Security Engineer jobs in Jerusalem

Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. . The Role This role focuses on ensuring the security and compliance of cloud infrastructure by implementing and maintaining robust security controls across AWS environments. The position involves automation for security monitoring, adhering to best practices, and collaborating cross-functionally with other teams. Who You Are A strong individual contributor who takes pride in delivering high-quality security outcomes while collaborating closely with peers and stakeholders. You are able to build trust, provide thoughtful input, and continuously grow your technical and operational expertise. You are passionate about exploring new technology and using it to make an actionable impact to the future of fintech. You can balance the needs of the business and the team's goals with strong value for code quality and adherence to implementing best practices. A highly skilled AWS Security Engineer with additional FinOps expertise to ensure the security and compliance of our cloud infrastructure. You are able to implement and maintain robust security controls across AWS environment. You are passionate about best practices, automation for security monitoring, and collaborating with other teams. What You’ll Actually Be Doing • Cloud Security Implementation: Contribute to the design and implementation of security measures across AWS environments to ensure systems are secure, compliant, and aligned with industry best practices. Including implementation, automation and development of security policies • Conduct regular security assessments, control testing, and audits to proactively identify risks and vulnerabilities (and support remediation efforts with partner teams) • Collaboration with Internal Teams: Work closely with internal teams to integrate security best practices into development and operational workflows • Security Automation & Infrastructure Management: Design and implement automation strategies for security monitoring, auditing, and incident response • Cost Efficiency through Security: Contribute to cloud cost management by optimizing cloud resources without compromising on security. • Incident Response & Threat Management: Participate in incident response efforts to support timely identification, analysis, containment, and remediation of security threats. Contribute to post-incident reviews, help maintain incident response playbooks, and support internal teams by sharing learnings and updated procedures. Requirements What You Bring to the Table • Proficiency in Hebrew and English language with excellent written and verbal communication skills • AWS Certified Security Specialty - plus • AWS Certified Solutions Architect - Professional - plus • Experience with Azure cloud security, including relevant certification (Azure AZ-104 Administrator) • In-depth knowledge of AWS security services (e.g., IAM, GuardDuty, CloudTrail, VPC security) • Expertise in cloud security architecture, including identity and access management, encryption, network security, and application security. • Strong skills in Linux, Bash, Terraform, Jenkins, Containers/Docker, and programming languages such as Python and JavaScript • Experience in security automation and incident response in cloud environments • Experience with endpoint security, including endpoint management and investigation tools, supporting endpoint-based investigations and response, working with XDR and DLP technologies and workflows (alert triage, investigation, containment, and remediation), and familiarity with the Microsoft security ecosystem (e.g., Microsoft Defender, Intune, Sentinel, Purview). A plus if you have • AWS Certified Solutions Architect – Associate • Experience working in a collaborative environment with cross-functional teams, embedding security into development, operations, and infrastructure workflows • Familiarity with FinOps practices, with the ability to balance security measures with cost-efficient strategies Why You’ll Love Working Here • Flexible hybrid work model: three days a week at our Jerusalem office • Monthly wellness reimbursement – from therapy to gel manicure, it's up to you • Full Keren Hishtalmut, private health and dental insurance • Volunteer days, donation matching, Yoga and Pilates • A supportive, collaborative culture that puts our people first Next Step Hit Apply! Privacy Notice: Cross River https://www.crossriver.com/legal/privacy-policy-crt

Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. . The Role As AI capabilities accelerate across the bank, we need an engineer to design and enforce safe AI usage—protecting customer data, preserving model integrity, and meeting our regulatory obligations. You'll be the architect of guardrails, tooling, and policies that make AI both secure and useful for product and internal teams. This isn't about slowing things down; it's about building the trust layer that lets innovation move fast without breaking things. Who You Are You're a security engineer who's excited about the AI wave—someone who sees LLMs and Agentic AI as fascinating puzzles to secure, not just threats to mitigate. You've spent 5+ years in Security Engineering, AppSec, or Cloud Security, and at least 1–2 of those years have been spent getting your hands dirty with LLMs, AI Agents and MCPs. You understand how agentic frameworks (LangGraph, CrewAI, AutoGen, and similar) orchestrate multi-step tool use—and where trust boundaries break down. You've assessed or secured AI-powered coding agents (Claude Code, GitHub Copilot, Cursor) and understand the unique risks of AI with filesystem, terminal, and API access in developer environments. You're equally comfortable dissecting a prompt injection attack as you are writing a Terraform module or shipping a Python library. You know your way around AWS and/or Azure, modern app stacks (Python/TypeScript, REST/gRPC, containers/Kubernetes), and can translate security requirements into developer-friendly tooling—not just PDF policies that gather dust. You communicate clearly in English and Hebrew, thrive in regulated environments, and understand that security in financial services means mapping controls to frameworks like FFIEC, SOC 2, and PCI DSS—and actually having the evidence to prove it. What You’ll Actually Be Doing • Design enterprise AI guardrails across Azure and AWS (e.g., Azure AI Studio/Azure OpenAI, Amazon Bedrock/SageMaker): content filtering, PII redaction, prompt/response validation, and policy enforcement services. • Assess and define secure usage patterns and data governance controls for agentic frameworks and coding agents: permission scoping, tool-call authorization, least‐privileged retrieval, session isolation, and MCP server governance. • Threat model AI systems (apps, agents, MCPs, RAG, fine-tuning pipelines) using frameworks like STRIDE and the OWASP Top 10 for LLM Apps; define misuse scenarios (prompt injection/context poisoning/jailbreaks/data exfiltration) and build mitigations. • Build monitoring and telemetry: privacy-preserving prompt/response logging, sensitive-data detection, safety/eval dashboards, drift/abuse signals, and incident hooks into our SIEM. • Integrate AI security into the SDLC: reusable libraries, pre-commit checks, CI/CD gates, policy-as-code, and secure-by-default reference architectures for product teams. • Evaluate third‑party AI vendors and internal apps: security reviews, data residency and retention requirements, SSO/SCIM integrations, DPA/TPRM inputs, and continuous control testing. • Partner across Security, Data, Privacy, and Engineering to map AI controls to FFIEC, SOC 2, and PCI DSS; document control evidence for audits. • Lead/participate in AI red‑teaming: automated jailbreak/prompt‑injection tests, safety benchmarks, purple‑team exercises, and response playbooks for AI incidents. • Enable the org with concise guidelines, examples, and training on safe AI development and usage. Requirements What You Bring to the Table • 5+ years in Security Engineering/AppSec/Cloud Security (or similar), including 1–2+ years securing AI/ML or data‑intensive systems (GenAI preferred). • Hands‑on experience with AWS and/or Azure and modern app stacks (Python/TypeScript, REST/gRPC, containers/Kubernetes, IaC such as Terraform). • Practical understanding of LLM attack surfaces (prompt injection, context and goal poisoning, data leakage via tools, training/fine‑tune poisoning, model supply chain) and mitigation patterns. • Experience assessing agentic architectures (LangGraph, CrewAI, or similar) and AI coding assistants (Claude Code, GitHub Copilot) for secure enterprise deployment. • Familiarity with identity and access for AI workloads (OAuth2/OIDC, service principals, role tokens, PIM), and secure secret management/KMS. • Experience implementing observability/telemetry and routing findings to SIEM; comfort balancing privacy with traceability. • Ability to translate controls into developer-friendly libraries, docs, and CI/CD checks. • Comfort working in a regulated environment and mapping controls to frameworks (FFIEC, SOC 2, PCI DSS). • Strong written communication in English and Hebrew. Nice to have • Financial services background or other high‑assurance domains. • Exposure to Duende IdentityServer, SSO/SCIM, and enterprise authorization patterns. • Familiarity with guardrail tooling (e.g., Azure AI Safety features, Amazon Bedrock Guardrails) and policy engines (OPA/Rego). • Prior work in AI red‑teaming or safety evaluation harnesses; contributions to OSS or published talks. Why You’ll Love Working Here • Flexible hybrid work model: three days a week at our Jerusalem office • Monthly wellness reimbursement – from therapy to gel manicure, it's up to you • Full Keren Hishtalmut, private health and dental insurance • Volunteer days, donation matching, Yoga and Pilates • A supportive, collaborative culture that puts our people first Next Step Hit Apply!

Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. The Role We’re seeking a Senior Application Security Engineer who is first and foremost a teacher, advisor, and enabler for our development teams. Rather than owning security alone, you’ll embed secure-by-design thinking across engineering by mentoring developers, guiding architecture decisions, and making secure development intuitive and frictionless. You’ll serve as the go-to partner for developers and engineering leaders, offering clear direction, practical solutions, and hands-on mentorship that strengthens our secure SDLC. Who You Are • A proactive self-starter with deep expertise in application and cloud security • Passionate about secure development and enabling engineers through thoughtful guardrails • Clear and confident communicator who can influence across technical and non-technical teams • Curious about emerging threats and excited by the challenges of blockchain security • Committed to excellence, with a strong sense of ownership and a drive to build secure systems that scale What You’ll Actually Be Doing • Mentor, coach, and educate developers on secure coding through workshops, training sessions, pair reviews, and ongoing guidance • Lead and scale a Security Champions program embedded within engineering teams • Facilitate threat modeling sessions and design reviews, partnering with teams early in the process to improve security outcomes • Collaborate with engineering leadership to ensure secure architecture patterns, API security practices, and design principles are built in from day one • Integrate and tune developer-friendly AppSec guardrails into CI/CD pipelines (SAST, SCA, IaC, secret scanning) while minimizing noise for developers • Translate vulnerabilities into clear, actionable remediation guidance that developers can easily implement • Support security awareness across engineering by building engaging internal content, best-practice playbooks, and reusable patterns • Partner with compliance teams to produce documentation and SDLC evidence supporting FFIEC, PCI DSS, and SOC 2 requirements • Stay current on emerging threats, developer tooling, and secure engineering patterns — sharing insights regularly with the team Requirements What You Bring to the Table • Native level fluency in English and Hebrew (written and verbal) - Must • 7+ years in software security engineering, including 4-5 years in AppSec of secure development enablement roles • Strong coding ability in one or more modern languages (JavaScript/TypeScript, Python, Go, Java, C#) • Proven experience teaching, mentoring, or enabling developers through training, code reviews, threat modeling, internal talks, or champion programs • Deep understanding of secure coding principles, common vulnerability classes, API security, and secure design techniques • Hands-on Experience with AppSec tooling (SAST, SCA, IaC scanners, secret scanning) and integrating them into the developer workflows • Experience with cloud native architectures and security in AWS or Azure • Familiarity with compliance and security frameworks (PCI DSS, SOC 2, FEIEC, NIST, OWASP, ASVS) • Excellent communication and storytelling skills - able to break down complex issues into simple, practical guidance • A collaborative mindset and passion for building a positive, empowering security culture Why You’ll Love Working Here • Flexible hybrid model: 3 days a week in the office • ₪1,000 net monthly wellness benefit – from therapy to Pilates to your kid’s art class • Full Keren Hishtalmut, private health & dental insurance • Donation matching, volunteering days, team outings, and mentorship programs • A mission-driven culture that values ownership, trust, and meaningful impact Next Step Hit Apply!

Mobileye is looking for an Senior Information Security Engineer who will be part of the InfoSec team. The InfoSec team manages all security aspects such as inbound and outbound access, defense systems and protection in Israel and abroad. In this role, you will be responsible for all related security systems end to end, you will need a strong technical understanding as well as learn new content areas quickly. You will be part of the Information Technology department with a relationship with all the departments in the company and the CISO's team. This position requires on-site presence at our Jerusalem campus 3-4 days per week during the first three months. Following this period, a hybrid arrangement with some work from our central Israel sites may be possible. What will your job look like? • Manage Firewall. NAC, Proxy, Mail gateways, VPN and more • Configure and troubleshoot security devices, infrastructure and systems • Planning, researching and deploying security policies • Optimize current solutions and implement new solutions • Provide L2 support All you need is: • 5+ years of hands-on experience with relevant systems in security and cyber fields in large and dynamic environments. • Experience with firewall systems, including configuration, monitoring, troubleshooting, and implementation of network security policies. • Hands-on experience working with Windows and Linux environments. • B.Sc. in Computer Science / Information Systems / Security certifications (Security +, CISSP, ...) - advantage. • Strong teamwork and knowledge-sharing skills. Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!