The ideal candidate brings strong hands-on expertise in network and cloud security, along with the ability to work closely with IT, Infrastructure, DevOps, and Engineering teams to drive secure and scalable implementations. You’re welcome to work in our offices in Amsterdam. Your responsibilities will include: • Design and implement secure architectures across corporate networks, cloud platforms, and hybrid environments. • Define and maintain security standards, guidelines, and reference architectures aligned with organizational requirements. • Review and approve architecture and design of new systems, infrastructure, and network changes. • Design and support secure enterprise network architectures, including segmentation, Zero Trust, and remote access solutions. • Define and implement controls for firewalls, ZTNA, proxies, and network access control (NAC). • Design secure cloud architectures including IAM, networking, and workload protection. • Ensure proper implementation of cloud security controls such as segmentation, encryption, and monitoring. • Define and support identity and access management controls, including SSO, MFA, and privileged access. • Contribute to endpoint security architecture, including EDR/XDR and device hardening standards. • Identify security risks and architectural gaps and recommend mitigation strategies. • Participate in architecture reviews, risk assessments, and security design discussions. • Collaborate with SOC, Vulnerability Management, IT, and Engineering teams to improve overall security posture. • Support implementation of security architecture initiatives and improvements across the organization. We expect you to have: • 5+ years of experience in cyber security, with a focus on cloud security, networks, and/or SDLC • Experience working with cloud platforms (AWS, GCP, Azure) and cloud security best practices. • Strong hands-on experience in enterprise network security (firewalls, segmentation, VPN, proxies, NAC, etc.). • Solid understanding of identity and access management (IAM), Active Directory / Entra ID, and access control models. • Experience working in hybrid environments (on-premise + cloud). • Strong understanding of security architecture principles and risk-based design. • Experience working cross-functionally with IT, Infrastructure, DevOps, and Engineering teams. • Strong analytical and problem-solving skills. It will be an added bonus if you have: • Experience with Zero Trust architecture and network segmentation strategies. • Familiarity with cloud security tools (e.g., Wiz). • Experience with enterprise identity platforms (Entra ID / Azure AD, Okta, etc.). • Knowledge of regulatory and compliance frameworks (ISO 27001, SOC 2, NIST, etc.). • Experience in SaaS, cloud-native, or enterprise-scale environments. • Relevant certifications such as CISSP, CCSP, or equivalent. • BSc in Computer Science, Information Security, or a related field. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.