Security Engineer jobs in Israel

Job Description Role This is a principal-level security architecture and strategy role with enterprise-wide scope. You will set security direction across ServiceNow’s products and platforms, define the controls and standards that teams build against, and serve as a technical authority on complex and emerging threats, including those introduced by AI and agentic systems. You’ll also drive the use of AI to strengthen security itself, applying it to detection, triage, and security analysis. You’ll partner with security research teams to turn their findings into requirements and roadmap priorities, and represent ServiceNow’s security posture externally and to executive leadership. We’re looking for a deep security or engineering expert; experience with AI security is a plus, not a prerequisite. What you'll do • Contribute to the security strategy and reference architecture across the company’s products and platforms • Lead threat modeling for complex and novel systems, including AI and agentic systems where established patterns don’t yet exist • Define platform-wide security standards, including access-control and data-boundary models that other teams build against • Establish what secure-by-design means for new technologies, including AI, and drive adoption across engineering organisations • Set methodology and priorities for red-teaming and security assessment programs • Apply AI to strengthen security work, such as detection, triage, vulnerability discovery, and design review • Make or approve security risk decisions for high-impact initiatives that cross organisational boundaries • Represent ServiceNow’s security posture to standards bodies, industry forums, and executive leadership • Develop senior security engineers and shape the team’s technical agenda Qualifications To succeed in this role, you’ll need: • To succeed in this role, you'll need • Bachelor's, Master's, or PhD in Computer Science or a related field, or an exceptional record of impact • Experience that meets one of the qualifying backgrounds below, including design reviews, threat modeling, and risk assessment at enterprise scale • A sustained record of setting security direction across multiple teams or product lines, with standards, controls, or architecture that others adopted as their baseline • Recognised depth in at least one core security discipline, such as application, cloud, identity, cryptography, or offensive security, with working breadth across the others • Expert fluency with threat modelling methodologies (e.g., STRIDE, attack trees) and security frameworks such as the OWASP Top 10, to the point of extending, critiquing, or contributing to them • A demonstrated ability to ramp quickly on new technology domains and reason about security where no established patterns exist • A track record of developing principal- and staff-level security leaders, and of shaping decisions with senior executives and engineering leaders • Clear, precise communication with executive audiences, and a record of influencing outcomes without direct authority Qualifying background (either path) • Security-led: 13+ years in security, with at least 3 years in principal-level roles owning architecture, risk, or threat modeling across the organization • Engineering-led: 13+ years of software engineering, including at least 3 years building or owning security-critical systems such as identity, authorization, data pipelines, distributed systems, or platform security, and a demonstrated move into security ownership at enterprise scale Bonus • Depth in AI security, including threat modeling or securing LLM, GenAI, or agentic systems • Experience with prompt injection and jailbreak defense, guardrail architecture, or AI red-teaming • Hands-on familiarity with agentic frameworks and protocols such as LangChain, LangGraph, MCP, and A2A • Experience designing identity and consent models for AI agents • Built security tooling for AI systems used beyond one team • CVEs, publications, or invited talks in security research, especially in AI or LLM security • Prior experience setting AI security strategy at a company or platform level Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .

Description We are seeking an experienced Tech Lead to manage the Domain Experts covering penetration testing, red teaming, cloud security, and ICS/OT (SCADA) security. This role is dedicated to the quality of intent analysis for cybersecurity prompts that an AI system could not confidently classify as benign or malicious, across the domains of the team. You need to be a hands-on expert in your own field, with enough working knowledge of penetration testing, red teaming, and cloud security to judge prompts and guidelines that cross into the other team's domains. You also need to be independent, organized, and able to lead technical experts. What you'll do: • Lead and manage the Domain Experts of the team (Enterprise Red Teaming, Web Application Security, Cloud Redteaming, ICS/OT (SCADA): priorities, workload, and performance • Route incoming rows to the team's domains and rebalance freelancer capacity inside the team as row volume shifts • Track team quality (agreement and disagreement rates, QA findings) and throughput, and report to the Group Manager • Resolve escalated edge cases and prompts that span several domains, and work with the other Tech Lead when a prompt crosses into their field • Keep the annotation guidelines consistent across the team's domains and propose updates • Annotate or review directly when needed to unblock the team Requirements • Minimum of 7 years of proven, hands-on experience in penetration testing, red teaming, cloud security, or ICS/OT (SCADA) security, with deep expertise in at least one of them • Working knowledge across all domains of the team, including ICS/OT protocols (Modbus, DNP3, S7comm, OPC UA) and PLC and SCADA architectures, enough to assess and coach the Domain Experts in each • Solid working knowledge of the other team's fields: penetration testing, red teaming, and cloud security, including common attack paths, tooling, and how their techniques appear in real intrusions • At least 2 years of experience leading or mentoring technical specialists (team lead, tech lead, or senior reviewer) • Experience with quality processes such as QA sampling, calibration sessions, and quality metrics • Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation • Clear written and verbal communication in English Nice to have: • OSEP, GCPN, GIAC GICSP • Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact. A Day in the Life Medtronic Cranial, Spine, and Therapy (CST) is seeking a Sr. Product Security Engineer to join our R&D organization and help secure innovative medical device and cloud-based solutions across the Aible Ecosystem. This role is primarily focused on product cybersecurity for medical devices, connected platforms, and cloud applications, while also including relevant governance, risk, and compliance (GRC) responsibilities that support product security activities and regulatory requirements. It is not a traditional IT security or dedicated GRC role. The ideal candidate will have deep experience partnering with engineering teams to embed cybersecurity into real-time systems, cloud-native applications, connected devices, and other product security environments. This individual will play a key role in strengthening the security posture of our products while enabling innovation, scalability, and patient safety. This position is based in Caesarea, Israel, and follows a hybrid work arrangement with a minimum of two days per week onsite.The selected candidate will support the implementation of advanced cybersecurity controls, identify and mitigate product vulnerabilities, and contribute to initiatives that improve cyber resilience across the product lifecycle. This person will serve as a technical subject matter expert together with current Prodcut Securty Engineer SME, collaborate across functions, and help drive long-term improvements in product security strategy and execution. Primary Responsibilities • Partner with engineering teams to implement cybersecurity requirements throughout the product development lifecycle, from design through post-market support. • Conduct threat modeling, security risk assessments, and vulnerability analyses across medical devices, cloud applications, and connected ecosystems. • Support the design and implementation of security controls including secure boot, encryption, secure communications, software update mechanisms, and access controls. • Apply cybersecurity standards, frameworks, and secure development practices to strengthen product security and reduce risk. • Evaluate security findings, recommend mitigations, and support remediation activities with development teams. • Collaborate with software, systems, cloud, quality, regulatory, and product teams to achieve secure-by-design outcomes. • Support product cybersecurity governance, risk, and compliance activities related to regulatory and organizational requirements. • Provide technical guidance on emerging cybersecurity threats, industry trends, and product security best practices. Required Qualifications • Bachelor’s degree and 7+ years OR master’s degree and 5+ years of experience in product security, application security, cybersecurity engineering, or related cybersecurity roles. • Experience securing cloud applications within a regulated industry environment. • Experience conducting threat modeling, security risk assessments, and vulnerability analysis. • Knowledge of cybersecurity frameworks and standards including NIST and OWASP. • Experience partnering with engineering teams to identify and mitigate technical security risks. Preferred Qualifications • Experience with secure software development lifecycle (SDLC) and secure-by-design practices. • Experience with medical device cybersecurity standards including IEC 81001-5-1, ISO 14971, and FDA cybersecurity guidance. • Experience supporting regulatory cybersecurity submissions for medical devices or healthcare software. • Experience with cloud-connected medical devices, digital health platforms, or connected healthcare ecosystems. • Security certifications such as CISSP, CompTIA Security+, CSSLP, or equivalent. Physical Job Requirements The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.  ‌ ‌ Recruitment Fraud Alert We are aware of phishing scams targeting job seekers. Please keep the following in mind: Apply only through official Medtronic channels. All legitimate Medtronic recruiting communications come from approved Medtronic platforms and official @medtronic.com email addresses. Medtronic will never ask for payment or sensitive personal information (such as bank account or Social Security details) during early stages of the hiring process. Any such requests are not legitimate. If you receive a suspicious message claiming to be from Medtronic, do not respond, click links, or open attachments. If you have any questions, concerns regarding the authenticity of a communication alleged to have been made by or on behalf of Medtronic, please contact us immediately at [email protected]. Benefits & Compensation Medtronic offers a competitive Salary and flexible Benefits Package A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage. ‌ This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).

Description Ox Security secures the AI-driven SDLC from prompt to production. We eliminate critical, real-time risks from AI code generation through cloud runtime by doing what conventional tools can’t: unifying development and cloud context to stop vulnerabilities right at the source. At OX, we’re building the future of cybersecurity for the AI era. If you’re looking to work on disruptive technology with an amazing team, you belong here. We’re growing fast and looking for an AI Security Team Leader to join our Engineering Team and play a key role in leading the development of our cutting-edge AI security products (VIBESEC). This is a high-impact, cross-functional role where you’ll work closely with Product, Design, and other Engineering teams, helping us deliver high-quality, customer-centric security solutions in a fast-evolving domain. If you’re highly accountable, adaptable, and business-value driven, and excited about cybersecurity, cutting-edge AI, and fast-paced startup challenges, we’d love to meet you. Responsibilities What You’ll Be Doing • Lead & Mentor: Lead a high-performing engineering team developing next-gen AI security products in a dynamic, rapidly changing domain. • Drive Value: Work closely with Product and customers to understand business requirements and transform them into robust, high-quality technical solutions. • Cross-Functional Ownership: Collaborate end-to-end with Product, Design, and other R&D teams to execute complex cross-company projects. • Technical Guidance: Provide architectural overview and technical mentorship to your team, stepping in when necessary to guide proper technical decisions and implementations. • Delivery & Quality: Own the execution, quality, and delivery of products running on endpoints and cloud environments in a high-velocity startup environment. Requirements What We’re Looking For • 2+ years of experience in leading software development teams. • 5+ years of hands-on experience in backend development using high-level programming languages. • Strong ownership (accountability), high independence, and ability to manage multiple stakeholders. • Proven ability to guide technical decisions and solutions for complex systems. Nice to Have: • Proven experience with microservices architecture. • Background in cybersecurity / Endpoint Agent development. • experience delivering customer-value-driven products in fast-paced startup environments.

Description At Sunbit, we're building financial technology that puts people first. By combining intelligent decisioning with a personalized, transparent approach, we help consumers access the payment options that are right for them while empowering merchants to build stronger customer relationships. Engineering is at the heart of how we make that happen. We build scalable distributed systems, cloud-native services, intelligent data platforms, and AI-powered solutions that enable real-time financial decisions at scale. By leveraging modern engineering practices and integrating AI into both our products and development workflows, we solve complex technical challenges, accelerate innovation, and continuously improve the way we build software. Every service, model, and architectural decision we make directly impacts our products, our customers, and the future of financial technology. About the Role We are looking for an Application Security Engineer to join our Security Engineering team. You will take ownership of strengthening security across Sunbit’s products, services, and development lifecycle. This includes identifying and addressing security gaps in application architecture and code, APIs and service-to-service communication, authentication and authorization flows, open source dependencies and third-party libraries, CI/CD pipelines and build systems, secrets handling, and AI-powered product features. As a Security Engineer at Sunbit, you will dig into how our systems actually work, understand where the real risk is, and decide what needs to be built to close it. Some problems are solved by changing an architecture or a design pattern, others by implementing a new control, embedding a security gate into the pipeline, integrating and tailoring a security platform, or writing something from scratch. You will own that decision and the implementation that follows. The Security Engineering team works as a group of all-rounders. Alongside your core focus, you will contribute to cloud and infrastructure security, corporate IT security, detection engineering, incident response, and our growing AI security work, both securing AI workloads and using AI to make our own security capabilities better. What You Will Work On • Identify security gaps across Sunbit’s applications, services, and development lifecycle, then translate them into practical technical solutions. • Design and implement scalable security controls that address root causes and fit our architecture and engineering practices. • Review architectures and designs, run threat modeling, and guide R&D teams toward secure patterns before code is written. • Secure APIs, authentication and authorization flows, service-to-service trust, data handling, and multi-tenant boundaries. • Own the secure development lifecycle end to end, including security gates in GitHub Actions, SAST, SCA, secrets scanning, and dependency and supply chain risk. • Build reusable security capabilities, libraries, paved-road patterns, and developer-facing tooling that make the secure path the default path. • Build custom AI agents and AI-powered capabilities that improve our security tools, workflows, visibility, and control. • Understand and secure AI-powered product features, including their data access, identities, permissions, integrations, and runtime behavior. • Partner with R&D, DevOps, Infrastructure, Data, AI, and IT teams from initial analysis through implementation, adoption, and validation. Requirements • At least 5 years of hands-on experience in application security, product security, security engineering, DevSecOps, or a related field. • Strong experience securing production applications and services, including APIs, microservices, and cloud-native workloads on AWS and Kubernetes. • Proven ability to identify security gaps, design appropriate controls, and take solutions through implementation. • Hands-on experience with secure code review, threat modeling, API security, and common vulnerability classes in modern application stacks. • Practical experience embedding security into CI/CD and GitOps workflows, including GitHub Actions, SAST, DAST, SCA, and secrets scanning. • Strong understanding of authentication and authorization, session management, secrets management, cryptography in practice, TLS, SSO, SAML, and OIDC. • Ability to read and write code in at least one modern language, and enough engineering depth to work as a peer to developers. • A broad security mindset, strong engineering judgment, and the ability to collaborate effectively with technical teams. Nice to Have • Experience building AI agents, LLM-based tools, or AI-powered security capabilities. • Experience assessing or securing AI workloads, including data exposure, prompt injection, agent permissions, and third-party integrations. • Experience with ASPM platforms, WAF, bot and abuse prevention, or runtime application protection. • Familiarity with cloud and infrastructure security, Terraform, policy as code, and container security. • Offensive security background, such as penetration testing, bug bounty, or exploit development. • Experience working in a regulated fintech or financial services environment. Recruitment Fraud Disclaimer We’ve been made aware of fraudsters impersonating Sunbit employees during the hiring process. Please note that all official communication will come from an @sunbit.com email address, through our applicant tracking platform @sunbit.comeet-notifications.com or directly via LinkedIn. We will never ask for your age, Social Security number, bank account details, payment of any kind, or other unrelated personal information during the application process. Our hiring process always includes interviews, either by phone, zoom, or in person, before any offer is made. If something feels suspicious, please contact us at HR to confirm. We ask that you contact HR only about potential instances of fraud. HR does not reach our recruiting team directly. Your application directly through the posting is the best way to ensure that your candidacy is reviewed by our team. Due to the volume of applications, we will not respond to nor forward emails about your candidacy that are sent to HR directly, and your email about your application will be deleted from our systems.

Applying to Paxos? Our only careers site is paxos.com/careers, and we only recruit via @paxos.com email. Details below. ___ About Paxos Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it. We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world's leading financial institutions, like PayPal, Venmo, Mastercard, Interactive Brokers and Charles Schwab. About the team The Security team at Paxos protects the cloud infrastructure, crypto systems, endpoints, and network that our regulated financial platform runs on. You'll join the Detection and Response function, working alongside our 24x7 SOC, which handles first-line triage, and partnering with Product Security teams to validate that our coverage holds up against real attacker techniques. About the role The Senior Detection and Response Engineer at Paxos serves as a builder of the detections, hunts, and automations that protect our cloud infrastructure, crypto systems, endpoints, and network. You will write detections as code and automate response, and act as a purple teamer, emulating attacks alongside our Product Security teams to confirm our detections work. Our 24x7 SOC handles first-line triage, so your focus is the detection engineering, threat hunting, and validation that make our coverage effective. Strong hands-on investigation skills are expected, but they support this work rather than define it. What you'll do • Detection Coverage & Quality: Ship production-grade detections as code with measurable signal improvements—reducing false positives and closing gaps identified in purple team exercises. • Validated Defenses: Run purple team exercises with other teams to confirm detection effectiveness and identify blind spots. • Threat Hunting Program: Execute proactive hunts based on threat intelligence and convert findings into new detections and documented IOCs/TTPs. • Operational Efficiency: Build automations to accelerate investigation and triage; create and maintain runbooks and incident write-ups that make response consistent and repeatable across the team. • Detection Stack: Identify gaps and integrate best-in-class tools that increase team effectiveness and visibility across endpoints, cloud, network, and signing systems. About you • You bring 5-8+ years of experience in security operations, detection engineering, offensive security testing, or a related security engineering role — with a track record of scope growth, not just years. • You independently own complex, ambiguous, or multi-stage incidents from initial triage through containment, eradication, and recovery — making the call in the moment and building or improving the runbook afterward, rather than waiting for one to exist. • You bring deep, hands-on expertise in SIEM and EDR platforms, can design new detections from scratch, own detection strategy for a significant surface area, and meaningfully reduce false-positive rates across a rule set you own. • You can design and run purple-team exercises in partnership with other engineering teams, emulating real attacker techniques and using the findings to reshape the detection roadmap rather than just confirm what already works. • You have a strong point of view on what tools and architecture the team should invest in, not just how to use what's already there, and you make credible build-vs-buy calls. • You think like a builder and continuously find ways to automate repetitive security workflows, applying AI thoughtfully to improve the speed, consistency, and scale of investigation and response across the team. • You produce original threat intelligence assessments and run proactive threat hunts based on hypotheses, translating findings directly into new detections and a stronger detection roadmap. • You communicate fluently with engineering leadership and cross-functional stakeholders during major incidents, and your docs and retros shape team direction, not just record what happened. • You actively mentor junior members of the team, serve as a trusted technical escalation point, and have a track record of measurably accelerating others' growth. • You're comfortable participating in an on-call rotation and can act as incident commander when needed — driving structural fixes that prevent a class of incidents from recurring, not just one instance. Important Notice for Paxos Applicants Fraudulent accounts sometimes pose as Paxos recruiters on LinkedIn and other platforms, and fake websites sometimes impersonate our careers site. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information. To verify a legitimate Paxos opportunity: • Our only official careers site is paxos.com/careers • We only use @paxos.com email addresses • We never ask for payment or financial details to apply, interview, or work here • For technical roles, we do not perform a coding interview without prior screening by our engineering team Thanks for your interest in Paxos!

SUMMARY: We’re looking for a Senior Cloud Security Engineer to own the security of a large-scale data platform that processes billions of events for thousands of customers, where privacy is a core product commitment. You’ll own cloud security end to end, building the guardrails, automation and controls that make the secure path the default for every engineer. You’ll work closely with the infrastructure team who own the platform, and see your decisions go straight to production. RESPONSIBILITIES: • Own the security posture of our GCP and Kubernetes environments: IAM, network segmentation, workload hardening, and data access to BigQuery, Bigtable and other data stores, detecting and fixing cloud misconfigurations continuously and automating remediation wherever possible • Build secure-by-default foundations: hardened base images, secure Kubernetes configurations, and policy-as-code guardrails for Kubernetes and Terraform • Partner with engineering to embed security into CI/CD, with automated fixes and alerts instead of manual checklists • Own secrets and key management end to end, including rollout, rotation and access policy • Drive vulnerability management from discovery to fix, prioritizing by real exposure • Review new services and designs with practical, lightweight threat modeling • Lead security incidents from containment to post-mortem • Serve as the go-to security expert across R&D, mentoring engineers and helping teams adopt AI services safely REQUIREMENTS: • 6+ years in security, infrastructure, DevOps, or SRE, including 3+ years owning cloud security in production • Deep hands-on experience securing a major public cloud. We run on GCP; strong AWS or Azure engineers ramp quickly here. • Production Kubernetes security: RBAC, network policies, admission control, workload hardening • Terraform (or similar) plus Python or Go. You’ve built security automation, not just configured off-the-shelf tools. • Sound judgment on risk: you know when to block, when to guide, and when to accept AI FLUENCY & ENGINEERING EXCELLENCE: • Uses AI to scale security work in practice, e.g. LLM-assisted triage, generating and testing policy-as-code, or automating design reviews • Familiar with the security risks of LLM APIs and AI services in production, or eager to build that expertise NICE TO HAVE: • Application security or DevSecOps experience • Experience securing data platforms and enforcing data access governance • A background in DevOps, SRE or Platform engineering before moving into security WHY JOIN PLACER.AI? • Join a rocketship! We are pioneers of a new market that we are creating • Take a central and critical role at Placer.ai • Work with, and learn from, top-notch talent • Competitive salary • Excellent benefits • Hybrid NOTEWORTHY LINKS TO LEARN MORE ABOUT PLACER • Placer.ai's $100M round C funding (unicorn valuation!) • See our data in action at The Anchor • Placer.ai in the news • Video: About Placer for Commercial Real Estate • Video Playlist: Placer Brand & Explainer Videos Placer.ai is committed to maintaining a drug-free workplace and promoting a safe, healthy working environment for all employees. Placer.ai is an equal opportunity employer and has a global remote workforce. Placer.ai's applicants are considered solely based on their qualifications, without regard to an applicant's disability or need for accommodation. Any Placer.ai applicant who requires reasonable accommodations during the application process should contact Placer.ai's Human Resources Department to make the need for an accommodation known.

At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee. Semperis is looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them. You will strengthen Semperis’ threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster. This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure Semperis’ corporate and cloud environments. You will also help shape how Semperis secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution—and want the autonomy and cross-functional access to make security improvements stick—this role is built for you. What You Will Do Threat Detection and Incident Response • Operate and improve SIEM, EDR, cloud, identity, email, and security monitoring capabilities. • Develop and tune detection rules, analytics, dashboards, alert routing, and investigation playbooks. • Investigate security alerts and incidents, including scoping, evidence collection, containment, remediation coordination, and recovery tracking. • Support high-severity incident response and contribute to post-incident improvements. Vulnerability and Cloud Security Operations • Lead SecOps triage of vulnerability, exposure, endpoint patching, and CSPM/CWP findings across endpoints, third-party applications, cloud environments, and other technology assets. • Validate findings, assess risk using business and technical context, assign ownership, establish remediation priorities, track patching and other corrective actions, manage exceptions, and verify closure. • Partner with Cloud Security on posture-management rules, alert tuning, cloud logging, and recurring misconfiguration analysis. • Define monitoring and detection requirements for new cloud services, SaaS capabilities, and significant architecture changes. • Monitor privileged activity, develop detections for risky identity, endpoint, and cloud administration behavior, and support endpoint-hardening efforts focused on least privilege, reduce local-administrator access, and secure configuration. Automation, Metrics, and Engineering • Build scripts, integrations, workflows, and playbooks that improve triage, enrichment, notification, containment, remediation tracking, and reporting. • Monitor log-source and connector health and improve telemetry coverage across cloud, identity, endpoint, SaaS, and network sources. • Maintain metrics covering MTTD, MTTR, alert quality, incident trends, detection coverage, vulnerability risk, CSPM/CWP exposure, and remediation performance. • Maintain clear runbooks, technical documentation, and operational records. AI Security, Guardrails, and Monitoring • Assess AI tools, agents, plugins, and MCP integrations for data access, identity, execution, retention, and supply chain risk. • Design and operate guardrails for least-privilege identities, read-only-by-default connectors, sandboxed execution, network-egress restrictions, and human approval before irreversible actions. • Monitor prompts, retrieved content, model outputs, tool calls, agent actions, and administrative changes for prompt injection, indirect prompt injection, sensitive data exposure, unsafe code, abnormal behavior, and policy violations. • Onboard AI audit and runtime telemetry into the SIEM and build detections and response playbooks for rogue tools, connector misuse, suspicious tool calls, data exfiltration, and agent compromise. • Run controlled pilots and adversarial tests, measure false positives and user impact, and promote controls from monitor or flag to block based on evidence. Cross-Functional Security Engineering • Translate security findings into clear actions, owners, priorities, and deadlines. • Provide practical security guidance to engineering and IT teams. • Mentor analysts and engineers through technical reviews, incident walkthroughs, and knowledge sharing. • Balance risk, engineering effort, availability, customer impact, and business priorities when recommending actions. What You Will Bring • 5+ years of hands-on experience in Security Operations, Security Engineering, Detection Engineering, Incident Response, or related field. • Strong experience with SIEM operations, detection engineering, alert triage, investigation, and incident response. • Practical experience with vulnerability management, endpoint patching and hardening, CSPM/CWP, cloud security posture, or attack-surface analysis. • Experience with Azure, AWS, or comparable cloud environments; multi-cloud experience is a plus. • Strong understanding of identity and access risks, privileged activity, risky sign-ins, and cloud administration. • Understanding modern AI security risks, including prompt injection, indirect prompt injection, excessive agency, data leakage, tool misuse, and AI supply-chain risk. • Ability to query and analyze security data using KQL, SQL, or equivalent language. • Ability to automate using Python, PowerShell, JavaScript, or a comparable language, including API integration. • Experience with endpoint, email, SaaS, cloud, and identity security telemetry. • Strong technical writing and communication skills, including the ability to work with distributed, cross-functional teams. • Ability to work independently, make sound decisions under pressure, and manage competing priorities. Preferred Qualifications • Experience with Microsoft Sentinel, Microsoft Defender, Log Analytics, SOAR, or comparable platforms. • Familiarity with MITRE ATT&CK, Sigma, YARA, threat hunting, or detection testing. • Experience with infrastructure-as-code, CI/CD, containers, or Kubernetes security. • Experience securing LLMs, AI agents, MCP or plugin ecosystems, AI-enabled SaaS tools, or AI runtime environments is a plus. • Experience with endpoint security capabilities such as endpoint privilege management, privileged access workstations, application control, and other least-privilege or attack-surface-reduction measures. • Experience supporting SOC 2, ISO 27001, NIST, FedRAMP, or similar assurance requirements. • Relevant security certifications or equivalent practical experience. Success Measures • Improved detection coverage and alert quality across priority security signals. • Consistent, risk-based triage and remediation of vulnerability, endpoint patching, and CSPM/CWP findings, with measurable improvement in patch compliance and endpoint-hardening coverage. • Reduced time to detect, investigate, contain, and recover from security incidents. • Increased automation and reduced manual effort in recurring SecOps workflows. • Reliable operational metrics, current playbooks, and measurable improvement actions. • Strong execution across SecOps, Cloud Security, Identity and IT, AppSec, and Engineering teams. • AI tools and agent workflows operate with risk-based guardrails, auditable telemetry, actionable detections, and clear escalation paths. • Controlled AI pilots demonstrate the least privilege, sandboxing, human approval, and safe handling of sensitive data before wider rollout. #LI-TI1 Why Join Semperis? You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you. **Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days. Semperis is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by the Semperis application is solely to determine suitability for employment, verify identity, and maintain employment statistics. Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and/or other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Semperis. Please inform Semperis representative Anna Taylor, Director of Global Recruiting, if you need assistance completing this application or to otherwise participate in the application process.

Via is using technology to transform transportation around the world. From changing a single person’s daily commute to reducing humanity’s collective environmental footprint — we’ve got huge goals. As a Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program. What You’ll Do: • Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications. • Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices. • Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis. • Use AI (LLMs, agents, MCP-based tooling) to improve AppSec work such as vulnerability triage, code review, remediation and detection, and set best practices for doing so safely. • Design and build security tooling and automation, such as CI/CD integrations, internal services and AI-assisted workflows. • Contribute to the development and maintenance of application security policies, standards, and procedures. • Research and evaluate new application security tools and technologies. • Monitor application security metrics and provide regular reports on the security posture of applications. • Participate in incident response activities related to application security. • Champion a security-first culture within the engineering organization. Who You Are: • A Bachelor's degree in Computer Science or a related field is a plus. • Minimum of 3 years of experience as an Application Security Engineer or a similar role. • Strong understanding of application security concepts, including OWASP Top 10, CWE Top 25, and SANS Critical Security Controls. • Experience with various application security testing tools and techniques (e.g., SAST, DAST, SCA). • Proficiency in at least one scripting language (e.g., Python, JavaScript, Ruby). • Experience with secure coding practices and vulnerability remediation. • Familiarity with CI/CD pipelines and DevOps practices. • Excellent communication and collaboration skills. • Ability to work independently and as part of a team. • Experience with cloud platforms (AWS is an advantage). Compensation and Benefits • Our product impacts millions of users around the world providing alternative transport solutions that are more: efficient and accessible, changing cities to make them greener. • Competitive compensation package which includes base salary and equity • Health insurance with a discount for family members • Hybrid work and a lovely office situated in the heart of TLV, in Midtown, close to the light rail and train station • Career development and growth opportunities • Other perks: Freefit and other sports lessons, 10bis/Cibus - you choose!, happy hours, team events, communities and many more benefits We’re Via, and we build technology that changes the way the world moves. We’re driven by a simple mission: to create modern and efficient public transportation systems that provide far greater access to jobs, healthcare, and education. With our best in class suite of products, we make transit thrive. Our teams of worldclass engineers, data-scientists, product managers, operations specialists, marketers, transit experts and more bring cutting-edge AI-powered software and innovative technology-enabled operations to our partners across the globe. Founded in 2012, Via builds solutions to digitize, automate, and enable data-driven decision making for entire transportation networks; fixed-route buses, microtransit, paratransit, school buses, autonomous vehicles, and more. If you’re excited to be at the forefront of modernizing the future of transportation, are up for solving tough problems, and willing to become/already are a transit nerd, we are the place for you. Even if your past experience doesn’t align perfectly with every qualification in the job description for this role, we encourage you to apply. You may be just the right candidate for this or other opportunities. Ready to join the ride? Via is an equal opportunity employer.

Location: Kfar Saba, IL (hybrid) ERGO NEXT's mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience. Simply put, wherever you find small businesses, you’ll find ERGO NEXT. Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow — that’s where you come in. As a fast-growing, cloud-native company, we aren't just protecting our infrastructure,we are building the security foundation that enables our scale. To drive this vision, our Security Engineering team operates at the absolute forefront of the field, embedding secure-by-design capabilities directly into our engineering DNA. We are looking for a Security Engineering Tech Lead to shape our long-term strategy, advance our automation, and deepen developer trust across the organization. This is a rare opportunity to directly influence the technical direction of a high-scale platform while mentoring a talented team of engineers, without losing your hands-on edge. What You’ll Do: • Shape and execute our cloud-native security strategy, serving as the technical lead for AWS, Kubernetes, and IAM architecture. • Partner closely with Platform Engineering to build reusable security capabilities into the engineering platform. • Scale our security posture by engineering self-service guardrails and automated controls that allow product teams to ship faster, safely. • Standardize security patterns and reference architectures that enable cross-organization scalability while reducing friction for engineering teams. • Drive secure adoption of AI-assisted development, agentic workflows, and developer productivity platforms. • Elevate the team's technical maturity by mentoring engineers, refining design reviews, and fostering a culture of security ownership. What We Need: • 7+ years in security engineering, cloud security, or a related technical security role • At least 2 years in a tech lead, staff-level, or mentorship capacity • Strong hands-on AWS security experience across IAM, networking, workload security, logging, monitoring, and cloud-native services. • Strong Kubernetes and containerized environment security knowledge • Experience with IaC, CI/CD security, distributed systems, identity, and access control • Ability to review technical designs and provide clear, practical security guidance • Strong communication skills in Hebrew and English • Proven track record of influencing stakeholders and cross-functional teams. • Demonstrated ability to lead complex technical initiatives across multiple engineering teams. Preferred Qualifications • Experience with AI, LLM, MCP, or agentic development environments. • Background in security automation, internal security platforms, or developer-facing tooling • Experience with threat modeling, security architecture, or secure design programs • Scripting or coding experience in Python, Go, or similar • Experience designing and building security automation or internal security platforms at scale. Note on Fraudulent Recruiting We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of ERGO NEXT Insurance. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers. Please note, we do not ask for sensitive information via chat, text, or social media, and any email communications will come from the domain @next-insurance.com or @nextinsurance.com. Additionally, Next Insurance will never ask for payment, fees, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via the careers page on our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations. If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Next Insurance, please do not provide any personal or financial information. You can find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission's website (https://consumer.ftc.gov/articles/job-scams), or you can contact your local law enforcement agency. Don’t meet every single requirement? Studies have shown that some underrepresented people are less likely to apply to jobs unless they meet every single qualification. At ERGO NEXT, we are dedicated to building a diverse, inclusive and respectful workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. One of our core values is 'Play as a Team'; this means making sure everyone has an equal chance to participate and make a difference. We win by playing together. ERGO Next Insurance is an equal opportunity employer and prioritizes building a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants of any type and do not discriminate based on race, color, religion, national origin, gender, age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job-related characteristics or other prohibited grounds specified in applicable federal, state, and local laws. ERGO Next's policy is to comply with all applicable laws related to nondiscrimination and equal opportunity and will not tolerate discrimination or harassment based on any of these characteristics. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Description Papaya Global is a rapidly growing, award-winning B2B tech unicorn with an ambitious mission to revolutionize the payroll & payments industry. With over $400M raised from multiple tier-one investors, our innovative technology provides a comprehensive solution for managing global workforces, encompassing everything from hiring and onboarding to managing and paying employees in over 160 countries. About the job We are looking for a SecOps Engineer to join our cybersecurity team. In this role, you will help defend the organization end-to-end across cloud, endpoints, identities, and applications while building and maturing our security operations capability. You will work across SIEM and telemetry, detection engineering, alert investigation, threat hunting, digital forensics and incident response, threat intelligence, and response automation. You will partner closely with IT, DevOps, Application Security, R&D, and business stakeholders to turn security signals into effective action and lasting improvements. This is a hands-on role for someone who enjoys investigating complex problems, improving controls, and building repeatable security operations in a growing environment. The role may participate in an on-call rotation and occasional after-hours incident response as required. Responsibilities • Operate and improve the security operations stack — SIEM, identity, endpoint, cloud, and application telemetry — including log source onboarding, health monitoring, and coverage-gap remediation. • Investigate security alerts and threats through triage, host and artifact analysis, DFIR, and threat hunting. • Lead incident response from detection through containment, recovery, and post-incident review. • Build and tune detection rules, SIEM queries, and dashboards for high-risk attack paths, and convert threat intelligence into new detections, hunts, and control improvements. • Automate response and enrichment workflows by using AI tools, scripting (Python, Bash, PowerShell), or SOAR tools to cut response time, and report incident metrics — root cause, impact, and remediation status. • Support security reviews of vendors, SaaS platforms, and internal applications, and partner with engineering to validate whether existing controls detect and mitigate relevant threats. • Support security monitoring and response for AI-enabled workflows and artifacts where applicable, including agentic tooling, integrations, and related operational risks. • Use AI-assisted triage and anomaly-detection models to prioritize alerts and cut time-to-detect across SIEM and endpoint telemetry. • Develop agentic workflows to speed up evidence correlation, RCA, timeline reconstruction, and case write-ups during investigations. • Evaluate AI agentic investigation tools for accuracy and performance and use the results to fine-tune and further enhance the automated playbooks. Requirements • 3+ years of hands-on experience in security operations, incident response, detection engineering, or a similar cybersecurity role. • Strong practical experience with IT security, endpoint protection, identity security, and security operations. • Hands-on experience with SIEM platforms, including alert triage, investigation, query development, dashboards, and detection tuning. • Solid understanding of cloud security and practical experience with one or more major cloud platforms, including identity, logging, network, and workload security concepts. • Experience with incident response and DFIR workflows, including host-based and artifact analysis on Windows, Linux and macOS. • Proficiency in Python, Bash, PowerShell, or similar scripting languages for automation and operational tooling. • Familiarity with SOAR platforms, automated playbooks, alert enrichment, and response workflows. • Strong written and verbal communication skills, with the ability to collaborate across DevOps, IT, R&D, security, and business teams. • Ability and willingness to participate in occasional after-hours response when required by a material security incident. • Strong familiarity with AI tools and experience putting them to work in security investigations. Nice to have • Experience building detections and incident-response capability in a growing or cloud-native organization. • Experience with threat hunting, malware analysis, host forensics, and mapping activity to common adversary tactics, techniques, and procedures. • Experience with containerized or cloud-native architectures, identity providers, and modern endpoint security platforms.

Description At UVeye, we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we pioneered the world's first fully automated suite of AI-powered vehicle inspection systems, combining computer vision, machine learning, and generative AI. With over $380M in funding and strategic partnerships with Toyota, Amazon, General Motors, JLR, Volvo, and Hertz, our technology is deployed across manufacturing plants, dealerships, wholesale auctions, fleets, and seaports worldwide. Named one of Fast Company's Most Innovative Companies of 2026, our 300+ global employees are solutions-oriented, accountable, and driven by one shared goal: making roads safer for everyone. We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities. A day in the life and how you’ll make an impact: • Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools. • Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows. • Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring. • Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats. • Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization. • Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc’) to identify requirements and prioritize security needs. • Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration. • Perform or manage penetration testing initiatives to identify security weaknesses. Requirements • 5+ years of experience in sec-ops positions with relevant certifications • Demonstrable experience working in IT, Networking, Infrastructure, DevOps environments • Deep understanding of cloud platforms (AWS, GCP) and their security best practices(CSPM, ASPM, DSPM). • Strong knowledge of cloud networking(VPC), firewalls, IAM roles, and encryption. • Familiarity with ISO 27001, SOC 2, GDPR, and other security and regulatory frameworks, as part of GRC. • Experience performing or overseeing penetration testing processes. • Experience working with Forensic & Threat Detection Tools such as AWS GuardDuty, Azure Sentinel, Splunk, Qradar, Arcsight, and other SIEM systems • Experience working with multiple EDR and XDR Tools (CS, SentinelOne, MS Defender, etc’) • Excellent verbal and written communication skills, capable of explaining technical security concepts to non-technical stakeholders. • Ability to think critically and act decisively under pressure. • Integration and project lead experience • Team player Why UVeye: • Pioneer Advanced Solutions: Harness cutting-edge technologies in AI, machine learning, and computer vision to revolutionize vehicle inspections. • Drive Global Impact: Your innovations will play a crucial role in enhancing automotive safety and reliability, impacting lives and businesses on an international scale. • Career Growth Opportunities: Participate in a journey of rapid development, surrounded by groundbreaking advancements and strategic industry partnerships. Check out our Life at UVeye page to learn more about the employee experience. UVeye is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. . The Role As AI capabilities accelerate across the bank, we need an engineer to design and enforce safe AI usage—protecting customer data, preserving model integrity, and meeting our regulatory obligations. You'll be the architect of guardrails, tooling, and policies that make AI both secure and useful for product and internal teams. This isn't about slowing things down; it's about building the trust layer that lets innovation move fast without breaking things. Who You Are You're a security engineer who's excited about the AI wave—someone who sees LLMs and Agentic AI as fascinating puzzles to secure, not just threats to mitigate. You've spent 5+ years in Security Engineering, AppSec, or Cloud Security, and at least 1–2 of those years have been spent getting your hands dirty with LLMs, AI Agents and MCPs. You understand how agentic frameworks (LangGraph, CrewAI, AutoGen, and similar) orchestrate multi-step tool use—and where trust boundaries break down. You've assessed or secured AI-powered coding agents (Claude Code, GitHub Copilot, Cursor) and understand the unique risks of AI with filesystem, terminal, and API access in developer environments. You're equally comfortable dissecting a prompt injection attack as you are writing a Terraform module or shipping a Python library. You know your way around AWS and/or Azure, modern app stacks (Python/TypeScript, REST/gRPC, containers/Kubernetes), and can translate security requirements into developer-friendly tooling—not just PDF policies that gather dust. You communicate clearly in English and Hebrew, thrive in regulated environments, and understand that security in financial services means mapping controls to frameworks like FFIEC, SOC 2, and PCI DSS—and actually having the evidence to prove it. What You’ll Actually Be Doing • Design enterprise AI guardrails across Azure and AWS (e.g., Azure AI Studio/Azure OpenAI, Amazon Bedrock/SageMaker): content filtering, PII redaction, prompt/response validation, and policy enforcement services. • Assess and define secure usage patterns and data governance controls for agentic frameworks and coding agents: permission scoping, tool-call authorization, least‐privileged retrieval, session isolation, and MCP server governance. • Threat model AI systems (apps, agents, MCPs, RAG, fine-tuning pipelines) using frameworks like STRIDE and the OWASP Top 10 for LLM Apps; define misuse scenarios (prompt injection/context poisoning/jailbreaks/data exfiltration) and build mitigations. • Build monitoring and telemetry: privacy-preserving prompt/response logging, sensitive-data detection, safety/eval dashboards, drift/abuse signals, and incident hooks into our SIEM. • Integrate AI security into the SDLC: reusable libraries, pre-commit checks, CI/CD gates, policy-as-code, and secure-by-default reference architectures for product teams. • Evaluate third‑party AI vendors and internal apps: security reviews, data residency and retention requirements, SSO/SCIM integrations, DPA/TPRM inputs, and continuous control testing. • Partner across Security, Data, Privacy, and Engineering to map AI controls to FFIEC, SOC 2, and PCI DSS; document control evidence for audits. • Lead/participate in AI red‑teaming: automated jailbreak/prompt‑injection tests, safety benchmarks, purple‑team exercises, and response playbooks for AI incidents. • Enable the org with concise guidelines, examples, and training on safe AI development and usage. Requirements What You Bring to the Table • 5+ years in Security Engineering/AppSec/Cloud Security (or similar), including 1–2+ years securing AI/ML or data‑intensive systems (GenAI preferred). • Hands‑on experience with AWS and/or Azure and modern app stacks (Python/TypeScript, REST/gRPC, containers/Kubernetes, IaC such as Terraform). • Practical understanding of LLM attack surfaces (prompt injection, context and goal poisoning, data leakage via tools, training/fine‑tune poisoning, model supply chain) and mitigation patterns. • Experience assessing agentic architectures (LangGraph, CrewAI, or similar) and AI coding assistants (Claude Code, GitHub Copilot) for secure enterprise deployment. • Familiarity with identity and access for AI workloads (OAuth2/OIDC, service principals, role tokens, PIM), and secure secret management/KMS. • Experience implementing observability/telemetry and routing findings to SIEM; comfort balancing privacy with traceability. • Ability to translate controls into developer-friendly libraries, docs, and CI/CD checks. • Comfort working in a regulated environment and mapping controls to frameworks (FFIEC, SOC 2, PCI DSS). • Strong written communication in English and Hebrew. Nice to have • Financial services background or other high‑assurance domains. • Exposure to Duende IdentityServer, SSO/SCIM, and enterprise authorization patterns. • Familiarity with guardrail tooling (e.g., Azure AI Safety features, Amazon Bedrock Guardrails) and policy engines (OPA/Rego). • Prior work in AI red‑teaming or safety evaluation harnesses; contributions to OSS or published talks. Why You’ll Love Working Here • Flexible hybrid work model: three days a week at our Jerusalem office • Monthly wellness reimbursement – from therapy to gel manicure, it's up to you • Full Keren Hishtalmut, private health and dental insurance • Volunteer days, donation matching, Yoga and Pilates • A supportive, collaborative culture that puts our people first Next Step Hit Apply!

Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. . The Role This role focuses on ensuring the security and compliance of cloud infrastructure by implementing and maintaining robust security controls across AWS environments. The position involves automation for security monitoring, adhering to best practices, and collaborating cross-functionally with other teams. Who You Are A strong individual contributor who takes pride in delivering high-quality security outcomes while collaborating closely with peers and stakeholders. You are able to build trust, provide thoughtful input, and continuously grow your technical and operational expertise. You are passionate about exploring new technology and using it to make an actionable impact to the future of fintech. You can balance the needs of the business and the team's goals with strong value for code quality and adherence to implementing best practices. A highly skilled AWS Security Engineer with additional FinOps expertise to ensure the security and compliance of our cloud infrastructure. You are able to implement and maintain robust security controls across AWS environment. You are passionate about best practices, automation for security monitoring, and collaborating with other teams. What You’ll Actually Be Doing • Cloud Security Implementation: Contribute to the design and implementation of security measures across AWS environments to ensure systems are secure, compliant, and aligned with industry best practices. Including implementation, automation and development of security policies • Conduct regular security assessments, control testing, and audits to proactively identify risks and vulnerabilities (and support remediation efforts with partner teams) • Collaboration with Internal Teams: Work closely with internal teams to integrate security best practices into development and operational workflows • Security Automation & Infrastructure Management: Design and implement automation strategies for security monitoring, auditing, and incident response • Cost Efficiency through Security: Contribute to cloud cost management by optimizing cloud resources without compromising on security. • Incident Response & Threat Management: Participate in incident response efforts to support timely identification, analysis, containment, and remediation of security threats. Contribute to post-incident reviews, help maintain incident response playbooks, and support internal teams by sharing learnings and updated procedures. Requirements What You Bring to the Table • Proficiency in Hebrew and English language with excellent written and verbal communication skills • AWS Certified Security Specialty - plus • AWS Certified Solutions Architect - Professional - plus • Experience with Azure cloud security, including relevant certification (Azure AZ-104 Administrator) • In-depth knowledge of AWS security services (e.g., IAM, GuardDuty, CloudTrail, VPC security) • Expertise in cloud security architecture, including identity and access management, encryption, network security, and application security. • Strong skills in Linux, Bash, Terraform, Jenkins, Containers/Docker, and programming languages such as Python and JavaScript • Experience in security automation and incident response in cloud environments • Experience with endpoint security, including endpoint management and investigation tools, supporting endpoint-based investigations and response, working with XDR and DLP technologies and workflows (alert triage, investigation, containment, and remediation), and familiarity with the Microsoft security ecosystem (e.g., Microsoft Defender, Intune, Sentinel, Purview). A plus if you have • AWS Certified Solutions Architect – Associate • Experience working in a collaborative environment with cross-functional teams, embedding security into development, operations, and infrastructure workflows • Familiarity with FinOps practices, with the ability to balance security measures with cost-efficient strategies Why You’ll Love Working Here • Flexible hybrid work model: three days a week at our Jerusalem office • Monthly wellness reimbursement – from therapy to gel manicure, it's up to you • Full Keren Hishtalmut, private health and dental insurance • Volunteer days, donation matching, Yoga and Pilates • A supportive, collaborative culture that puts our people first Next Step Hit Apply! Privacy Notice: Cross River https://www.crossriver.com/legal/privacy-policy-crt

Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. The Role We’re seeking a Senior Application Security Engineer who is first and foremost a teacher, advisor, and enabler for our development teams. Rather than owning security alone, you’ll embed secure-by-design thinking across engineering by mentoring developers, guiding architecture decisions, and making secure development intuitive and frictionless. You’ll serve as the go-to partner for developers and engineering leaders, offering clear direction, practical solutions, and hands-on mentorship that strengthens our secure SDLC. Who You Are • A proactive self-starter with deep expertise in application and cloud security • Passionate about secure development and enabling engineers through thoughtful guardrails • Clear and confident communicator who can influence across technical and non-technical teams • Curious about emerging threats and excited by the challenges of blockchain security • Committed to excellence, with a strong sense of ownership and a drive to build secure systems that scale What You’ll Actually Be Doing • Mentor, coach, and educate developers on secure coding through workshops, training sessions, pair reviews, and ongoing guidance • Lead and scale a Security Champions program embedded within engineering teams • Facilitate threat modeling sessions and design reviews, partnering with teams early in the process to improve security outcomes • Collaborate with engineering leadership to ensure secure architecture patterns, API security practices, and design principles are built in from day one • Integrate and tune developer-friendly AppSec guardrails into CI/CD pipelines (SAST, SCA, IaC, secret scanning) while minimizing noise for developers • Translate vulnerabilities into clear, actionable remediation guidance that developers can easily implement • Support security awareness across engineering by building engaging internal content, best-practice playbooks, and reusable patterns • Partner with compliance teams to produce documentation and SDLC evidence supporting FFIEC, PCI DSS, and SOC 2 requirements • Stay current on emerging threats, developer tooling, and secure engineering patterns — sharing insights regularly with the team Requirements What You Bring to the Table • Native level fluency in English and Hebrew (written and verbal) - Must • 7+ years in software security engineering, including 4-5 years in AppSec of secure development enablement roles • Strong coding ability in one or more modern languages (JavaScript/TypeScript, Python, Go, Java, C#) • Proven experience teaching, mentoring, or enabling developers through training, code reviews, threat modeling, internal talks, or champion programs • Deep understanding of secure coding principles, common vulnerability classes, API security, and secure design techniques • Hands-on Experience with AppSec tooling (SAST, SCA, IaC scanners, secret scanning) and integrating them into the developer workflows • Experience with cloud native architectures and security in AWS or Azure • Familiarity with compliance and security frameworks (PCI DSS, SOC 2, FEIEC, NIST, OWASP, ASVS) • Excellent communication and storytelling skills - able to break down complex issues into simple, practical guidance • A collaborative mindset and passion for building a positive, empowering security culture Why You’ll Love Working Here • Flexible hybrid model: 3 days a week in the office • ₪1,000 net monthly wellness benefit – from therapy to Pilates to your kid’s art class • Full Keren Hishtalmut, private health & dental insurance • Donation matching, volunteering days, team outings, and mentorship programs • A mission-driven culture that values ownership, trust, and meaningful impact Next Step Hit Apply!

Description We’re growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity. About the Company: Claroty is a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. We’re a fast-growing, award-winning team where innovation meets purpose—and we want you to help us define the future of cybersecurity. About the Role: In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise. As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy. Responsibilities As a Senior Security Operations Engineer, your responsibilities will include: • Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security. • Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP). • Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments. • Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments. • Provide recommendations regarding direction of systems and applications to help secure access, data and assets. • Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure Claroty systems are properly protected. • Conduct research on emerging products, services, protocols, and standards relative to the information security arena. • Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations • Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc.. • Ability to work well with other technology areas to deploy security technologies. • Customer service-oriented • Strong work ethic and sense of urgency • Develop and maintain security architecture diagrams, documentation, and standards. Requirements What do you need to succeed in this role? • Minimum 5 years experience with Cybersecurity Operations • BA/BS degree in MIS/Computer Science or related degree strongly preferred (or relevant experience) • Relevant Certifications are a plus (e.g. CISSP, CEH, etc). • Fluent in both English and Hebrew • Experience with endpoint security tools, network security tools related to deployment, management, support, and troubleshooting. • Knowledge of IT security regarding ID access, data protection, system\application monitoring, system and application access. • Working Knowledge of Windows, Mac OS, and Linux OS. • Experience with the rollout of new technologies and migrations. • Knowledge of AWS, GCP security and Azure security (deployment, configuration, monitoring, etc). • Strong knowledge in SSE, ZTNA, CASB, DLP, EDR • Experience with AI security policies and tools • Knowledge of security frameworks and standards About Claroty Claroty empowers organizations to protect the mission-critical infrastructure that underpins modern life. The AI-powered Claroty Platform serves as the single source of operational truth, providing the deepest visibility and broadest protection across cyber-physical systems (CPS), leveraging five core solutions: asset inventory, exposure management, network protection, secure access, and threat detection. Claroty helps organizations operationalize CPS protection through a programmatic approach designed to reduce risk, maintain operational integrity, and meet compliance–whether in the cloud with Claroty xDome or on-premise with Claroty Continuous Threat Detection (CTD). Claroty is deployed by hundreds of organizations at thousands of sites globally. The company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America. To learn more, visit claroty.com. Claroty is widely recognized as the industry leader in CPS protection, backed by the world’s largest investment firms and industrial automation vendors. The company has been named a Leader in 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms two years in a row, a Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for CPS Protection Platforms, and a Leader and a Customer Favorite in The Forrester Wave™: Operational Technology Security Solutions, Q3 2026. Claroty has also been named to the Forbes Cloud 100 and Deloitte Technology Fast 500 multiple consecutive years. Claroty is an equal-opportunity employer committed to fostering a diverse and inclusive work environment for all. We encourage applications from candidates of ALL diverse backgrounds, and special accommodations are available upon request in all selection phases. Follow us on social media: • LinkedIn • LinkedIn Life Page • Facebook • Instagram #LI-HYBRID

Description #LI-Hybrid About DriveNets DriveNets is a leader in high-scale networking software for AI infrastructure and service providers. The company pioneered a disaggregated networking architecture that transforms the economics of large-scale networks while maximizing performance, utilization, and operational efficiency. DriveNets-powered networks are deployed by global leaders, including AT&T and Comcast, supporting more than 30% of total U.S. internet traffic. DriveNets AI Fabric delivers full-stack networking for AI infrastructures, providing the highest-performance, Ethernet-based alternative to InfiniBand. The solution is deployed by hyperscalers, NeoClouds, and enterprises worldwide. With over $1B raised, DriveNets continues to push the boundaries of modern networking infrastructure. Location: Ra'anana / Tel Aviv The Role: We are looking for a Senior Network & Security Engineer to join our dynamic IT team. • Design, deploy, and operate enterprise and datacenter network infrastructure. • Manage and troubleshoot LAN, WAN, WLAN, VPN, and security environments. • Configure and maintain routers, switches, firewalls, load balancers, and related infrastructure. • Design and implement scalable network architectures based on modern cloud and hyperscale principles. • Drive network automation using Python, Golang, Shell, or similar technologies. • Build and enhance self-service infrastructure platforms supporting engineering and lab environments. • Monitor network performance, availability, and security using automated monitoring and alerting systems. • Collaborate closely with Infrastructure, Security, and Engineering teams to implement security controls and best practices. • Participate in architecture reviews, capacity planning, disaster recovery, and operational excellence initiatives. • Mentor team members and contribute to technical leadership across Requirements • 5+ years of hands-on experience designing and operating enterprise or datacenter networks. • Strong expertise in routing and switching technologies. • Experience with network security technologies including firewalls, VPNs, IDS/IPS, and network segmentation. • Hands-on experience with BGP, OSPF, VLANs, VRFs, and modern networking concepts. • Experience with VXLAN, EVPN, MPLS, or similar overlay technologies – an advantage. • Experience with network automation and scripting (Python, Golang, Shell, or similar). • Strong troubleshooting and problem-solving skills. • Excellent communication and collaboration abilities. Preferred Experience • Fortinet, Cisco, Palo Alto, Arista, Juniper, or F5 technologies. • Datacenter and cloud-scale environments. • Kubernetes and container networking. • Infrastructure-as-Code and automation frameworks. • Network Access Control (NAC) and Zero Trust architectures. More About DriveNets Based in Israel with locations in Romania, US, India and Japan as well as extended teams, DriveNets operations cover more than twelve countries. With recognition by industry analysts and through partnerships with market leaders such as AMD, Broadcom, Dell and others, DriveNets is pushing market momentum, delivering the scale and efficiency that modern AI workloads demand. Visit our website: https://drivenets.com/company/

Description #LI-Hybrid About DriveNets DriveNets is a leader in high-scale networking software for AI infrastructure and service providers. The company pioneered a disaggregated networking architecture that transforms the economics of large-scale networks while maximizing performance, utilization, and operational efficiency. DriveNets-powered networks are deployed by global leaders, including AT&T and Comcast, supporting more than 30% of total U.S. internet traffic. DriveNets AI Fabric delivers full-stack networking for AI infrastructures, providing the highest-performance, Ethernet-based alternative to InfiniBand. The solution is deployed by hyperscalers, NeoClouds, and enterprises worldwide. With over $1B raised, DriveNets continues to push the boundaries of modern networking infrastructure. Location: Ra'anana / Tel Aviv The Role: We are looking for a Senior Network & Security Engineer to join our dynamic IT team. • Design, deploy, and operate enterprise and datacenter network infrastructure. • Manage and troubleshoot LAN, WAN, WLAN, VPN, and security environments. • Configure and maintain routers, switches, firewalls, load balancers, and related infrastructure. • Design and implement scalable network architectures based on modern cloud and hyperscale principles. • Drive network automation using Python, Golang, Shell, or similar technologies. • Build and enhance self-service infrastructure platforms supporting engineering and lab environments. • Monitor network performance, availability, and security using automated monitoring and alerting systems. • Collaborate closely with Infrastructure, Security, and Engineering teams to implement security controls and best practices. • Participate in architecture reviews, capacity planning, disaster recovery, and operational excellence initiatives. • Mentor team members and contribute to technical leadership across Requirements • 5+ years of hands-on experience designing and operating enterprise or datacenter networks. • Strong expertise in routing and switching technologies. • Experience with network security technologies including firewalls, VPNs, IDS/IPS, and network segmentation. • Hands-on experience with BGP, OSPF, VLANs, VRFs, and modern networking concepts. • Experience with VXLAN, EVPN, MPLS, or similar overlay technologies – an advantage. • Experience with network automation and scripting (Python, Golang, Shell, or similar). • Strong troubleshooting and problem-solving skills. • Excellent communication and collaboration abilities. Preferred Experience • Fortinet, Cisco, Palo Alto, Arista, Juniper, or F5 technologies. • Datacenter and cloud-scale environments. • Kubernetes and container networking. • Infrastructure-as-Code and automation frameworks. • Network Access Control (NAC) and Zero Trust architectures. More About DriveNets Based in Israel with locations in Romania, US, India and Japan as well as extended teams, DriveNets operations cover more than twelve countries. With recognition by industry analysts and through partnerships with market leaders such as AMD, Broadcom, Dell and others, DriveNets is pushing market momentum, delivering the scale and efficiency that modern AI workloads demand. Visit our website: https://drivenets.com/company/

Mobileye is looking for an Senior Information Security Engineer who will be part of the InfoSec team. The InfoSec team manages all security aspects such as inbound and outbound access, defense systems and protection in Israel and abroad. In this role, you will be responsible for all related security systems end to end, you will need a strong technical understanding as well as learn new content areas quickly. You will be part of the Information Technology department with a relationship with all the departments in the company and the CISO's team. This position requires on-site presence at our Jerusalem campus 3-4 days per week during the first three months. Following this period, a hybrid arrangement with some work from our central Israel sites may be possible. What will your job look like? • Manage Firewall. NAC, Proxy, Mail gateways, VPN and more • Configure and troubleshoot security devices, infrastructure and systems • Planning, researching and deploying security policies • Optimize current solutions and implement new solutions • Provide L2 support All you need is: • 5+ years of hands-on experience with relevant systems in security and cyber fields in large and dynamic environments. • Experience with firewall systems, including configuration, monitoring, troubleshooting, and implementation of network security policies. • Hands-on experience working with Windows and Linux environments. • B.Sc. in Computer Science / Information Systems / Security certifications (Security +, CISSP, ...) - advantage. • Strong teamwork and knowledge-sharing skills. Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!

NVIDIA is looking for an outstanding IT Engineer to join our Enterprise Security Team. This is a hands-on engineering role for someone who wants to build, automate, and operate the identity platforms that secure NVIDIA — and who is excited about using AI to make our infrastructure more visible, more stable, and easier for our users to work with. You will operate, automate, and maintain our Identity and Directory platforms, and implement the capabilities that move us toward a Zero Trust future. You will work day-to-day with IT, Cybersecurity, and business technologists to deliver on our IAM roadmap and keep our hybrid identity environment secure, simple, and stable. Do you want the opportunity to build an extraordinary user experience that delivers on both securing our company and enabling our company to move at the speed of light? What you'll be doing: • Be a key member of the Global Identity and Access Management (IAM) team, with a focus on Active Directory and Entra ID. • Operate and continuously improve our hybrid AD/Entra ID environment with a focus on security, simplicity, and stability — including upgrades, incidents, and third-party integrations. • Implement identity security capabilities that support NVIDIA's enterprise Zero Trust architecture, including SSO, conditional access, MFA, and privileged access. • Build automation and agentic workflows for identity lifecycle, access requests, directory hygiene, and service account governance — reducing manual toil and improving the end-user experience. • Implement identity and access controls for agentic and non-human identities (NHI) — service accounts, workload identities, machine credentials, and AI agents — covering provisioning, scoping, credential rotation, and lifecycle cleanup. • Apply AI tooling to improve infrastructure visibility and stability: telemetry, health checks, anomaly detection, and AI-assisted diagnostics that surface issues before users report them and give end users faster, self-service resolution. What we need to see: • B.Sc. or M.Sc. in Computer Science or related field, or equivalent professional experience, with 5+ years of hands-on Active Directory experience and 2+ years with Entra ID / Azure AD in a hybrid environment. • Solid understanding of core IAM concepts: single sign-on, multifactor authentication, conditional access, federation, privileged account management, secrets and password vaulting, and Zero Trust principles. • Hands-on scripting and automation skills in PowerShell or similar, plus practical experience using AI tools in day-to-day engineering work. • A strong security mentality, with the ability to quickly learn and adapt to new technologies. • Excellent interpersonal skills and hands-on experience collaborating with global teams.