Security Engineer jobs in Israel

Job Description ServiceNow seeks a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is ServiceNow's awareness, response, and investigation capability for post-release vulnerabilities in ServiceNow-developed products and service offerings. This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform—vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events. This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them—and will use that fluency to lead fixes to completion under incident pressure. You will help shape how ServiceNow responds to product security vulnerabilities at scale and the technical rigour of the entire response capability. The coverage provided by this role is: • Sunday: 10:00 - 18:00 UTC. • Monday: 08:00 - 16:00 UTC. • Tuesday: 08:00 - 16:00 UTC. • Wednesday: 08:00 - 16:00 UTC. • Thursday: 08:00 - 16:00 UTC. Due to the nature of incident response and the needs of the business, coverage may change. Additional coverage outside of stated hours may be required in response to significant incidents. Key Responsibilities Lead Through Significant Security Events • Demonstrate technical and organisational leadership during these events—bringing structure and clear decision-making under pressure. • Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events. Reduce Exposure Window • Drive coordinated response across affected releases, balancing risk and remediation feasibility. • Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organisational boundaries. • Verify fix completeness and guard against incomplete mitigations before release. Drive the CVE & Coordinated Disclosure Process • Collaborate with external security partners, vendors, and researchers on coordinated disclosures, aligning timelines and messaging across parties. • Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication. • Represent PSIRT's technical position in multi-party coordinated disclosures and researcher engagements. Pursue After-Action Outcomes & Continuous Improvement • Author postmortems and drive lessons learned to closure following product security incidents. • Participate in retrospectives following significant product security events, translating findings into concrete process and technical improvements. • Contribute to partner teams tracking product security risk themes and trends across the portfolio. • Contribute to SDLC improvement areas, feeding incident learnings upstream into secure development practices. Qualifications To be successful in this role, you have: Qualifications • Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience; or equivalent experience. • Minimum of 5 years of auditing source code for security vulnerabilities. • Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call. • Ability to read and comprehend Java and JavaScript code. • Strong understanding of common Java and JavaScript vulnerabilities. • Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualisation. • Development of proof-of-concept exploits for web application vulnerabilities. • Written and verbal communication of complex security risks clearly to both technical teams and leadership. • Experience with leading fix implementation and release coordination across engineering, product, and test/release teams. • Proficiency in deep-dive product security investigations and root-cause analysis spanning design, code, configuration, and operational layers. • Exploit analysis and proof-of-concept development that distinguishes real exploitability from theoretical risk. • Familiarity with SDLC integration, CI/CD pipelines, SaaS threat models, and secure development practices. • Experience leading a CVE disclosure process, including CVE assignment, scoring (CVSS), and advisory publication. Preferred Qualifications • Experience in a PSIRT or similar function for a major software or SaaS platform. • Recognized expertise in product security incident response, vulnerability research, or application security within a software or SaaS environment. • Experience conducting vulnerability assessments on the ServiceNow platform. • Experience with emerging threats: AI-specific attack vectors, software supply chain security, and SDLC tooling security. • Experience with cloud infrastructure (AWS, Azure, GCP) and containerized environments. • Relevant security certifications (e.g., OSWE) or demonstrated equivalent expertise. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.  Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

Job Description ServiceNow’s Product Security organisation is building a dedicated Security R&D function — a software engineering team that builds security capabilities with the same engineering rigour as ServiceNow’s product organisation. We are looking for a Staff Security Engineer to be a core contributor on this team. Security R&D operates in two complementary modes: open contribution to product engineering — writing code alongside product teams where security expertise adds value — and developing its own security capabilities, including internal tooling, externally facing product features, AI-powered security automation, and third-party integrations. This is a new team being stood up in Petah Tikva, Israel, co-located with ServiceNow’s AI Security Research team. You will help shape the team’s engineering practices and technical foundation from day one. This role reports to the Sr. Engineering Manager, Security R&D. What You Will Do Build Security Capabilities • Design and develop security tooling, automation, and platform services that operate at ServiceNow’s enterprise scale. • Contribute code directly into ServiceNow product engineering codebases, embedding security capabilities where they have the highest impact. • Build AI-powered security automation by integrating in-house models and third-party services into production workflows. • Leverage ServiceNow’s platform — Agent Framework runtime, ACL enforcement, data layer, and workflow engine — to create security capabilities that external vendors cannot match. Collaborate Across Teams • Work closely with the AI Security Research team on tooling for AI agent security, translating research insights into production-grade engineering. • Partner with product engineering teams during open contribution engagements, earning trust through code quality, reliability, and delivery. • Participate in design reviews, code reviews, and architecture discussions, contributing to the team’s technical standards and engineering culture. Grow with the Team • Help define engineering best practices as a founding member of the Security R&D team. • Contribute to hiring and onboarding as the team scales, helping maintain the engineering bar. • Stay current on emerging AI/ML technologies and security threats, bringing new ideas into the team’s roadmap. What Makes This Role Unique • Builder-led culture: Security R&D is defined by engineering output, not advisory reviews. We build production security capabilities with the same discipline as product engineering. • Dual operating model: The team both contributes directly to product engineering and develops its own security products and services. • Platform advantage: ServiceNow owns the entire stack — runtime, ACLs, data layer, workflow engine. You will build security capabilities that no external vendor can replicate. • Founding team: This is a new team being built from scratch. You will shape its engineering culture, technical standards, and identity from day one. • AI intersection: The role sits alongside the AI Security Research team, placing you at the frontier of securing AI systems at enterprise scale. Qualifications To be successful in this role, you have: • 8+ years of professional software engineering experience building production systems at scale. • Bachelor’s degree in Computer Science, Engineering, or a related technical field. • Strong hands-on proficiency in Python and Java. You write production code daily and take pride in software craftsmanship. • Strong, hands-on experience and a solid understanding of AI/ML pipelines, LLM integration, and agentic frameworks, including their underlying architectures and workflows. • Solid foundation in distributed systems, cloud-native architectures, and building services that meet enterprise requirements for scalability, reliability, and performance. • Experience working in collaborative engineering environments, contributing to shared codebases with high code quality standards. • Interest in or exposure to security engineering concepts — application security, infrastructure security, identity systems, or trust & safety. A security mindset is valued; deep security expertise can be developed on the team. Preferred • Experience with security tooling development, SSDLC automation, or building security features into a product. • Familiarity with container/Kubernetes environments, cloud security, or infrastructure-as-code. • Experience in a SaaS or platform company building multi-tenant enterprise software. • Experience working in a globally distributed engineering team. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .

Job Details: Job Description: Join us to help build the next generation of AI hardware solutions. You will be part of a team developing cutting-edge HW for the AI domain, where we push the boundaries of what silicon can do for emerging AI workloads. We are continuously developing modern and effective working methods, including hands-on adoption of AI tools throughout the chip development flow. The environment is fast-paced and intellectually stimulating. Your Mission: Integrate hardware security IP into the SoC/die and define the HW security architecture protecting a large-scale data center's compute, network, and control infrastructure. Responsibilities: • Integrate third-party and internal HW security IP (Root of Trust, crypto engines, HSMs, TRNG, key vaults) into the die; write and own the RTL/integration code wiring these units into the SoC. • Author RTL for security units, glue logic, fuse/OTP interfaces, and bus/fabric (AXI/AHB/NoC) connections; manage clock/reset/power domains and CDC. • Develop integration test benches, run lint/CDC/synthesis-readiness checks, and support DV/verification of the embedded security IP. • Architect platform Root of Trust, secure boot, attestation, and confidential computing (TDX/SGX/SEV-equivalent) across the server fleet. • Threat-model the full stack (silicon, firmware, BMC, supply chain) and define HW mitigations against physical and side-channel attacks. • Drive secure key management, debug-lockdown, fuse provisioning, and crypto offload for tenant isolation at scale. • Collaborate closely with architecture, design verification, physical design, firmware, and platform teams throughout the development cycle. Qualifications: • B.Sc., M.Sc., or Ph.D. in Electrical Engineering, Computer Engineering, Computer Science, or a related field. • 5+ years of experience in RTL development, SoC design, or hardware security integration. • Proficient in Verilog/SystemVerilog RTL, IP integration, bus protocols (AXI/AHB/NoC); lint, CDC, synthesis, DV flows. • Expertise in roots of trust, TEEs, secure boot/firmware, crypto IP, side-channel mitigations. • Plus: fuse/OTP provisioning, supply-chain security, multi-tenant cloud isolation. Job Type: Experienced Hire Shift: Shift 1 (Israel) Primary Location: Israel, Haifa Additional Locations: Israel, Petah-Tikva Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Position of Trust N/A Work Model for this Role This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. * Job posting details (such as work model, location or time type) are subject to change. *

About Payoneer Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories. By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence. Role summary We are seeking an Application Security Engineer to join our Cyber Team in Payoneer. As an Application Security Engineer, you will be responsible for overall Application Security standards, guidelines, and requirements for different groups in Payoneer. Your expertise in secure architecture, design, and SSDLC will play a crucial role in ensuring the security of our products and the protection of our sensitive financial data. This is a strategic position that offers an opportunity to shape and drive the security initiatives of our cutting-edge fintech solutions. Glilot Hybrid Full-time What you’ll do: • Review and approve secure architecture designs for new features and use-cases for Payoneer customers, partners, integrators or in-house solutions, considering best practices, regulatory requirements and business objectives, as well as many AI initiatives and use-cases. • Collaborate with cross-functional teams (mainly R&D and DevOps/DevSecOps) to define security requirements and design robust security controls for systems, both on-prem and in the cloud. • Define CI/CD processes and gates, such as SAST, SCA, Secret scanning and image/containers scanning during CI and Runtime. • Provide technical guidance and expertise to internal teams in selecting and integrating in-house solutions or third-party vendors. • Stay up-to-date with the latest security technologies, threats, and trends, and provide recommendations for continuous improvement. • Serve as a subject matter expert on application security, providing guidance and mentorship to other teams in the company. • Optimizing AppSec processes and workflows through AI-powered tooling and automation. • Assist in creating or researching for security solutions – solving security challenges, both on-prem, in the cloud and in the AI domain. Who you are: • 4+ years of experience in cybersecurity, including at least 2 years of experience in Application Security \ Product Security. • In-depth understanding of CI/CD workflows and methodology (Azure DevOps and Github is an advantage). • Familiarity with AI/agentic architectures and the MCP, with hands-on experience building custom skills and agents for security use cases. • Excellent communication and collaboration skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders. • Multi-task skills: ability to work on multiple projects in parallel, providing application security support for different teams and initiatives in the company. Advantages: • Bachelor's degree in Computer Science, Information Security, or a related field. • Experience/familiarity (hands-on) with security tools integrated into our CI/CD and production environments such as SonarQube, Snyk, Wiz and others. • Strong knowledge with AWS, Azure and GCP as well as their associated security services and features. • Strong knowledge and experience with Kubernetes platform and services. • knowledge with Microsoft enterprise ecosystem, including Active Directory/Azure Entra ID, Office 365 APIs, Azure Cloud services. • Familiarity with GitHub and GitHub Actions, including experience working with CI/CD pipelines and source code management workflows. • Ability to read and review code, particularly in .NET, Node.js, and Python. • Additional skills related to Secure Software Development Lifecycle (SSDLC) and Application Security (AppSec) further enhance the candidate's value. These skills may include risk assessments, threat modeling, vulnerability assessments or penetration testing. • Experience in fintech or financial services industry. • Familiarity with regulatory requirements and compliance standards in the financial industry, such as PCI DSS, PSD2 and GDPR. #LI-AG2 The Payoneer Ways of Working Act as our customer’s partner on the inside Learning what they need and creating what will help them go further. Do it. Own it. Being fearlessly accountable in everything we do. Continuously improve Always striving for a higher standard than our last. Build each other up Helping each other grow, as professionals and people. If this sounds like a business, a community, and a mission you want to be part of, apply today. We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.

Job Description • Lead the application security team, providing strategic direction and mentorship. • Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework. • Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails. • Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities. • Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity. • Implement and manage security automation tools and processes to enhance the efficiency of security operations. • Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture. • Provide expert guidance on security architecture and design for new and existing applications. • Lead incident response efforts related to application security breaches and vulnerabilities. • Foster a culture of security awareness and continuous improvement within the organization. Qualifications • Bachelor's degree in Computer Science, Information Security, or a related field. • Minimum of 7 years of experience in application security, with at least 3 years in a leadership role. • Proven experience in implementing and managing SSDLC frameworks. • In-depth knowledge of security frameworks and methodologies. • Strong understanding of threat modeling methodologies, secure coding practices and common vulnerabilities (e.g., OWASP Top Ten). • Proficiency in programming languages such as Java, Python, C#, or similar. • Experience in implementing security tools and technologies such as ASPM, SAST, DAST in complex and high-scale environment. • Excellent communication and leadership skills, with the ability and passion to drive change across the organization. • Relevant certifications such as CISSP, CISM, or CSSLP are desirable. • Proven experience in a similar role at another leading software development company.

Job Description • Lead, mentor, and grow a team of JavaScript developers, fostering a culture of technical excellence, ownership, and continuous improvement. • Own the design, development, and maintenance of high-performance JavaScript applications and components focused on browser security. • Drive the team's technical roadmap and priorities in partnership with product managers, designers, and other stakeholders. • Conduct code and design reviews, set coding standards, and ensure quality, performance, and security best practices across the team's deliverables. • Manage team planning, task allocation, and delivery timelines while balancing hands-on contribution with leadership responsibilities. • Stay up to date with the latest browser security trends, vulnerabilities, and attack vectors to proactively guide the team in identifying and addressing potential threats. • Lead architecture and technical design discussions to drive forward-thinking solutions that meet current and future business needs. • Improve development processes, tools, and methodologies to enhance team productivity and efficiency. • Support team members' professional development through regular feedback, one-on-ones, and career growth planning. • Join sessions with customers for feedback and troubleshooting, gathering insights to enhance product functionality and address concerns. Qualifications • 8+ years of experience as a Software Developer. • 3+ years of experience leading or managing a software development team. • Coding experience in JavaScript and TypeScript. • BSc in Computer Science/Software Engineering or equivalent knowledge. • Strong problem-solving skills and the ability to analyze complex technical challenges in a fast-paced environment. • Proven ability to mentor engineers and drive team delivery. • Good communication and interpersonal skills. • Fluent English, verbal and written. Advantages: • Experience in React tools including React.js & Webpack. • Experience in client-side applications in Windows. • Experience in C#. • Experience in server-side development. • Experience in developing security products. • Experience in WASM.

Description Role Overview: As the SecOps Security Engineer at Cellebrite, you will be part of a team of security professionals responsible for defining and executing our security operations strategy, driving initiatives to enhance our overall security posture. You will identify security issues and risks, develop mitigation plans, and implement security-focused tools and services. You will also be responsible for developing and interpreting security policies and procedures, delivering training materials, and evaluating and recommending new and emerging security products and technologies. Additionally, you will participate in tier 3 security operations support and incident handling. Responsibilities: • Design, implement, and maintain security tools and controls across endpoint, identity, cloud, and network layers. • Identify security gaps and risks across the environment and develop and execute mitigation plans. • Manage and tune security platforms including EDR/EPP, PAM/EPM, NAC, VPN, web Proxy, and identity providers (Okta, Entra ID). • Administer and optimize Palo Alto firewall and Prisma Access (and Strata Cloud Manager, where applicable) policies and egress controls. • Monitor cloud environments for misconfigurations and risk using CSPM/DSPM tooling (e.g., Wiz), across AWS and other cloud providers. • Develop, document, and maintain security policies, procedures, and standards, and deliver related training materials to stakeholders. • Provide tier 3 security operations support, including advanced troubleshooting and incident handling/response. • Apply the MITRE ATT&CK framework to map threats, build detection logic, and inform mitigation strategies. • Evaluate and recommend new and emerging security products and technologies to strengthen the organization's security posture. • Conduct proof-of-concept (POC) evaluations on various security products, leading each POC end to end from scoping through evaluation and recommendation. • Leverage AI-powered tools and automation (e.g., Claude Code, LLM-based workflows) to improve efficiency in security operations, while applying MCP and AI guardrail principles to ensure secure, governed use of AI tooling. • Write and maintain scripts (Python, Bash, Batch) to automate security operations, reporting, and remediation tasks. • Collaborate cross-functionally with IT, R&D, and compliance teams to align security initiatives with business needs. • Mentor other team members as needed, sharing knowledge and best practices to strengthen overall team capability. Requirements • At least 5 years hands-on experience deploying, managing, and supporting security infrastructure in a highly available 24x7 environment from a global company. • Experience with different security solutions including web Proxy, Okta, Entra ID, EDR/EPP, NAC, VPN, EPS, PAM/EPM, PKI, etc. • Proven knowledge of Palo Alto firewalls and Prisma Access; knowledge of Strata Cloud Manager (SCM) is an added value. • Experience providing security solutions within complex environments (physical, virtual, SaaS, and IaaS). • Experience with cloud security across AWS, and similar experience/knowledge with other cloud providers such as Microsoft Azure and Google Cloud Platform (GCP). • Experience with cloud security posture and data security posture tools (e.g., Wiz, CSPM/DSPM). • Working knowledge of networking fundamentals as they relate to security (e.g., TCP/IP, DNS, VPN tunneling, network segmentation, basic routing/firewalling concepts). • Proven scripting capabilities (Python, Bash, Batch). • Advanced AI skills, including hands-on experience leveraging AI-powered tools (e.g., Claude Code, LLM-based automation) to streamline security operations, policy development, and workflow efficiency, along with knowledge of Model Context Protocol (MCP) and AI guardrails for secure and governed AI tool integration. • Knowledge of the MITRE ATT&CK framework, including mapping threats/IOAs and applying it to detection and mitigation strategies. • Professional certifications such as CISSP, CISM, or equivalent. • Bachelor's degree in Computer Science, Information Security, or a related field – an advantage. • High level troubleshooting skills. • Team player with excellent interpersonal skills. • Excellent written and verbal communication skills in both English and Hebrew. #LI-HI1