Security Engineer jobs in Petah Tikva

Job Description Role This is a principal-level security architecture and strategy role with enterprise-wide scope. You will set security direction across ServiceNow’s products and platforms, define the controls and standards that teams build against, and serve as a technical authority on complex and emerging threats, including those introduced by AI and agentic systems. You’ll also drive the use of AI to strengthen security itself, applying it to detection, triage, and security analysis. You’ll partner with security research teams to turn their findings into requirements and roadmap priorities, and represent ServiceNow’s security posture externally and to executive leadership. We’re looking for a deep security or engineering expert; experience with AI security is a plus, not a prerequisite. What you'll do • Contribute to the security strategy and reference architecture across the company’s products and platforms • Lead threat modeling for complex and novel systems, including AI and agentic systems where established patterns don’t yet exist • Define platform-wide security standards, including access-control and data-boundary models that other teams build against • Establish what secure-by-design means for new technologies, including AI, and drive adoption across engineering organisations • Set methodology and priorities for red-teaming and security assessment programs • Apply AI to strengthen security work, such as detection, triage, vulnerability discovery, and design review • Make or approve security risk decisions for high-impact initiatives that cross organisational boundaries • Represent ServiceNow’s security posture to standards bodies, industry forums, and executive leadership • Develop senior security engineers and shape the team’s technical agenda Qualifications To succeed in this role, you’ll need: • To succeed in this role, you'll need • Bachelor's, Master's, or PhD in Computer Science or a related field, or an exceptional record of impact • Experience that meets one of the qualifying backgrounds below, including design reviews, threat modeling, and risk assessment at enterprise scale • A sustained record of setting security direction across multiple teams or product lines, with standards, controls, or architecture that others adopted as their baseline • Recognised depth in at least one core security discipline, such as application, cloud, identity, cryptography, or offensive security, with working breadth across the others • Expert fluency with threat modelling methodologies (e.g., STRIDE, attack trees) and security frameworks such as the OWASP Top 10, to the point of extending, critiquing, or contributing to them • A demonstrated ability to ramp quickly on new technology domains and reason about security where no established patterns exist • A track record of developing principal- and staff-level security leaders, and of shaping decisions with senior executives and engineering leaders • Clear, precise communication with executive audiences, and a record of influencing outcomes without direct authority Qualifying background (either path) • Security-led: 13+ years in security, with at least 3 years in principal-level roles owning architecture, risk, or threat modeling across the organization • Engineering-led: 13+ years of software engineering, including at least 3 years building or owning security-critical systems such as identity, authorization, data pipelines, distributed systems, or platform security, and a demonstrated move into security ownership at enterprise scale Bonus • Depth in AI security, including threat modeling or securing LLM, GenAI, or agentic systems • Experience with prompt injection and jailbreak defense, guardrail architecture, or AI red-teaming • Hands-on familiarity with agentic frameworks and protocols such as LangChain, LangGraph, MCP, and A2A • Experience designing identity and consent models for AI agents • Built security tooling for AI systems used beyond one team • CVEs, publications, or invited talks in security research, especially in AI or LLM security • Prior experience setting AI security strategy at a company or platform level Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .

Job Description ServiceNow’s Product Security organisation is building a dedicated Security R&D function — a software engineering team that builds security capabilities with the same engineering rigour as ServiceNow’s product organisation. We are looking for a Staff Security Engineer to be a core contributor on this team. Security R&D operates in two complementary modes: open contribution to product engineering — writing code alongside product teams where security expertise adds value — and developing its own security capabilities, including internal tooling, externally facing product features, AI-powered security automation, and third-party integrations. This is a new team being stood up in Petah Tikva, Israel, co-located with ServiceNow’s AI Security Research team. You will help shape the team’s engineering practices and technical foundation from day one. This role reports to the Sr. Engineering Manager, Security R&D. What You Will Do Build Security Capabilities • Design and develop security tooling, automation, and platform services that operate at ServiceNow’s enterprise scale. • Contribute code directly into ServiceNow product engineering codebases, embedding security capabilities where they have the highest impact. • Build AI-powered security automation by integrating in-house models and third-party services into production workflows. • Leverage ServiceNow’s platform — Agent Framework runtime, ACL enforcement, data layer, and workflow engine — to create security capabilities that external vendors cannot match. Collaborate Across Teams • Work closely with the AI Security Research team on tooling for AI agent security, translating research insights into production-grade engineering. • Partner with product engineering teams during open contribution engagements, earning trust through code quality, reliability, and delivery. • Participate in design reviews, code reviews, and architecture discussions, contributing to the team’s technical standards and engineering culture. Grow with the Team • Help define engineering best practices as a founding member of the Security R&D team. • Contribute to hiring and onboarding as the team scales, helping maintain the engineering bar. • Stay current on emerging AI/ML technologies and security threats, bringing new ideas into the team’s roadmap. What Makes This Role Unique • Builder-led culture: Security R&D is defined by engineering output, not advisory reviews. We build production security capabilities with the same discipline as product engineering. • Dual operating model: The team both contributes directly to product engineering and develops its own security products and services. • Platform advantage: ServiceNow owns the entire stack — runtime, ACLs, data layer, workflow engine. You will build security capabilities that no external vendor can replicate. • Founding team: This is a new team being built from scratch. You will shape its engineering culture, technical standards, and identity from day one. • AI intersection: The role sits alongside the AI Security Research team, placing you at the frontier of securing AI systems at enterprise scale. Qualifications To be successful in this role, you have: • 8+ years of professional software engineering experience building production systems at scale. • Bachelor’s degree in Computer Science, Engineering, or a related technical field. • Strong hands-on proficiency in Python and Java. You write production code daily and take pride in software craftsmanship. • Strong, hands-on experience and a solid understanding of AI/ML pipelines, LLM integration, and agentic frameworks, including their underlying architectures and workflows. • Solid foundation in distributed systems, cloud-native architectures, and building services that meet enterprise requirements for scalability, reliability, and performance. • Experience working in collaborative engineering environments, contributing to shared codebases with high code quality standards. • Interest in or exposure to security engineering concepts — application security, infrastructure security, identity systems, or trust & safety. A security mindset is valued; deep security expertise can be developed on the team. Preferred • Experience with security tooling development, SSDLC automation, or building security features into a product. • Familiarity with container/Kubernetes environments, cloud security, or infrastructure-as-code. • Experience in a SaaS or platform company building multi-tenant enterprise software. • Experience working in a globally distributed engineering team. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .

Job Description ServiceNow seeks a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is ServiceNow's awareness, response, and investigation capability for post-release vulnerabilities in ServiceNow-developed products and service offerings. This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform—vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events. This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them—and will use that fluency to lead fixes to completion under incident pressure. You will help shape how ServiceNow responds to product security vulnerabilities at scale and the technical rigour of the entire response capability. The coverage provided by this role is: • Sunday: 10:00 - 18:00 UTC. • Monday: 08:00 - 16:00 UTC. • Tuesday: 08:00 - 16:00 UTC. • Wednesday: 08:00 - 16:00 UTC. • Thursday: 08:00 - 16:00 UTC. Due to the nature of incident response and the needs of the business, coverage may change. Additional coverage outside of stated hours may be required in response to significant incidents. Key Responsibilities Lead Through Significant Security Events • Demonstrate technical and organisational leadership during these events—bringing structure and clear decision-making under pressure. • Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events. Reduce Exposure Window • Drive coordinated response across affected releases, balancing risk and remediation feasibility. • Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organisational boundaries. • Verify fix completeness and guard against incomplete mitigations before release. Drive the CVE & Coordinated Disclosure Process • Collaborate with external security partners, vendors, and researchers on coordinated disclosures, aligning timelines and messaging across parties. • Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication. • Represent PSIRT's technical position in multi-party coordinated disclosures and researcher engagements. Pursue After-Action Outcomes & Continuous Improvement • Author postmortems and drive lessons learned to closure following product security incidents. • Participate in retrospectives following significant product security events, translating findings into concrete process and technical improvements. • Contribute to partner teams tracking product security risk themes and trends across the portfolio. • Contribute to SDLC improvement areas, feeding incident learnings upstream into secure development practices. Qualifications To be successful in this role, you have: Qualifications • Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience; or equivalent experience. • Minimum of 5 years of auditing source code for security vulnerabilities. • Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call. • Ability to read and comprehend Java and JavaScript code. • Strong understanding of common Java and JavaScript vulnerabilities. • Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualisation. • Development of proof-of-concept exploits for web application vulnerabilities. • Written and verbal communication of complex security risks clearly to both technical teams and leadership. • Experience with leading fix implementation and release coordination across engineering, product, and test/release teams. • Proficiency in deep-dive product security investigations and root-cause analysis spanning design, code, configuration, and operational layers. • Exploit analysis and proof-of-concept development that distinguishes real exploitability from theoretical risk. • Familiarity with SDLC integration, CI/CD pipelines, SaaS threat models, and secure development practices. • Experience leading a CVE disclosure process, including CVE assignment, scoring (CVSS), and advisory publication. Preferred Qualifications • Experience in a PSIRT or similar function for a major software or SaaS platform. • Recognized expertise in product security incident response, vulnerability research, or application security within a software or SaaS environment. • Experience conducting vulnerability assessments on the ServiceNow platform. • Experience with emerging threats: AI-specific attack vectors, software supply chain security, and SDLC tooling security. • Experience with cloud infrastructure (AWS, Azure, GCP) and containerized environments. • Relevant security certifications (e.g., OSWE) or demonstrated equivalent expertise. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.  Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Job Details: Job Description: Join us to help build the next generation of AI hardware solutions. You will be part of a team developing cutting-edge HW for the AI domain, where we push the boundaries of what silicon can do for emerging AI workloads. We are continuously developing modern and effective working methods, including hands-on adoption of AI tools throughout the chip development flow. The environment is fast-paced and intellectually stimulating. Your Mission: Integrate hardware security IP into the SoC/die and define the HW security architecture protecting a large-scale data center's compute, network, and control infrastructure. Responsibilities: • Integrate third-party and internal HW security IP (Root of Trust, crypto engines, HSMs, TRNG, key vaults) into the die; write and own the RTL/integration code wiring these units into the SoC. • Author RTL for security units, glue logic, fuse/OTP interfaces, and bus/fabric (AXI/AHB/NoC) connections; manage clock/reset/power domains and CDC. • Develop integration test benches, run lint/CDC/synthesis-readiness checks, and support DV/verification of the embedded security IP. • Architect platform Root of Trust, secure boot, attestation, and confidential computing (TDX/SGX/SEV-equivalent) across the server fleet. • Threat-model the full stack (silicon, firmware, BMC, supply chain) and define HW mitigations against physical and side-channel attacks. • Drive secure key management, debug-lockdown, fuse provisioning, and crypto offload for tenant isolation at scale. • Collaborate closely with architecture, design verification, physical design, firmware, and platform teams throughout the development cycle. Qualifications: • B.Sc., M.Sc., or Ph.D. in Electrical Engineering, Computer Engineering, Computer Science, or a related field. • 5+ years of experience in RTL development, SoC design, or hardware security integration. • Proficient in Verilog/SystemVerilog RTL, IP integration, bus protocols (AXI/AHB/NoC); lint, CDC, synthesis, DV flows. • Expertise in roots of trust, TEEs, secure boot/firmware, crypto IP, side-channel mitigations. • Plus: fuse/OTP provisioning, supply-chain security, multi-tenant cloud isolation. Job Type: Experienced Hire Shift: Shift 1 (Israel) Primary Location: Israel, Haifa Additional Locations: Israel, Petah-Tikva Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Position of Trust N/A Work Model for this Role This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. * Job posting details (such as work model, location or time type) are subject to change. *

Description Role Overview: As the SecOps Security Engineer at Cellebrite, you will be part of a team of security professionals responsible for defining and executing our security operations strategy, driving initiatives to enhance our overall security posture. You will identify security issues and risks, develop mitigation plans, and implement security-focused tools and services. You will also be responsible for developing and interpreting security policies and procedures, delivering training materials, and evaluating and recommending new and emerging security products and technologies. Additionally, you will participate in tier 3 security operations support and incident handling. Responsibilities: • Design, implement, and maintain security tools and controls across endpoint, identity, cloud, and network layers. • Identify security gaps and risks across the environment and develop and execute mitigation plans. • Manage and tune security platforms including EDR/EPP, PAM/EPM, NAC, VPN, web Proxy, and identity providers (Okta, Entra ID). • Administer and optimize Palo Alto firewall and Prisma Access (and Strata Cloud Manager, where applicable) policies and egress controls. • Monitor cloud environments for misconfigurations and risk using CSPM/DSPM tooling (e.g., Wiz), across AWS and other cloud providers. • Develop, document, and maintain security policies, procedures, and standards, and deliver related training materials to stakeholders. • Provide tier 3 security operations support, including advanced troubleshooting and incident handling/response. • Apply the MITRE ATT&CK framework to map threats, build detection logic, and inform mitigation strategies. • Evaluate and recommend new and emerging security products and technologies to strengthen the organization's security posture. • Conduct proof-of-concept (POC) evaluations on various security products, leading each POC end to end from scoping through evaluation and recommendation. • Leverage AI-powered tools and automation (e.g., Claude Code, LLM-based workflows) to improve efficiency in security operations, while applying MCP and AI guardrail principles to ensure secure, governed use of AI tooling. • Write and maintain scripts (Python, Bash, Batch) to automate security operations, reporting, and remediation tasks. • Collaborate cross-functionally with IT, R&D, and compliance teams to align security initiatives with business needs. • Mentor other team members as needed, sharing knowledge and best practices to strengthen overall team capability. Requirements • At least 5 years hands-on experience deploying, managing, and supporting security infrastructure in a highly available 24x7 environment from a global company. • Experience with different security solutions including web Proxy, Okta, Entra ID, EDR/EPP, NAC, VPN, EPS, PAM/EPM, PKI, etc. • Proven knowledge of Palo Alto firewalls and Prisma Access; knowledge of Strata Cloud Manager (SCM) is an added value. • Experience providing security solutions within complex environments (physical, virtual, SaaS, and IaaS). • Experience with cloud security across AWS, and similar experience/knowledge with other cloud providers such as Microsoft Azure and Google Cloud Platform (GCP). • Experience with cloud security posture and data security posture tools (e.g., Wiz, CSPM/DSPM). • Working knowledge of networking fundamentals as they relate to security (e.g., TCP/IP, DNS, VPN tunneling, network segmentation, basic routing/firewalling concepts). • Proven scripting capabilities (Python, Bash, Batch). • Advanced AI skills, including hands-on experience leveraging AI-powered tools (e.g., Claude Code, LLM-based automation) to streamline security operations, policy development, and workflow efficiency, along with knowledge of Model Context Protocol (MCP) and AI guardrails for secure and governed AI tool integration. • Knowledge of the MITRE ATT&CK framework, including mapping threats/IOAs and applying it to detection and mitigation strategies. • Professional certifications such as CISSP, CISM, or equivalent. • Bachelor's degree in Computer Science, Information Security, or a related field – an advantage. • High level troubleshooting skills. • Team player with excellent interpersonal skills. • Excellent written and verbal communication skills in both English and Hebrew. #LI-HI1