Security Engineer jobs in Herzliya

Overview We’re looking for an experienced and driven Senior Security Engineer to join our STORM security research group and help shape the security posture of Microsoft Specialized Cloud systems from the ground up. As part of our mission to embed security throughout the development lifecycle, you’ll lead security design reviews, threat modeling, and architectural security assessments across a wide range of technologies, from OS internals and virtualization to cloud platforms, containerized environments, application security, and AI-enabled systems. This role combines deep security engineering and architecture expertise with a forward-looking approach to AI-assisted security engineering. You’ll be expected to reason deeply about complex systems and review designs hands-on, while also using and building AI-powered capabilities that make security analysis more effective, scalable, and repeatable. This is a high-impact role for security engineers who thrive on technical depth, enjoy building, and want to influence secure design at scale. Responsibilities 🔍 What You’ll Do • Lead security design and architecture reviews and structured threat modeling engagements for complex systems. • Analyze systems and architectures to identify trust-boundary violations, architectural vulnerabilities, unsafe assumptions, and opportunities for security-driven redesign. • Partner closely with engineering and security teams to influence architecture early in the product lifecycle and guide teams toward secure design patterns. • Perform security analysis using a combination of deep manual investigation and AI-augmented workflows, applying engineering judgment to validate findings and challenge assumptions. • Design, prototype, and build AI-assisted security capabilities that augment design review, threat modeling, architecture analysis, vulnerability discovery, and other security engineering workflows. • Experiment with new approaches for combining security expertise, automation, and AI to improve the scale, depth, and consistency of security reviews. • Communicate security findings, design tradeoffs, and recommended mitigations clearly to both technical and non-technical stakeholders. • Drive security hardening and security-driven redesign efforts that address systemic weaknesses rather than individual vulnerabilities. • Help evolve our security engineering methodology, tooling, and practices as AI changes how both products and security analysis are built. Qualifications • Strong experience in security engineering, security architecture, or related technical security roles. • Deep technical knowledge in one or more of the following areas: • Operating system internals, including Windows/Linux, memory management, boot security, or platform security. • Virtualization, confidential computing, cloud architecture, or container security. • Containerized environments incl. Kubernetes and AKS • Application security and secure software development across services, APIs, and distributed systems. • Cloud-native security, including identity, secrets management, isolation, and service-to-service trust. • Experience building with modern AI technologies to solve real engineering or security problems and designing workflows where AI augments expert analysis 🌟 Preferred Qualifications • Expertise in structured threat modeling, architectural risk analysis, and reasoning about complex systems and trust boundaries. • Ability to prototype and build tools rather than only consume existing security tooling. • Experience integrating LLMs or AI agents with existing engineering workflows, tools, data sources, or analysis pipelines. • Experience applying AI to security problems such as threat modeling, design analysis, code analysis, vulnerability discovery, or security automation. • Understanding of security challenges introduced by AI-enabled systems and the ability to threat-model systems incorporating AI components. • Experience with scalable security analysis techniques, including static analysis, dynamic analysis, code analysis, or custom security automation. • Prior expertise and experience with Azure-based solutions and services • Strong understanding of secure coding and code review principles. 🤝 Leadership & Collaboration • Strong sense of ownership and responsibility. • Excellent communication skills, with the ability to articulate complex security issues and design tradeoffs clearly and persuasively. • Proven ability to lead cross-functional technical engagements and influence engineering teams without direct authority. • Analytical and curious mindset with a strong drive to understand how systems actually work. • Comfortable navigating ambiguity and working on problems where neither the security answer nor the engineering solution is predetermined. • Builder mindset: willing to experiment, prototype, iterate, and turn promising ideas into capabilities that other security engineers can use. 📈 Experience & Impact • 6+ years of experience in security engineering, architecture, software engineering, or related roles. • Demonstrated success leading security design reviews, threat modeling, or architectural security assessments for complex systems. • Track record of identifying and helping mitigate significant architectural or system-level security weaknesses. • Experience influencing engineering decisions and driving security improvements across organizational boundaries. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description Power the Future with us! At SolarEdge (NASDAQ: SEDG), we're a global leader in smart energy technology, with over 3,000 employees, offices in 34 countries, and millions of installations worldwide. Our innovative solutions include solar inverters, battery storage, backup systems, EV charging, and AI-based energy management. We're committed to making clean, green energy the primary power source for homes, businesses, and beyond. With the growing demand for electricity, the need for smart, clean energy sources is constantly rising. SolarEdge offers amazing opportunities to develop your skills in a multidisciplinary environment, covering everything from research and development to production and customer supply. Work with talented colleagues, tackle exciting challenges, and help create a sustainable future in an industry that's always evolving and innovating. Join us and be part of a company that values creativity, agility, and impactful work. We are looking for a Senior Network & Information Security Engineer to design, secure, and operate our network infrastructure. You will combine hands-on technical depth with strategic thinking to build scalable, secure architectures that support business goals, and you will lead projects end to end. Key Responsibilities • Lead network and security projects from initiation to delivery, meeting timelines and quality standards. • Design and implement secure, scalable network architectures aligned with organizational goals. • Lead security hardening initiatives across all infrastructure layers. • Work closely with the InfoSec, IT, and Cloud/DevOps teams to ensure strong integration. • Drive improvements to processes and best practices in incident management and change control. • Produce clear architecture documentation and visual diagrams. Requirements • 5+ years of experience in networking and information security. • Proven experience leading and managing projects, tasks, and cross-team activities. • Deep knowledge of networking protocols and secure routing (BGP, OSPF, etc.). • Hands-on expertise in: • Switching, routing, and wireless: Cisco and Meraki (Arista is an advantage) • Firewalls (Fortinet), VPN, IPS/UTM • Network segmentation and Zero Trust architectures • NAC (Network Access Control) • SASE solutions (Cato / Zscaler) • Infrastructure-level security hardening • Ability to create clear, professional architecture diagrams. • Excellent communication skills in English and Hebrew. Advantages • F5 load balancers and application security • Arista experience • Cloud networking and security (AWS / Azure) • Network automation (Python, Ansible, Terraform) • Relevant certifications, such as CCNP/CCIE, Fortinet NSE, CISSP, or CISM

Description Papaya Global is a rapidly growing, award-winning B2B tech unicorn with an ambitious mission to revolutionize the payroll & payments industry. With over $400M raised from multiple tier-one investors, our innovative technology provides a comprehensive solution for managing global workforces, encompassing everything from hiring and onboarding to managing and paying employees in over 160 countries. About the job We are looking for a SecOps Engineer to join our cybersecurity team. In this role, you will help defend the organization end-to-end across cloud, endpoints, identities, and applications while building and maturing our security operations capability. You will work across SIEM and telemetry, detection engineering, alert investigation, threat hunting, digital forensics and incident response, threat intelligence, and response automation. You will partner closely with IT, DevOps, Application Security, R&D, and business stakeholders to turn security signals into effective action and lasting improvements. This is a hands-on role for someone who enjoys investigating complex problems, improving controls, and building repeatable security operations in a growing environment. The role may participate in an on-call rotation and occasional after-hours incident response as required. Responsibilities • Operate and improve the security operations stack — SIEM, identity, endpoint, cloud, and application telemetry — including log source onboarding, health monitoring, and coverage-gap remediation. • Investigate security alerts and threats through triage, host and artifact analysis, DFIR, and threat hunting. • Lead incident response from detection through containment, recovery, and post-incident review. • Build and tune detection rules, SIEM queries, and dashboards for high-risk attack paths, and convert threat intelligence into new detections, hunts, and control improvements. • Automate response and enrichment workflows by using AI tools, scripting (Python, Bash, PowerShell), or SOAR tools to cut response time, and report incident metrics — root cause, impact, and remediation status. • Support security reviews of vendors, SaaS platforms, and internal applications, and partner with engineering to validate whether existing controls detect and mitigate relevant threats. • Support security monitoring and response for AI-enabled workflows and artifacts where applicable, including agentic tooling, integrations, and related operational risks. • Use AI-assisted triage and anomaly-detection models to prioritize alerts and cut time-to-detect across SIEM and endpoint telemetry. • Develop agentic workflows to speed up evidence correlation, RCA, timeline reconstruction, and case write-ups during investigations. • Evaluate AI agentic investigation tools for accuracy and performance and use the results to fine-tune and further enhance the automated playbooks. Requirements • 3+ years of hands-on experience in security operations, incident response, detection engineering, or a similar cybersecurity role. • Strong practical experience with IT security, endpoint protection, identity security, and security operations. • Hands-on experience with SIEM platforms, including alert triage, investigation, query development, dashboards, and detection tuning. • Solid understanding of cloud security and practical experience with one or more major cloud platforms, including identity, logging, network, and workload security concepts. • Experience with incident response and DFIR workflows, including host-based and artifact analysis on Windows, Linux and macOS. • Proficiency in Python, Bash, PowerShell, or similar scripting languages for automation and operational tooling. • Familiarity with SOAR platforms, automated playbooks, alert enrichment, and response workflows. • Strong written and verbal communication skills, with the ability to collaborate across DevOps, IT, R&D, security, and business teams. • Ability and willingness to participate in occasional after-hours response when required by a material security incident. • Strong familiarity with AI tools and experience putting them to work in security investigations. Nice to have • Experience building detections and incident-response capability in a growing or cloud-native organization. • Experience with threat hunting, malware analysis, host forensics, and mapping activity to common adversary tactics, techniques, and procedures. • Experience with containerized or cloud-native architectures, identity providers, and modern endpoint security platforms.

AppsFlyer’s Security team is looking for a highly skilled and security-savvy Application Security Engineer to lead our product and application security efforts. In this role, you will drive security design, ensure secure coding practices, and validate our services and environments against the highest security standards. You will work closely with our R&D and Product teams to identify, mitigate, and prevent security risks throughout the software development lifecycle (SDLC). You will own security initiatives, mentor developers on security best practices, and play a key role in shaping the security posture of AppsFlyer’s products. The ideal candidate is highly motivated, eager to learn, and has a “security by design” mindset. This role provides career growth opportunities, enabling you to deepen your expertise in AppSec, DevSecOps, and cloud security. What you'll do: • Partner with development and product teams to integrate security best practices into the SDLC • Lead threat modeling and architecture security reviews to proactively identify and mitigate risks • Conduct security assessments, including code reviews, vulnerability scans, penetration testing, and secure product design reviews • Stay up to date with emerging security threats, vulnerabilities, and industry trends, ensuring AppsFlyer remains ahead of evolving risks. • Support and contribute to security incident response activities, including root cause analysis and post-incident improvements • Automate security processes and integrate security tools within CI/CD pipelines • Develop and deliver secure coding training to engineering teams What you have: • 3+ years of experience in Application Security, Penetration Testing, or Product Security in a SaaS company • Deep understanding and hands-on experience of web application security, including OWASP Top 10, authentication, encryption, and secure coding principles • Proficiency in scripting or programming languages (Terraform, Python, JavaScript, Go, etc.) for security automation and infrastructure. • Experience with cloud security best practices (AWS, GCP, or Azure) • Strong communication skills, with the ability to explain security risks and recommendations to technical and non-technical stakeholders, including executive management • Experience working with large-scale, complex R&D environments Bonus Points: • Hands-on experience with DevSecOps and integrating security tools into CI/CD pipelines • Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience) • Being introduced by an AppsFlyer team member As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners. “As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In.” Oren Kaniel, CEO

About Payoneer Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories. By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence. Role summary We are seeking an Application Security Engineer to join our Cyber Team in Payoneer. As an Application Security Engineer, you will be responsible for overall Application Security standards, guidelines, and requirements for different groups in Payoneer. Your expertise in secure architecture, design, and SSDLC will play a crucial role in ensuring the security of our products and the protection of our sensitive financial data. This is a strategic position that offers an opportunity to shape and drive the security initiatives of our cutting-edge fintech solutions. Glilot Hybrid Full-time What you’ll do: • Review and approve secure architecture designs for new features and use-cases for Payoneer customers, partners, integrators or in-house solutions, considering best practices, regulatory requirements and business objectives, as well as many AI initiatives and use-cases. • Collaborate with cross-functional teams (mainly R&D and DevOps/DevSecOps) to define security requirements and design robust security controls for systems, both on-prem and in the cloud. • Define CI/CD processes and gates, such as SAST, SCA, Secret scanning and image/containers scanning during CI and Runtime. • Provide technical guidance and expertise to internal teams in selecting and integrating in-house solutions or third-party vendors. • Stay up-to-date with the latest security technologies, threats, and trends, and provide recommendations for continuous improvement. • Serve as a subject matter expert on application security, providing guidance and mentorship to other teams in the company. • Optimizing AppSec processes and workflows through AI-powered tooling and automation. • Assist in creating or researching for security solutions – solving security challenges, both on-prem, in the cloud and in the AI domain. Who you are: • 4+ years of experience in cybersecurity, including at least 2 years of experience in Application Security \ Product Security. • In-depth understanding of CI/CD workflows and methodology (Azure DevOps and Github is an advantage). • Familiarity with AI/agentic architectures and the MCP, with hands-on experience building custom skills and agents for security use cases. • Excellent communication and collaboration skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders. • Multi-task skills: ability to work on multiple projects in parallel, providing application security support for different teams and initiatives in the company. Advantages: • Bachelor's degree in Computer Science, Information Security, or a related field. • Experience/familiarity (hands-on) with security tools integrated into our CI/CD and production environments such as SonarQube, Snyk, Wiz and others. • Strong knowledge with AWS, Azure and GCP as well as their associated security services and features. • Strong knowledge and experience with Kubernetes platform and services. • knowledge with Microsoft enterprise ecosystem, including Active Directory/Azure Entra ID, Office 365 APIs, Azure Cloud services. • Familiarity with GitHub and GitHub Actions, including experience working with CI/CD pipelines and source code management workflows. • Ability to read and review code, particularly in .NET, Node.js, and Python. • Additional skills related to Secure Software Development Lifecycle (SSDLC) and Application Security (AppSec) further enhance the candidate's value. These skills may include risk assessments, threat modeling, vulnerability assessments or penetration testing. • Experience in fintech or financial services industry. • Familiarity with regulatory requirements and compliance standards in the financial industry, such as PCI DSS, PSD2 and GDPR. #LI-AG2 The Payoneer Ways of Working Act as our customer’s partner on the inside Learning what they need and creating what will help them go further. Do it. Own it. Being fearlessly accountable in everything we do. Continuously improve Always striving for a higher standard than our last. Build each other up Helping each other grow, as professionals and people. If this sounds like a business, a community, and a mission you want to be part of, apply today. We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.