Security Engineer jobs in Israel

Job Description Role This is a principal-level security architecture and strategy role with enterprise-wide scope. You will set security direction across ServiceNow’s products and platforms, define the controls and standards that teams build against, and serve as a technical authority on complex and emerging threats, including those introduced by AI and agentic systems. You’ll also drive the use of AI to strengthen security itself, applying it to detection, triage, and security analysis. You’ll partner with security research teams to turn their findings into requirements and roadmap priorities, and represent ServiceNow’s security posture externally and to executive leadership. We’re looking for a deep security or engineering expert; experience with AI security is a plus, not a prerequisite. What you'll do • Contribute to the security strategy and reference architecture across the company’s products and platforms • Lead threat modeling for complex and novel systems, including AI and agentic systems where established patterns don’t yet exist • Define platform-wide security standards, including access-control and data-boundary models that other teams build against • Establish what secure-by-design means for new technologies, including AI, and drive adoption across engineering organisations • Set methodology and priorities for red-teaming and security assessment programs • Apply AI to strengthen security work, such as detection, triage, vulnerability discovery, and design review • Make or approve security risk decisions for high-impact initiatives that cross organisational boundaries • Represent ServiceNow’s security posture to standards bodies, industry forums, and executive leadership • Develop senior security engineers and shape the team’s technical agenda Qualifications To succeed in this role, you’ll need: • To succeed in this role, you'll need • Bachelor's, Master's, or PhD in Computer Science or a related field, or an exceptional record of impact • Experience that meets one of the qualifying backgrounds below, including design reviews, threat modeling, and risk assessment at enterprise scale • A sustained record of setting security direction across multiple teams or product lines, with standards, controls, or architecture that others adopted as their baseline • Recognised depth in at least one core security discipline, such as application, cloud, identity, cryptography, or offensive security, with working breadth across the others • Expert fluency with threat modelling methodologies (e.g., STRIDE, attack trees) and security frameworks such as the OWASP Top 10, to the point of extending, critiquing, or contributing to them • A demonstrated ability to ramp quickly on new technology domains and reason about security where no established patterns exist • A track record of developing principal- and staff-level security leaders, and of shaping decisions with senior executives and engineering leaders • Clear, precise communication with executive audiences, and a record of influencing outcomes without direct authority Qualifying background (either path) • Security-led: 13+ years in security, with at least 3 years in principal-level roles owning architecture, risk, or threat modeling across the organization • Engineering-led: 13+ years of software engineering, including at least 3 years building or owning security-critical systems such as identity, authorization, data pipelines, distributed systems, or platform security, and a demonstrated move into security ownership at enterprise scale Bonus • Depth in AI security, including threat modeling or securing LLM, GenAI, or agentic systems • Experience with prompt injection and jailbreak defense, guardrail architecture, or AI red-teaming • Hands-on familiarity with agentic frameworks and protocols such as LangChain, LangGraph, MCP, and A2A • Experience designing identity and consent models for AI agents • Built security tooling for AI systems used beyond one team • CVEs, publications, or invited talks in security research, especially in AI or LLM security • Prior experience setting AI security strategy at a company or platform level Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .

Description We are seeking an experienced Tech Lead to manage the Domain Experts covering penetration testing, red teaming, cloud security, and ICS/OT (SCADA) security. This role is dedicated to the quality of intent analysis for cybersecurity prompts that an AI system could not confidently classify as benign or malicious, across the domains of the team. You need to be a hands-on expert in your own field, with enough working knowledge of penetration testing, red teaming, and cloud security to judge prompts and guidelines that cross into the other team's domains. You also need to be independent, organized, and able to lead technical experts. What you'll do: • Lead and manage the Domain Experts of the team (Enterprise Red Teaming, Web Application Security, Cloud Redteaming, ICS/OT (SCADA): priorities, workload, and performance • Route incoming rows to the team's domains and rebalance freelancer capacity inside the team as row volume shifts • Track team quality (agreement and disagreement rates, QA findings) and throughput, and report to the Group Manager • Resolve escalated edge cases and prompts that span several domains, and work with the other Tech Lead when a prompt crosses into their field • Keep the annotation guidelines consistent across the team's domains and propose updates • Annotate or review directly when needed to unblock the team Requirements • Minimum of 7 years of proven, hands-on experience in penetration testing, red teaming, cloud security, or ICS/OT (SCADA) security, with deep expertise in at least one of them • Working knowledge across all domains of the team, including ICS/OT protocols (Modbus, DNP3, S7comm, OPC UA) and PLC and SCADA architectures, enough to assess and coach the Domain Experts in each • Solid working knowledge of the other team's fields: penetration testing, red teaming, and cloud security, including common attack paths, tooling, and how their techniques appear in real intrusions • At least 2 years of experience leading or mentoring technical specialists (team lead, tech lead, or senior reviewer) • Experience with quality processes such as QA sampling, calibration sessions, and quality metrics • Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation • Clear written and verbal communication in English Nice to have: • OSEP, GCPN, GIAC GICSP • Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research. About Alice Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

The Company ZEST Security offers an AI-powered risk resolution platform that enables security and DevOps teams to remediate and mitigate cloud risks at a scale and speed that wasn't possible before. The Mission ZEST's mission is to bridge the gap between identifying cloud security risks and resolving them. It's not about opening tickets; it's about closing them. Role Description Conduct security research to identify vulnerabilities in cloud environments, including detecting and addressing CVEs Lead the design and implementation of security solutions for cloud infrastructure (AWS, Azure, GCP) Assess and mitigate cloud security risks, including misconfigurations, vulnerabilities, and compliance gaps Perform penetration testing and vulnerability assessments to identify new vulnerabilities Develop and maintain security policies, standards, and procedures for cloud services Contribute to security incident response processes, providing guidance on remediation and mitigation Design and implement automation scripts for vulnerability detection and remediation Conduct research on emerging threats, security tools and methodologies to enhance the overall security posture Qualifications 2+ years of experience in cloud security, with a strong focus on vulnerability management and research (CVE detection and mitigation) In-depth experience with cloud platforms such as AWS, Azure, and Google Cloud Platform Strong understanding of security concepts such as IAM, firewalls, encryption, key management, and network security Hands-on experience with vulnerability management and cloud misconfiguration (scanning and remediation) Hands-on experiences with cloud tools such as Wiz, Crowdstrike or other CNAPP tools Proven ability to identify and mitigate cloud vulnerabilities, including research into CVEs and applying patches or security workarounds Experience with DevSecOps practices, including integrating security into CI/CD pipelines Strong understanding of security standards and frameworks such as CIS, NIST, or ISO 27001 Experience in scripting and automation for security tasks (Python, Bash, PowerShell, etc.) Excellent analytical and problem-solving skills, with strong attention to detail Strong communication and collaboration skills, with the ability to work with cross-functional teams Preferred Qualifications Relevant certifications such as AWS Certified Security – Specialty, Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), or Offensive Security Certified Professional (OSCP) Experience with Kubernetes security and container-based environments Knowledge of threat modeling and risk assessment methodologies

Every nation has data. Few can protect it. Fewer still can act on it. Dream is the sovereign AI and national cyber-defense company for governments. We help nations secure their most critical systems, connect fragmented information at a national scale, and turn their most sensitive data into decisions, all fully sovereign. This is more than a job. It's a Dream job, where you'll work at a global scale alongside some of the best AI researchers, cyber operators, and government experts in the world. The mission only works if the company behind it does. This role keeps Dream running at the scale our work demands. And our work demands a uniquely global scale. The Dream Job As a Senior Application Security Engineer, you'll plan, build, and support efforts to strengthen security across the organization. As part of our Security & Platform organization, you'll work across the software development lifecycle and the underlying cloud and platform environment. You'll own application security throughout the SDLC, including security requirements, threat modeling, secure design reviews, code reviews, application and API security testing, and production hardening. The role combines application security, cloud and platform security, and security automation. You'll partner closely with Security, Engineering, Platform, DevOps, and IT teams to build secure-by-default systems and reduce risk at scale. You'll also define and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance. This is a hands-on engineering role for someone who can move comfortably between architecture and threat modeling, code and API reviews, cloud and identity guardrails, CI/CD security controls, vulnerability remediation, and automation. The Dream-Maker Responsibilities Define, track, and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance. Own application security across the SDLC, from security requirements and threat modeling through secure design, code reviews, testing, and production hardening. Strengthen cloud and platform security by implementing scalable security controls, identity guardrails, and secure-by-default practices. Partner closely with Security, Engineering, Platform, DevOps, and IT teams to reduce security risk and improve security practices across the organization. Designing controls for multi-account or multi-cloud environments using Terraform, policy-as-code technologies such as OPA or Sentinel, or automated remediation workflows. Experience running a Security Champions, bug bounty or responsible disclosure program, or delivering hands-on secure engineering training. You'll translate technical risk into clear remediation guidance and influence engineering and leadership stakeholders through strong written and verbal communication. The Dream Skill Set 6+ years of relevant experience across security engineering, application/product security, cloud/platform security, software engineering, or infrastructure engineering, including substantial hands-on security ownership. Deep expertise in either application/product security or cloud/platform security, with demonstrated hands-on capability across the other domain. Strong programming and automation skills; proficiency in Python is required, with Go or Bash beneficial, together with practical CI/CD and infrastructure-as-code experience. Experience embedding security into the SDLC through threat modeling, secure design and code review, application/API testing and CI/CD controls, supported by strong knowledge of OWASP risks and secure design principles. Hands-on experience securing at least one major public cloud platform, including IAM, workloads, networks, logging, organization-level guardrails, containers/Kubernetes, and secrets and key management. Experience with relevant application and cloud security tooling, such as SAST, DAST, SCA, secrets scanning, CSPM/CNAPP, and cloud-native security services. Hands-on experience with Kubernetes admission controls, image and dependency scanning, supply-chain security and CIS benchmarks. Familiarity with OWASP ASVS/SAMM, NIST SSDF/CSF, MITRE ATT&CK, SOC 2 or ISO 27001 control environments. Experience securing AI-assisted development workflows, enterprise AI tools, agent-based integrations, or MCP-connected systems. Never Stop Dreaming... If you think this role doesn't fully match your skills but are eager to grow and break glass ceilings, we'd love to hear from you!

Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact. A Day in the Life Medtronic Cranial, Spine, and Therapy (CST) is seeking a Sr. Product Security Engineer to join our R&D organization and help secure innovative medical device and cloud-based solutions across the Aible Ecosystem. This role is primarily focused on product cybersecurity for medical devices, connected platforms, and cloud applications, while also including relevant governance, risk, and compliance (GRC) responsibilities that support product security activities and regulatory requirements. It is not a traditional IT security or dedicated GRC role. The ideal candidate will have deep experience partnering with engineering teams to embed cybersecurity into real-time systems, cloud-native applications, connected devices, and other product security environments. This individual will play a key role in strengthening the security posture of our products while enabling innovation, scalability, and patient safety. This position is based in Caesarea, Israel, and follows a hybrid work arrangement with a minimum of two days per week onsite.The selected candidate will support the implementation of advanced cybersecurity controls, identify and mitigate product vulnerabilities, and contribute to initiatives that improve cyber resilience across the product lifecycle. This person will serve as a technical subject matter expert together with current Prodcut Securty Engineer SME, collaborate across functions, and help drive long-term improvements in product security strategy and execution. Primary Responsibilities • Partner with engineering teams to implement cybersecurity requirements throughout the product development lifecycle, from design through post-market support. • Conduct threat modeling, security risk assessments, and vulnerability analyses across medical devices, cloud applications, and connected ecosystems. • Support the design and implementation of security controls including secure boot, encryption, secure communications, software update mechanisms, and access controls. • Apply cybersecurity standards, frameworks, and secure development practices to strengthen product security and reduce risk. • Evaluate security findings, recommend mitigations, and support remediation activities with development teams. • Collaborate with software, systems, cloud, quality, regulatory, and product teams to achieve secure-by-design outcomes. • Support product cybersecurity governance, risk, and compliance activities related to regulatory and organizational requirements. • Provide technical guidance on emerging cybersecurity threats, industry trends, and product security best practices. Required Qualifications • Bachelor’s degree and 7+ years OR master’s degree and 5+ years of experience in product security, application security, cybersecurity engineering, or related cybersecurity roles. • Experience securing cloud applications within a regulated industry environment. • Experience conducting threat modeling, security risk assessments, and vulnerability analysis. • Knowledge of cybersecurity frameworks and standards including NIST and OWASP. • Experience partnering with engineering teams to identify and mitigate technical security risks. Preferred Qualifications • Experience with secure software development lifecycle (SDLC) and secure-by-design practices. • Experience with medical device cybersecurity standards including IEC 81001-5-1, ISO 14971, and FDA cybersecurity guidance. • Experience supporting regulatory cybersecurity submissions for medical devices or healthcare software. • Experience with cloud-connected medical devices, digital health platforms, or connected healthcare ecosystems. • Security certifications such as CISSP, CompTIA Security+, CSSLP, or equivalent. Physical Job Requirements The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.  ‌ ‌ Recruitment Fraud Alert We are aware of phishing scams targeting job seekers. Please keep the following in mind: Apply only through official Medtronic channels. All legitimate Medtronic recruiting communications come from approved Medtronic platforms and official @medtronic.com email addresses. Medtronic will never ask for payment or sensitive personal information (such as bank account or Social Security details) during early stages of the hiring process. Any such requests are not legitimate. If you receive a suspicious message claiming to be from Medtronic, do not respond, click links, or open attachments. If you have any questions, concerns regarding the authenticity of a communication alleged to have been made by or on behalf of Medtronic, please contact us immediately at [email protected]. Benefits & Compensation Medtronic offers a competitive Salary and flexible Benefits Package A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage. ‌ This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).

Overview We’re looking for an experienced and driven Senior Security Engineer to join our STORM security research group and help shape the security posture of Microsoft Specialized Cloud systems from the ground up. As part of our mission to embed security throughout the development lifecycle, you’ll lead security design reviews, threat modeling, and architectural security assessments across a wide range of technologies, from OS internals and virtualization to cloud platforms, containerized environments, application security, and AI-enabled systems. This role combines deep security engineering and architecture expertise with a forward-looking approach to AI-assisted security engineering. You’ll be expected to reason deeply about complex systems and review designs hands-on, while also using and building AI-powered capabilities that make security analysis more effective, scalable, and repeatable. This is a high-impact role for security engineers who thrive on technical depth, enjoy building, and want to influence secure design at scale. Responsibilities 🔍 What You’ll Do • Lead security design and architecture reviews and structured threat modeling engagements for complex systems. • Analyze systems and architectures to identify trust-boundary violations, architectural vulnerabilities, unsafe assumptions, and opportunities for security-driven redesign. • Partner closely with engineering and security teams to influence architecture early in the product lifecycle and guide teams toward secure design patterns. • Perform security analysis using a combination of deep manual investigation and AI-augmented workflows, applying engineering judgment to validate findings and challenge assumptions. • Design, prototype, and build AI-assisted security capabilities that augment design review, threat modeling, architecture analysis, vulnerability discovery, and other security engineering workflows. • Experiment with new approaches for combining security expertise, automation, and AI to improve the scale, depth, and consistency of security reviews. • Communicate security findings, design tradeoffs, and recommended mitigations clearly to both technical and non-technical stakeholders. • Drive security hardening and security-driven redesign efforts that address systemic weaknesses rather than individual vulnerabilities. • Help evolve our security engineering methodology, tooling, and practices as AI changes how both products and security analysis are built. Qualifications • Strong experience in security engineering, security architecture, or related technical security roles. • Deep technical knowledge in one or more of the following areas: • Operating system internals, including Windows/Linux, memory management, boot security, or platform security. • Virtualization, confidential computing, cloud architecture, or container security. • Containerized environments incl. Kubernetes and AKS • Application security and secure software development across services, APIs, and distributed systems. • Cloud-native security, including identity, secrets management, isolation, and service-to-service trust. • Experience building with modern AI technologies to solve real engineering or security problems and designing workflows where AI augments expert analysis 🌟 Preferred Qualifications • Expertise in structured threat modeling, architectural risk analysis, and reasoning about complex systems and trust boundaries. • Ability to prototype and build tools rather than only consume existing security tooling. • Experience integrating LLMs or AI agents with existing engineering workflows, tools, data sources, or analysis pipelines. • Experience applying AI to security problems such as threat modeling, design analysis, code analysis, vulnerability discovery, or security automation. • Understanding of security challenges introduced by AI-enabled systems and the ability to threat-model systems incorporating AI components. • Experience with scalable security analysis techniques, including static analysis, dynamic analysis, code analysis, or custom security automation. • Prior expertise and experience with Azure-based solutions and services • Strong understanding of secure coding and code review principles. 🤝 Leadership & Collaboration • Strong sense of ownership and responsibility. • Excellent communication skills, with the ability to articulate complex security issues and design tradeoffs clearly and persuasively. • Proven ability to lead cross-functional technical engagements and influence engineering teams without direct authority. • Analytical and curious mindset with a strong drive to understand how systems actually work. • Comfortable navigating ambiguity and working on problems where neither the security answer nor the engineering solution is predetermined. • Builder mindset: willing to experiment, prototype, iterate, and turn promising ideas into capabilities that other security engineers can use. 📈 Experience & Impact • 6+ years of experience in security engineering, architecture, software engineering, or related roles. • Demonstrated success leading security design reviews, threat modeling, or architectural security assessments for complex systems. • Track record of identifying and helping mitigate significant architectural or system-level security weaknesses. • Experience influencing engineering decisions and driving security improvements across organizational boundaries. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description Ox Security secures the AI-driven SDLC from prompt to production. We eliminate critical, real-time risks from AI code generation through cloud runtime by doing what conventional tools can’t: unifying development and cloud context to stop vulnerabilities right at the source. At OX, we’re building the future of cybersecurity for the AI era. If you’re looking to work on disruptive technology with an amazing team, you belong here. We’re growing fast and looking for an AI Security Team Leader to join our Engineering Team and play a key role in leading the development of our cutting-edge AI security products (VIBESEC). This is a high-impact, cross-functional role where you’ll work closely with Product, Design, and other Engineering teams, helping us deliver high-quality, customer-centric security solutions in a fast-evolving domain. If you’re highly accountable, adaptable, and business-value driven, and excited about cybersecurity, cutting-edge AI, and fast-paced startup challenges, we’d love to meet you. Responsibilities What You’ll Be Doing • Lead & Mentor: Lead a high-performing engineering team developing next-gen AI security products in a dynamic, rapidly changing domain. • Drive Value: Work closely with Product and customers to understand business requirements and transform them into robust, high-quality technical solutions. • Cross-Functional Ownership: Collaborate end-to-end with Product, Design, and other R&D teams to execute complex cross-company projects. • Technical Guidance: Provide architectural overview and technical mentorship to your team, stepping in when necessary to guide proper technical decisions and implementations. • Delivery & Quality: Own the execution, quality, and delivery of products running on endpoints and cloud environments in a high-velocity startup environment. Requirements What We’re Looking For • 2+ years of experience in leading software development teams. • 5+ years of hands-on experience in backend development using high-level programming languages. • Strong ownership (accountability), high independence, and ability to manage multiple stakeholders. • Proven ability to guide technical decisions and solutions for complex systems. Nice to Have: • Proven experience with microservices architecture. • Background in cybersecurity / Endpoint Agent development. • experience delivering customer-value-driven products in fast-paced startup environments.

Description At Sunbit, we're building financial technology that puts people first. By combining intelligent decisioning with a personalized, transparent approach, we help consumers access the payment options that are right for them while empowering merchants to build stronger customer relationships. Engineering is at the heart of how we make that happen. We build scalable distributed systems, cloud-native services, intelligent data platforms, and AI-powered solutions that enable real-time financial decisions at scale. By leveraging modern engineering practices and integrating AI into both our products and development workflows, we solve complex technical challenges, accelerate innovation, and continuously improve the way we build software. Every service, model, and architectural decision we make directly impacts our products, our customers, and the future of financial technology. About the Role We are looking for an Application Security Engineer to join our Security Engineering team. You will take ownership of strengthening security across Sunbit’s products, services, and development lifecycle. This includes identifying and addressing security gaps in application architecture and code, APIs and service-to-service communication, authentication and authorization flows, open source dependencies and third-party libraries, CI/CD pipelines and build systems, secrets handling, and AI-powered product features. As a Security Engineer at Sunbit, you will dig into how our systems actually work, understand where the real risk is, and decide what needs to be built to close it. Some problems are solved by changing an architecture or a design pattern, others by implementing a new control, embedding a security gate into the pipeline, integrating and tailoring a security platform, or writing something from scratch. You will own that decision and the implementation that follows. The Security Engineering team works as a group of all-rounders. Alongside your core focus, you will contribute to cloud and infrastructure security, corporate IT security, detection engineering, incident response, and our growing AI security work, both securing AI workloads and using AI to make our own security capabilities better. What You Will Work On • Identify security gaps across Sunbit’s applications, services, and development lifecycle, then translate them into practical technical solutions. • Design and implement scalable security controls that address root causes and fit our architecture and engineering practices. • Review architectures and designs, run threat modeling, and guide R&D teams toward secure patterns before code is written. • Secure APIs, authentication and authorization flows, service-to-service trust, data handling, and multi-tenant boundaries. • Own the secure development lifecycle end to end, including security gates in GitHub Actions, SAST, SCA, secrets scanning, and dependency and supply chain risk. • Build reusable security capabilities, libraries, paved-road patterns, and developer-facing tooling that make the secure path the default path. • Build custom AI agents and AI-powered capabilities that improve our security tools, workflows, visibility, and control. • Understand and secure AI-powered product features, including their data access, identities, permissions, integrations, and runtime behavior. • Partner with R&D, DevOps, Infrastructure, Data, AI, and IT teams from initial analysis through implementation, adoption, and validation. Requirements • At least 5 years of hands-on experience in application security, product security, security engineering, DevSecOps, or a related field. • Strong experience securing production applications and services, including APIs, microservices, and cloud-native workloads on AWS and Kubernetes. • Proven ability to identify security gaps, design appropriate controls, and take solutions through implementation. • Hands-on experience with secure code review, threat modeling, API security, and common vulnerability classes in modern application stacks. • Practical experience embedding security into CI/CD and GitOps workflows, including GitHub Actions, SAST, DAST, SCA, and secrets scanning. • Strong understanding of authentication and authorization, session management, secrets management, cryptography in practice, TLS, SSO, SAML, and OIDC. • Ability to read and write code in at least one modern language, and enough engineering depth to work as a peer to developers. • A broad security mindset, strong engineering judgment, and the ability to collaborate effectively with technical teams. Nice to Have • Experience building AI agents, LLM-based tools, or AI-powered security capabilities. • Experience assessing or securing AI workloads, including data exposure, prompt injection, agent permissions, and third-party integrations. • Experience with ASPM platforms, WAF, bot and abuse prevention, or runtime application protection. • Familiarity with cloud and infrastructure security, Terraform, policy as code, and container security. • Offensive security background, such as penetration testing, bug bounty, or exploit development. • Experience working in a regulated fintech or financial services environment. Recruitment Fraud Disclaimer We’ve been made aware of fraudsters impersonating Sunbit employees during the hiring process. Please note that all official communication will come from an @sunbit.com email address, through our applicant tracking platform @sunbit.comeet-notifications.com or directly via LinkedIn. We will never ask for your age, Social Security number, bank account details, payment of any kind, or other unrelated personal information during the application process. Our hiring process always includes interviews, either by phone, zoom, or in person, before any offer is made. If something feels suspicious, please contact us at HR to confirm. We ask that you contact HR only about potential instances of fraud. HR does not reach our recruiting team directly. Your application directly through the posting is the best way to ensure that your candidacy is reviewed by our team. Due to the volume of applications, we will not respond to nor forward emails about your candidacy that are sent to HR directly, and your email about your application will be deleted from our systems.

Description We run Crown Coins, a high-traffic social gaming platform on AWS and GCP. You'll join the Platform team and own day-to-day security across our cloud, identity, edge and endpoints. You'll automate that work with AI, and work with engineering to stop bot abuse and fraud before it costs us money. Responsibilities • Cloud security (AWS + GCP): Enforce least-privilege IAM and org guardrails (SCPs and GCP org policies). Monitor and triage cloud security findings and audit logs. Harden our EKS clusters. • Identity and access: Run JumpCloud and Google Workspace as our identity layer: SSO, MFA, access reviews and device policies. • Edge protection: Own Cloudflare WAF, bot management, rate limiting and Zero Trust Access. Tune rules against signup bots, credential stuffing and abuse. • Browser and endpoint security: Manage Island Enterprise Browser policies, including DLP, data boundaries and access to sensitive admin tools. • Detection and response: Build alerts and write runbooks. Lead security incidents alongside SRE on-call, and follow through on post-incident fixes. • AI agents that triage security alerts, enrich them with context and suggest or apply a response Requirements • 2+ years in SecOps, cloud security, or SRE/DevOps with a strong security focus • Hands-on experience with AWS IAM and AWS security services, plus working knowledge of GCP • Admin experience with an identity provider (JumpCloud, Okta or Google Workspace), including SAML/OIDC SSO, MFA and SCIM • Experience with Cloudflare (WAF, rules, Zero Trust) or a comparable edge security platform • Terraform, Git and Python, plus hands-on experience building automation with LLMs or AI agents (such as Claude, OpenAI or MCP-based tools) Nice to have • Google Cloud Professional Cloud Architect certification • Island or another enterprise browser, or MDM tools • Kubernetes/EKS security: RBAC, network policies and image scanning • Fighting bots or fraud in gaming, fintech or e-commerce • SIEM or detection engineering experience • Other certifications such as AWS Security Specialty, Security+ or CCSK

Description Paragon is a fast-growing Cyber intelligence company, that is rapidly establishing itself as a key player in the industry. We are a young innovative company with a cutting-edge product based in Tel Aviv. We are looking for a Security Engineering Team Lead. You will lead a team of Security Engineers and SecOps Engineers are responsible for designing and implementing robust security controls across Paragon’s on-prem and cloud infrastructure. You will drive the security roadmap, collaborate with cross-functional teams (Infrastructure, DevOps, Research, Development), and ensure all security measures align with business and regulatory requirements. This role is both strategic and hands-on: you will be expected to lead by example in architecture, implementation, and continuous improvements. Responsibilities • Lead and mentor a team of Security Engineers and SecOps Engineers. • Implement, configure, and maintain information security systems. • Reviewing and constantly improving the company's infrastructure security architecture. • Ensure that all the security aspects and requirements that were designed and approved by the CISO together with the security team are implemented and meet the infrastructure design. • Take a critical part in designing the company’s strategy and policies for information security Requirements • 6+ years of experience in Information Security, with at least 3 years in a leadership role. • Excellent communication skills and the ability to collaborate across multiple teams • Hands-on experience in information security systems implementation such as EDR, Proxy, DLP, and email protection. • Deep understanding of Linux security. • Proven track record in designing and implementing complex security systems. • Basic understanding of the lifecycle of advanced security threats, attack vectors, and exploitation methods. • Strong technical understanding of network fundamentals. • Scripting in Bash, Python • Experience with regulatory or compliance standards (ISO27001, NIST, etc.) – an advantage. • Basic knowledge of host-based forensics and OS artifacts – an advantage

Description MER Group is looking for a Network & Security Engineer to join a professional and challenging role in the fields of networking and information security. The position involves working in diverse customer environments and includes the design, deployment, implementation, maintenance, and troubleshooting of network and information security systems. We are looking for a hands-on professional with independent working skills, a strong service-oriented approach, initiative, and a desire to learn and develop professionally. Responsibilities • Design, deploy, implement, and maintain network and information security infrastructures. • Perform hands-on work in complex networking environments and Data Center environments. • Configure, manage, and maintain enterprise Firewalls. • Deploy and manage VPN solutions. • Work with Routing & Switching infrastructures at L2/L3 levels. • Troubleshoot networking and information security issues and provide professional support to customers. • Perform changes, upgrades, and migrations in customer environments. • Prepare and maintain technical design and documentation, including HLD and LLD documents. • Prepare architecture diagrams and network topology diagrams. • Work with monitoring, control, and alerting systems. • Work directly with customers and provide professional end-to-end service. Requirements Requirements • At least 3 years of hands-on experience in networking and information security. • Significant experience working with enterprise Firewalls. • Experience deploying, managing, and maintaining VPN solutions. • Hands-on knowledge and experience in Routing & Switching. • In-depth understanding of TCP/IP protocols. • Knowledge and hands-on experience in L2/L3 environments. • Experience working in Data Center environments. • Experience with networking and information security products from vendors such as Check Point, Juniper, Cisco, Palo Alto, and other leading vendors. • Strong troubleshooting and problem-solving skills, including the ability to analyze complex networking issues. • Experience preparing HLD and LLD documents. • Experience with Microsoft Visio and creating architecture and network topology diagrams. • Good command of Microsoft Office, particularly Word and Excel, for documentation, specification, and preparation of professional documents. • Fluent English, including reading, writing, and understanding technical documentation. • Ability to work independently as well as part of a team. • Ability to work directly with customers and provide a high level of service. • Initiative, personal responsibility, and a strong desire to learn and develop professionally. Advantageous Knowledge & Experience • Experience in IT / System Administration environments. • Experience with Active Directory and GPO. • Familiarity with Microsoft 365. • Experience working with Windows Server. • Experience managing users and permissions. • Knowledge of DNS and DHCP. • Familiarity and experience with virtualization environments such as VMware, Hyper-V, and Proxmox. • Experience with backup systems. • Experience with monitoring systems. • Experience using AI tools for work, documentation, analysis, and process optimization. • Experience with EDR (Endpoint Detection & Response) systems. • Experience with NAC (Network Access Control) systems. • Professional certifications in networking and information security. • Valid security clearance – an advantage. Personal Skills • Strong self-learning ability. • Technical thinking and strong problem-solving skills. • Excellent interpersonal and customer service skills. • Ability to work in a multi-tasking environment with multiple customers. • Responsibility, thoroughness, and the ability to lead tasks from end to end. • Ability to plan, document, and present technological solutions in a professional and clear manner.

Daylight is a security services company delivering Managed Agentic Security Services (MASS), including MDR, threat hunting, security data lake, and more, through a fundamentally different architecture than traditional security services providers. Daylight's architecture combines an agentic platform that runs the full cycle from detection to response with security experts from IR and threat hunting backgrounds. The platform collects identity and business context across systems to investigate alerts and continuously learns your environment. Security experts validate decisions, feed insights into the platform, optimize detections, and take over in case of an incident. The result: security teams move from firefighting to strategic work. We're looking for a Senior Security Engineer to join our globally distributed, high-impact security engineering team. You will design and implement detection logic, investigate alerts, and automate response mechanisms. As an early hire, you'll work closely with our platform and AI teams to shape how autonomous threat detection and response is built and delivered at scale. Responsibilities: • Lead Investigations: Triage, analyze, and respond to alerts across cloud, endpoint, and network environments with automation-first principles. • Build Detections: Write detection logic and behavioral rules as code that is clear, testable, and scalable. • Automate Response Workflows: Develop Go-based automation for enrichment, containment, and remediation playbooks. • Define Detection-as-Code Practices: Implement a detection and response framework with strong engineering fundamentals (testing, CI/CD, version • control). • Collaborate Across Functions: Partner with platform and AI teams to integrate detection logic into the broader Daylight stack. • Support DFIR: Participate in incident investigations and post-incident reviews; DFIR skills (memory, disk, or cloud forensics) are a strong plus. Requirements: • Security Operations Experience: 3+ years in detection engineering, incident response, or blue team roles. • Automation Mindset: You automate what others manually repeat. Experience building or integrating automated response systems is key. • Cloud-Native Awareness: Familiarity with detecting and responding to threats in cloud environments (AWS, GCP, or Azure). • DFIR Skills: Practical experience in digital forensics and incident response — logs, memory, containers, cloud. • Threat-Informed Thinking: Comfort with attacker tactics and techniques (MITRE ATT&CK, behavioral detection, threat modeling).

Senior Application Security Engineer About the role Unity builds the real-time 3D platform that powers games and interactive experiences, along with tools used across ads, automotive, aerospace, architecture, retail, energy, and government. Our Product Security team keeps that platform, and the software built on top of it, safe for millions of creators and their users. We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows. You will work directly with engineering teams across the US and EMEA. What you will do • Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms. • Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach. • Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required. • Secure Unity's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them. • Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths. • Investigate and respond to application security incidents, including root cause analysis and durable corrective action. • Contribute to Unity's secure development lifecycle and to compliance work. What you bring: domain expertise • 5+ years in application security, with a track record on complex, large-scale systems. • Strong command of secure coding and common vulnerability classes (OWASP Top 10 and beyond) • Hands-on secure development experience across several languages. • Practical penetration testing, security assessment, and vulnerability management experience with standard tooling (SAST, DAST, SCA, and manual techniques). • Experience with Cloud security (GCP, AWS, or Azure). • Working knowledge of authentication, authorization, cryptography, and secure architecture patterns. • Clear technical communication for both engineers and non-technical partners across regions. Preferred Qualifications • Experience in the technology, gaming industry or Ad tech. Denmark: Base Salary Range: kr702,200 – kr1,053,400 DKK grossIsreal Base Salary Range: ₪352,000 – ₪528,000 ILS gross This range reflects the anticipated base salary for this position. Beyond base salary, this role may be eligible for equity awards and participation in our company incentive plans (such as annual discretionary bonuses or sales commissions). The final offer amount will depend on several factors, including geographic location and the candidate’s relevant experience, professional background, and skill set. This range reflects the anticipated base salary for this position. Beyond base salary, this role may be eligible for equity awards and participation in our company incentive plans (such as annual discretionary bonuses or sales commissions). The final offer amount will depend on several factors, including geographic location and the candidate’s relevant experience, professional background, and skill set. Benefits At Unity, we want our team members to thrive. We offer a wide range of benefits designed to support well-being and work-life balance. Please note: Benefits eligibility, specific offerings, and coverage vary based on the country and employment status. While specific benefits vary, here are some of the ways we strive to take care of our eligible team members globally: Comprehensive health, life, and disability insurance | Commute subsidy | Employee stock ownership | Competitive retirement/pension plans | Generous vacation and personal days | Support for new parents through leave and family-care programs | Office food snacks | Mental Health and Wellbeing programs and support | Employee Resource Groups | Global Employee Assistance Program | Training and development programs | Volunteering and donation matching program Life at Unity Unity [NYSE: U] is the world’s leading game engine, powering play for more than 3 billion consumers each month. The top mobile games in the world, the most played PC indie titles, the most innovative console games, and virtually all of the top XR and Web Games are developed, deployed, and grown in Unity. Unity also enables teams across industries like automotive, manufacturing, and healthcare to design, simulate, and collaborate in 3D — closing the gap between ideas and reality. For more information, please visit www.unity.com. Unity is a proud equal opportunity employer. We are committed to fostering an inclusive, innovative environment and celebrate our employees across age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, or any other protected status in accordance with applicable law. Our differences are strengths that enable us to support the growing and evolving needs of our customers, partners, and collaborators. If you have a disability that means there are preparations or accommodations we can make to help ensure you have a comfortable and positive interview experience, please fill out this form to let us know. This position requires the incumbent to have a sufficient knowledge of English to have professional verbal and written exchanges in this language since the performance of the duties related to this position requires frequent and regular communication with colleagues and partners located worldwide and whose common language is English. This posting is intended to fill an existing vacancy, and we are committed to providing applicants with updates throughout the hiring process in accordance with applicable law. Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Unity does not accept unsolicited headhunter and agency resumes. Unity will not pay fees to any third-party agency or company that does not have a signed agreement with Unity. Your privacy is important to us. Please take a moment to review our Prospect and Applicant Privacy Policies. Should you have any concerns about your privacy, please contact us at [email protected].

Description About Cyera Come join the company building the security operating model for the age of AI. AI has changed how data is used — and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world's leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security. About the Role Join our team as a Senior Application Security Engineer. You will be a senior technical leader in the application security program, working with R&D teams to build security into how we design, build, and ship our products. You will report to the Head of Application Security and act as the technical lead for some of the program’s most important workstreams. You will help build a modern product security program that uses automation, pipeline integration, and AI-assisted workflows rather than manual review alone. You will turn standards into guardrails engineers can use, find and fix real risk in our code and architecture, and make secure development the easy path. The ideal candidate has 6–9 or more years of cybersecurity experience, including at least 4 years in application security, strong software engineering skills, and a record of influencing engineering teams and mentoring other engineers. We are looking for someone who is credible in the code, clear in their communication, and focused on outcomes. What You’ll Do • Code and Design Review: Review high-risk code and designs, and help engineers fix issues at the root rather than one finding at a time. • Pipeline Security: Build and tune security checks in CI/CD, including static and dynamic analysis, dependency and container scanning, and secrets detection, with a focus on accuracy and low noise. • Vulnerability Triage and Remediation: Triage and prioritize vulnerabilities by real risk, work with engineering owners to drive remediation, and track progress against service levels. • Software Supply Chain: Improve visibility and control of third-party and open-source dependencies, including SBOM generation and accuracy. • Automation and AI: Develop automation and AI-assisted workflows for triage, code review, and reporting that remove manual work and scale the team. • Security Testing Partnership: Work with the offensive security team and perform penetration tests and bug bounty reports, and turn findings into fixes and better standards. • Product Security Incidents: Support the PSIRT process by analyzing reported vulnerabilities, assessing impact, and helping engineering ship and communicate fixes. • Standards and Enablement: Contribute to secure coding standards, guardrails, and a paved road for engineers, and run training or office hours that make teams more self-sufficient. • Mentorship and Technical Leadership: Mentor Security Engineers, review their work, and lead workstreams and projects across R&D with limited supervision. • Agentic AppSec Fleet: Design, build, and run a fleet of AI agents that take on AppSec work at scale, such as triaging scanner findings, validating exploitability, reviewing pull requests and designs for security issues, drafting threat models, proposing fixes, and routing vulnerabilities to the right owners. Define the guardrails, human approval points, evaluation methods, and audit trail that keep agent output accurate, safe, and trusted by engineers, and report the impact on risk and review capacity. What You’ll Bring • Experience: 6–9 or more years in cybersecurity, security engineering, or software engineering, including at least 4 years in application or product security. • Application Security Depth: Strong knowledge of common vulnerability classes, secure design, threat modeling, and authentication and authorization in cloud-native, API-driven applications. • Software Engineering Skills: Strong programming skills in at least one language such as Python, Go, Java, or TypeScript, and the ability to review other engineers’ code for security issues. • Security Tooling: Hands-on experience with application security tools, including SAST, SCA, DAST, and secrets scanning, and with integrating them into CI/CD pipelines. • Cloud and Containers: Working knowledge of at least one major cloud provider and of securing containerized workloads. • Influence: Track record of working with engineering teams to get security work prioritized and done. • Mentorship: Track record of developing other engineers. • Communication: Clear written and verbal communication with engineers, product teams, and senior leaders. Nice to Have • AI and Agentic Security: Experience securing LLM-based features and agent systems, including prompt injection and data exposure risks. • Offensive Security Skills: Experience in penetration testing, vulnerability research, or bug bounty work. • Software Supply Chain: Experience with SBOM tooling, dependency management, and build integrity. • Infrastructure and Cloud Posture: Familiarity with Terraform, Kubernetes security, and cloud posture tooling. • Certifications: OSCP, CSSLP, GIAC, or similar.

Description About Cyera Come join the company building the security operating model for the age of AI. AI has changed how data is used — and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world's leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security. About the Role Join our team as a Security Operations Engineer . You will own escalated investigations end to end, lead the response to moderate-scope incidents, and improve the detections, playbooks, and automations behind our agentic SOC. This is a role for someone who wants to spend more of their time improving the system than working the queue. You will also own a domain of our customer zero program, operating the Cyera platform in our own environment and turning operator experience into product feedback. You will also help newer Security Operations Engineers grow. You will join a team that is building a modern, AI-assisted SOC from the ground up at a fast-growing data and AI security company. Your work will directly shape how we detect and respond, how our agents operate, and how our product behaves. The ideal candidate has 2 to 4 years of experience in security operations or incident response, has led real incidents, writes production-quality Python, and is comfortable building and tuning detections. What you’ll do • Investigation Ownership: Own escalated investigations from triage to closure, including correlation, scoping, and remediation coordination. • Incident Response: Lead moderate-scope incidents, serve as a core responder on major incidents, and write after-action reports. • Detection Engineering: Build and tune detections across cloud, identity, SaaS, and endpoint telemetry, with test cases and documented rationale. • SOC Automation: Improve agent workflows, enrichment, and playbooks, and measure the effect on autonomous handling and time to resolution. • Customer Zero: Own a domain of our internal Cyera deployment: posture goals, remediation with data owners, and prioritized product feedback. • Threat Hunting: Run hypothesis-driven hunts and convert findings into detections or automations. • Mentorship: Review the work of newer Security Operations Engineers, pair on investigations, and help them build engineering habits. What You’ll Bring • Experience: 2 to 4 years in security operations, incident response, or detection engineering. • Incident Response: Experience leading or co-leading incidents, including containment decisions and post-incident write-ups. • AWS Knowledge: Working knowledge of AWS security services, IAM, logging, and common cloud attack paths. • AWS Certification: AWS Certified Cloud Practitioner required; Security Specialty or Solutions Architect Associate preferred. • Python: Hands-on proficiency, with automation others rely on. • SIEM and Detection: Experience building, tuning, and maintaining detections and investigating from raw logs. • Communication: Can write a clear incident report and brief a non-technical stakeholder. Nice to have: • AI Workflows: Hands-on work with LLM applications, agent frameworks, or AI-assisted security operations. • Detection Languages: Sigma, SQL, KQL, SPL, YARA, or similar. • Data Security: Experience with DSPM, DLP, or data access governance. • Infrastructure as Code: Terraform, CloudFormation, or CDK. • Certifications: GCIH, GCIA, GCFA, AWS Security Specialty, or similar.

Description Come join the company building the security operating model for the age of AI. AI has changed how data is used — and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world's leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security. About the Role Our customers trust Cyera with their most sensitive data, and we hold our own platform to the standard we set for the industry. We meet and exceed industry security standards, and we treat that as the baseline rather than the finish line. We're looking for an Application Security Lead to own product security inside R&D and be the focal point at Cyera for validating how secure our platform is. Your mandate is continuous assurance: proving, through hands-on adversarial testing and architecture-level review, that no gaps exist across our code, infrastructure, and architecture — and keeping it that way as we ship fast. You'll map our most sensitive areas, lead research and red team exercises against our own systems, run an internal bug bounty, define how R&D reasons about risk in development and production, and keep the engineering organization exercised and ready. This is a technical leadership role under Infrastructure, serving all of R&D and partnering closely with the Security organization, Product, and Engineering leadership. You'll start hands-on, with the mandate to build the function — and the team — around you. What you’ll do • Own product security end to end and be the trusted authority on Cyera's security posture for R&D leadership, the Security organization, and our customers — able to answer "how secure is our product?" with evidence. • Lead continuous adversarial validation of our code, infrastructure, and architecture, confirming the strength of authorization, tenant isolation, business logic, and every path to sensitive data. • Maintain a living map of Cyera's attack surface and sensitive data flows, and use it to focus assurance effort where the stakes are highest. • Run threat modeling and security architecture review for new services, integrations, cloud connectors, and multi-tenant components — early enough to shape the design. • Own multi-tenancy and customer data boundaries: tenant isolation, authorization logic, secrets and key handling, and the controls that keep every customer's data unreachable from any other. • Secure our AI and agentic surfaces — prompt injection, tool and agent authorization, and model and data boundaries for autonomous systems acting on customer data. • Lead red team exercises across production and pre-production, and run an internal bug bounty that puts Cyera engineers to work on our own code with real incentives and real follow-through. • Define risk management for our development and production environments: standards, severity models, security gates, and an exception process practical enough that teams follow it — and drive findings to verified, structural resolution. • Build the paved road for secure development: secure-by-default patterns and guardrails, SAST/DAST/SCA and secrets detection tuned so signal beats noise, and a security champions network across R&D. Scale assurance through automation and self-service rather than headcount. • Keep the engineering organization exercised and incident-ready — tabletop drills, detection and forensic coverage in our own environments, escalation paths, and runbooks. • Represent product security externally, supporting customer security reviews, questionnaires, third-party penetration tests, and CISO-level conversations alongside the Security organization. Requirements What You’ll Bring • 8+ years in application security or product security, including hands-on ownership of a security program. • Deep, current expertise in authentication and authorization, multi-tenant isolation, API and web security, cryptography and secrets management, software supply chain risk, and business logic vulnerabilities. • An attacker's mindset applied to systems you didn't build. You can read unfamiliar code, form a hypothesis about how it breaks, and prove it — and you can scope and direct red team work against your own organization. • Threat modeling and security architecture review as a practiced discipline, ideally at a scale serving many engineering teams at once. • Strong engineering background: you write code (Python, Go, TypeScript, Java, or similar), understand distributed systems, and hold credible design discussions with senior engineers. • Cloud-native security depth in AWS, GCP, or Azure — IAM, network boundaries, Kubernetes, containers, CI/CD security, and infrastructure-as-code — and comfort working shoulder-to-shoulder with DevOps and Infrastructure engineers. • Experience embedding security across the development lifecycle from design through deployment, including secure SDLC processes and developer-facing tooling. • Technical leadership without authority: driving security outcomes across engineering teams through credibility, clarity, and prioritization. Fluency in SOC 2, ISO 27001, or similar — enough to satisfy them efficiently, and the judgment to know where they stop. The judgment to separate real risk from theoretical risk, and to say so plainly to engineers and executives alike. Nice to have: • Experience at a cybersecurity startup, especially one where the product itself was the trust boundary. • Experience at a cloud-native SaaS company operating a multi-tenant platform at scale. • Experience in high-consequence data environments — payments, financial services, crypto, or healthcare. • Offensive security background: penetration testing, vulnerability research, exploit development, published CVEs, or service in an elite technology unit. • Experience building or running a bug bounty program. • Security experience with AI/ML systems, LLM applications, or agentic architectures — including using AI to scale security review itself. • Experience securing data platforms or pipelines processing large volumes of sensitive data. • Experience hiring, mentoring, and growing security engineers. • Contributions to the security community: research, open-source tooling, writing, or talks.

Description Power the Future with us! At SolarEdge (NASDAQ: SEDG), we're a global leader in smart energy technology, with over 3,000 employees, offices in 34 countries, and millions of installations worldwide. Our innovative solutions include solar inverters, battery storage, backup systems, EV charging, and AI-based energy management. We're committed to making clean, green energy the primary power source for homes, businesses, and beyond. With the growing demand for electricity, the need for smart, clean energy sources is constantly rising. SolarEdge offers amazing opportunities to develop your skills in a multidisciplinary environment, covering everything from research and development to production and customer supply. Work with talented colleagues, tackle exciting challenges, and help create a sustainable future in an industry that's always evolving and innovating. Join us and be part of a company that values creativity, agility, and impactful work. We are looking for a Senior Network & Information Security Engineer to design, secure, and operate our network infrastructure. You will combine hands-on technical depth with strategic thinking to build scalable, secure architectures that support business goals, and you will lead projects end to end. Key Responsibilities • Lead network and security projects from initiation to delivery, meeting timelines and quality standards. • Design and implement secure, scalable network architectures aligned with organizational goals. • Lead security hardening initiatives across all infrastructure layers. • Work closely with the InfoSec, IT, and Cloud/DevOps teams to ensure strong integration. • Drive improvements to processes and best practices in incident management and change control. • Produce clear architecture documentation and visual diagrams. Requirements • 5+ years of experience in networking and information security. • Proven experience leading and managing projects, tasks, and cross-team activities. • Deep knowledge of networking protocols and secure routing (BGP, OSPF, etc.). • Hands-on expertise in: • Switching, routing, and wireless: Cisco and Meraki (Arista is an advantage) • Firewalls (Fortinet), VPN, IPS/UTM • Network segmentation and Zero Trust architectures • NAC (Network Access Control) • SASE solutions (Cato / Zscaler) • Infrastructure-level security hardening • Ability to create clear, professional architecture diagrams. • Excellent communication skills in English and Hebrew. Advantages • F5 load balancers and application security • Arista experience • Cloud networking and security (AWS / Azure) • Network automation (Python, Ansible, Terraform) • Relevant certifications, such as CCNP/CCIE, Fortinet NSE, CISSP, or CISM

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: • Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). • Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment • Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure • Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing • Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction • Develop secure coding standards with developer-focused documentation • Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews • Evaluate third party applications, libraries and APIs and integrations for security risk • Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: • 4+ years of professional experience in application, product or software security, operating as an individual contributor, OR as a software engineer that has pivoted into security • Strong understanding of application security vulnerabilities and attach techniques, including OWASP Top 10 and API security risks • Experience performing manual security testing of modern web applications, APIs and distributed systems • Ability to review application architecture and source code for security weaknesses • Experience integrating application security tools into modern CI/CD workflows • Familiarity with static application security testing, dynamic testing, secrets detection, container security and infrastructure-as-code scanning • Understanding of authentication, authorization, session management, cryptography, secrets management and secure API design • Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities. • Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines. Bonus: #LI-Hybrid • Exploring, partnering and implementing bleeding edge tech not readily available to others. • Experience with specific tools and tech K uses including but not limited to: Datadog, Sumologic, Torq, flare.io, GCP, Entitle, Okta, Orca, GitLab, Prisma Benefits & Perks: #LI-Hybrid • Monday to Thursday onsite work schedule with Fridays remote • Weekly lunches (Mon, Tues, and Thurs) and stocked kitchen with healthy snacks and beverages • 18 vacation days, 9 company holidays, 5 sick days, and 2 personal days • Stock options for every full-time employee • Paid parental leave • 401k benefit • Commuter Benefits • Competitive health, dental, and vision insurance options Compensation: $150,000—$200,000 USD Who We Are: Behind every leading health system is K Health’s AI-powered virtual care engine. Our deeply integrated model modernizes the primary care loop by using AI to put humans first. For our patients, we offer clinical AI (i.e., PatientGPT) and unparalleled access to close care gaps around the clock. For our Providers, we deliver provider-serving agentic solutions (i.e., Perfect Note) to eliminate administrative overload and burnout. And for the health systems, we deploy our top-grade Virtualists in AI-powered virtual clinics 24/7 to capture the patients' care journeys at step one, retain the journey through the system for longitudinal care, and strengthen profitability. We’re founded in 2016, headquartered in New York City, and backed by over $443.5M from leading investors including Valor Equity Partners, Claure Group, Mangrove Capital Partners, 14W, Notable Capital, Lerer Hippeau, Primary Venture Partners, Comcast Ventures, PICO Venture Partners, Max Ventures, and other strategic healthcare partners. We offer competitive compensation packages based on industry benchmarks for function, level, and geographic location. Offer amounts are determined by multiple factors such as a candidate's experience and expertise. We are proud to be an Equal Opportunity Employer and consider applicants for employment regardless of race, ethnicity, religion, color, national origin, ancestry, disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, sexual orientation, pregnancy, childbirth and breastfeeding, age, citizenship, military or veteran status, or any other class protected by applicable federal, state, and local laws. We’re deeply committed to building teams as diverse as the patients we serve and strive to cultivate an environment where everyone can bring their most authentic self to work. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our users. We are committed to maintaining the integrity of our hiring process and ensuring a safe environment for all candidates. All communication for job offers from K Health will come from email addresses ending in @khealth.com. K Health will never ask you to provide financial information about yourself during the recruitment process. We will never use personal email accounts or other domains for official correspondence. Our official job postings are only listed on our official website and reputable job boards. Be cautious of job offers from sources other than these platforms.

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: • Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). • Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment • Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure • Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing • Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction • Develop secure coding standards with developer-focused documentation • Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews • Evaluate third party applications, libraries and APIs and integrations for security risk • Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: • 4+ years of professional experience in application, product or software security, operating as an individual contributor, OR as a software engineer that has pivoted into security • Strong understanding of application security vulnerabilities and attach techniques, including OWASP Top 10 and API security risks • Experience performing manual security testing of modern web applications, APIs and distributed systems • Ability to review application architecture and source code for security weaknesses • Experience integrating application security tools into modern CI/CD workflows • Familiarity with static application security testing, dynamic testing, secrets detection, container security and infrastructure-as-code scanning • Understanding of authentication, authorization, session management, cryptography, secrets management and secure API design • Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities. • Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines. Bonus: • Exploring, partnering and implementing bleeding edge tech not readily available to others. • Experience with specific tools and tech K uses including but not limited to: Datadog, Sumologic, Torq, flare.io, GCP, Entitle, Okta, Orca, GitLab, Prisma Access Browser Who We Are: Behind every leading health system is K Health’s AI-powered virtual care engine. Our deeply integrated model modernizes the primary care loop by using AI to put humans first. For our patients, we offer clinical AI (i.e., PatientGPT) and unparalleled access to close care gaps around the clock. For our Providers, we deliver provider-serving agentic solutions (i.e., Perfect Note) to eliminate administrative overload and burnout. And for the health systems, we deploy our top-grade Virtualists in AI-powered virtual clinics 24/7 to capture the patients' care journeys at step one, retain the journey through the system for longitudinal care, and strengthen profitability. We’re founded in 2016, headquartered in New York City, and backed by over $443.5M from leading investors including Valor Equity Partners, Claure Group, Mangrove Capital Partners, 14W, Notable Capital, Lerer Hippeau, Primary Venture Partners, Comcast Ventures, PICO Venture Partners, Max Ventures, and other strategic healthcare partners. We offer competitive compensation packages based on industry benchmarks for function, level, and geographic location. Offer amounts are determined by multiple factors such as a candidate's experience and expertise. We are proud to be an Equal Opportunity Employer and consider applicants for employment regardless of race, ethnicity, religion, color, national origin, ancestry, disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, sexual orientation, pregnancy, childbirth and breastfeeding, age, citizenship, military or veteran status, or any other class protected by applicable federal, state, and local laws. We’re deeply committed to building teams as diverse as the patients we serve and strive to cultivate an environment where everyone can bring their most authentic self to work. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our users. We are committed to maintaining the integrity of our hiring process and ensuring a safe environment for all candidates. All communication for job offers from K Health will come from email addresses ending in @khealth.com. K Health will never ask you to provide financial information about yourself during the recruitment process. We will never use personal email accounts or other domains for official correspondence. Our official job postings are only listed on our official website and reputable job boards. Be cautious of job offers from sources other than these platforms.

Applying to Paxos? Our only careers site is paxos.com/careers, and we only recruit via @paxos.com email. Details below. ___ About Paxos Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it. We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world's leading financial institutions, like PayPal, Venmo, Mastercard, Interactive Brokers and Charles Schwab. About the team The Security team at Paxos protects the cloud infrastructure, crypto systems, endpoints, and network that our regulated financial platform runs on. You'll join the Detection and Response function, working alongside our 24x7 SOC, which handles first-line triage, and partnering with Product Security teams to validate that our coverage holds up against real attacker techniques. About the role The Senior Detection and Response Engineer at Paxos serves as a builder of the detections, hunts, and automations that protect our cloud infrastructure, crypto systems, endpoints, and network. You will write detections as code and automate response, and act as a purple teamer, emulating attacks alongside our Product Security teams to confirm our detections work. Our 24x7 SOC handles first-line triage, so your focus is the detection engineering, threat hunting, and validation that make our coverage effective. Strong hands-on investigation skills are expected, but they support this work rather than define it. What you'll do • Detection Coverage & Quality: Ship production-grade detections as code with measurable signal improvements—reducing false positives and closing gaps identified in purple team exercises. • Validated Defenses: Run purple team exercises with other teams to confirm detection effectiveness and identify blind spots. • Threat Hunting Program: Execute proactive hunts based on threat intelligence and convert findings into new detections and documented IOCs/TTPs. • Operational Efficiency: Build automations to accelerate investigation and triage; create and maintain runbooks and incident write-ups that make response consistent and repeatable across the team. • Detection Stack: Identify gaps and integrate best-in-class tools that increase team effectiveness and visibility across endpoints, cloud, network, and signing systems. About you • You bring 5-8+ years of experience in security operations, detection engineering, offensive security testing, or a related security engineering role — with a track record of scope growth, not just years. • You independently own complex, ambiguous, or multi-stage incidents from initial triage through containment, eradication, and recovery — making the call in the moment and building or improving the runbook afterward, rather than waiting for one to exist. • You bring deep, hands-on expertise in SIEM and EDR platforms, can design new detections from scratch, own detection strategy for a significant surface area, and meaningfully reduce false-positive rates across a rule set you own. • You can design and run purple-team exercises in partnership with other engineering teams, emulating real attacker techniques and using the findings to reshape the detection roadmap rather than just confirm what already works. • You have a strong point of view on what tools and architecture the team should invest in, not just how to use what's already there, and you make credible build-vs-buy calls. • You think like a builder and continuously find ways to automate repetitive security workflows, applying AI thoughtfully to improve the speed, consistency, and scale of investigation and response across the team. • You produce original threat intelligence assessments and run proactive threat hunts based on hypotheses, translating findings directly into new detections and a stronger detection roadmap. • You communicate fluently with engineering leadership and cross-functional stakeholders during major incidents, and your docs and retros shape team direction, not just record what happened. • You actively mentor junior members of the team, serve as a trusted technical escalation point, and have a track record of measurably accelerating others' growth. • You're comfortable participating in an on-call rotation and can act as incident commander when needed — driving structural fixes that prevent a class of incidents from recurring, not just one instance. Important Notice for Paxos Applicants Fraudulent accounts sometimes pose as Paxos recruiters on LinkedIn and other platforms, and fake websites sometimes impersonate our careers site. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information. To verify a legitimate Paxos opportunity: • Our only official careers site is paxos.com/careers • We only use @paxos.com email addresses • We never ask for payment or financial details to apply, interview, or work here • For technical roles, we do not perform a coding interview without prior screening by our engineering team Thanks for your interest in Paxos!