Security Engineer jobs in Israel
Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. . The Role As AI capabilities accelerate across the bank, we need an engineer to design and enforce safe AI usage—protecting customer data, preserving model integrity, and meeting our regulatory obligations. You'll be the architect of guardrails, tooling, and policies that make AI both secure and useful for product and internal teams. This isn't about slowing things down; it's about building the trust layer that lets innovation move fast without breaking things. Who You Are You're a security engineer who's excited about the AI wave—someone who sees LLMs and Agentic AI as fascinating puzzles to secure, not just threats to mitigate. You've spent 5+ years in Security Engineering, AppSec, or Cloud Security, and at least 1–2 of those years have been spent getting your hands dirty with LLMs, AI Agents and MCPs. You understand how agentic frameworks (LangGraph, CrewAI, AutoGen, and similar) orchestrate multi-step tool use—and where trust boundaries break down. You've assessed or secured AI-powered coding agents (Claude Code, GitHub Copilot, Cursor) and understand the unique risks of AI with filesystem, terminal, and API access in developer environments. You're equally comfortable dissecting a prompt injection attack as you are writing a Terraform module or shipping a Python library. You know your way around AWS and/or Azure, modern app stacks (Python/TypeScript, REST/gRPC, containers/Kubernetes), and can translate security requirements into developer-friendly tooling—not just PDF policies that gather dust. You communicate clearly in English and Hebrew, thrive in regulated environments, and understand that security in financial services means mapping controls to frameworks like FFIEC, SOC 2, and PCI DSS—and actually having the evidence to prove it. What You’ll Actually Be Doing • Design enterprise AI guardrails across Azure and AWS (e.g., Azure AI Studio/Azure OpenAI, Amazon Bedrock/SageMaker): content filtering, PII redaction, prompt/response validation, and policy enforcement services. • Assess and define secure usage patterns and data governance controls for agentic frameworks and coding agents: permission scoping, tool-call authorization, least‐privileged retrieval, session isolation, and MCP server governance. • Threat model AI systems (apps, agents, MCPs, RAG, fine-tuning pipelines) using frameworks like STRIDE and the OWASP Top 10 for LLM Apps; define misuse scenarios (prompt injection/context poisoning/jailbreaks/data exfiltration) and build mitigations. • Build monitoring and telemetry: privacy-preserving prompt/response logging, sensitive-data detection, safety/eval dashboards, drift/abuse signals, and incident hooks into our SIEM. • Integrate AI security into the SDLC: reusable libraries, pre-commit checks, CI/CD gates, policy-as-code, and secure-by-default reference architectures for product teams. • Evaluate third‑party AI vendors and internal apps: security reviews, data residency and retention requirements, SSO/SCIM integrations, DPA/TPRM inputs, and continuous control testing. • Partner across Security, Data, Privacy, and Engineering to map AI controls to FFIEC, SOC 2, and PCI DSS; document control evidence for audits. • Lead/participate in AI red‑teaming: automated jailbreak/prompt‑injection tests, safety benchmarks, purple‑team exercises, and response playbooks for AI incidents. • Enable the org with concise guidelines, examples, and training on safe AI development and usage. Requirements What You Bring to the Table • 5+ years in Security Engineering/AppSec/Cloud Security (or similar), including 1–2+ years securing AI/ML or data‑intensive systems (GenAI preferred). • Hands‑on experience with AWS and/or Azure and modern app stacks (Python/TypeScript, REST/gRPC, containers/Kubernetes, IaC such as Terraform). • Practical understanding of LLM attack surfaces (prompt injection, context and goal poisoning, data leakage via tools, training/fine‑tune poisoning, model supply chain) and mitigation patterns. • Experience assessing agentic architectures (LangGraph, CrewAI, or similar) and AI coding assistants (Claude Code, GitHub Copilot) for secure enterprise deployment. • Familiarity with identity and access for AI workloads (OAuth2/OIDC, service principals, role tokens, PIM), and secure secret management/KMS. • Experience implementing observability/telemetry and routing findings to SIEM; comfort balancing privacy with traceability. • Ability to translate controls into developer-friendly libraries, docs, and CI/CD checks. • Comfort working in a regulated environment and mapping controls to frameworks (FFIEC, SOC 2, PCI DSS). • Strong written communication in English and Hebrew. Nice to have • Financial services background or other high‑assurance domains. • Exposure to Duende IdentityServer, SSO/SCIM, and enterprise authorization patterns. • Familiarity with guardrail tooling (e.g., Azure AI Safety features, Amazon Bedrock Guardrails) and policy engines (OPA/Rego). • Prior work in AI red‑teaming or safety evaluation harnesses; contributions to OSS or published talks. Why You’ll Love Working Here • Flexible hybrid work model: three days a week at our Jerusalem office • Monthly wellness reimbursement – from therapy to gel manicure, it's up to you • Full Keren Hishtalmut, private health and dental insurance • Volunteer days, donation matching, Yoga and Pilates • A supportive, collaborative culture that puts our people first Next Step Hit Apply!
Description We are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered. . The Role This role focuses on ensuring the security and compliance of cloud infrastructure by implementing and maintaining robust security controls across AWS environments. The position involves automation for security monitoring, adhering to best practices, and collaborating cross-functionally with other teams. Who You Are A strong individual contributor who takes pride in delivering high-quality security outcomes while collaborating closely with peers and stakeholders. You are able to build trust, provide thoughtful input, and continuously grow your technical and operational expertise. You are passionate about exploring new technology and using it to make an actionable impact to the future of fintech. You can balance the needs of the business and the team's goals with strong value for code quality and adherence to implementing best practices. A highly skilled AWS Security Engineer with additional FinOps expertise to ensure the security and compliance of our cloud infrastructure. You are able to implement and maintain robust security controls across AWS environment. You are passionate about best practices, automation for security monitoring, and collaborating with other teams. What You’ll Actually Be Doing • Cloud Security Implementation: Contribute to the design and implementation of security measures across AWS environments to ensure systems are secure, compliant, and aligned with industry best practices. Including implementation, automation and development of security policies • Conduct regular security assessments, control testing, and audits to proactively identify risks and vulnerabilities (and support remediation efforts with partner teams) • Collaboration with Internal Teams: Work closely with internal teams to integrate security best practices into development and operational workflows • Security Automation & Infrastructure Management: Design and implement automation strategies for security monitoring, auditing, and incident response • Cost Efficiency through Security: Contribute to cloud cost management by optimizing cloud resources without compromising on security. • Incident Response & Threat Management: Participate in incident response efforts to support timely identification, analysis, containment, and remediation of security threats. Contribute to post-incident reviews, help maintain incident response playbooks, and support internal teams by sharing learnings and updated procedures. Requirements What You Bring to the Table • Proficiency in Hebrew and English language with excellent written and verbal communication skills • AWS Certified Security Specialty - plus • AWS Certified Solutions Architect - Professional - plus • Experience with Azure cloud security, including relevant certification (Azure AZ-104 Administrator) • In-depth knowledge of AWS security services (e.g., IAM, GuardDuty, CloudTrail, VPC security) • Expertise in cloud security architecture, including identity and access management, encryption, network security, and application security. • Strong skills in Linux, Bash, Terraform, Jenkins, Containers/Docker, and programming languages such as Python and JavaScript • Experience in security automation and incident response in cloud environments • Experience with endpoint security, including endpoint management and investigation tools, supporting endpoint-based investigations and response, working with XDR and DLP technologies and workflows (alert triage, investigation, containment, and remediation), and familiarity with the Microsoft security ecosystem (e.g., Microsoft Defender, Intune, Sentinel, Purview). A plus if you have • AWS Certified Solutions Architect – Associate • Experience working in a collaborative environment with cross-functional teams, embedding security into development, operations, and infrastructure workflows • Familiarity with FinOps practices, with the ability to balance security measures with cost-efficient strategies Why You’ll Love Working Here • Flexible hybrid work model: three days a week at our Jerusalem office • Monthly wellness reimbursement – from therapy to gel manicure, it's up to you • Full Keren Hishtalmut, private health and dental insurance • Volunteer days, donation matching, Yoga and Pilates • A supportive, collaborative culture that puts our people first Next Step Hit Apply! Privacy Notice: Cross River https://www.crossriver.com/legal/privacy-policy-crt
Description We’re growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity. About the Company: Claroty is a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. We’re a fast-growing, award-winning team where innovation meets purpose—and we want you to help us define the future of cybersecurity. About the Role: In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise. As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy. Responsibilities As a Senior Security Operations Engineer, your responsibilities will include: • Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security. • Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP). • Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments. • Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments. • Provide recommendations regarding direction of systems and applications to help secure access, data and assets. • Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure Claroty systems are properly protected. • Conduct research on emerging products, services, protocols, and standards relative to the information security arena. • Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations • Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc.. • Ability to work well with other technology areas to deploy security technologies. • Customer service-oriented • Strong work ethic and sense of urgency • Develop and maintain security architecture diagrams, documentation, and standards. Requirements What do you need to succeed in this role? • Minimum 5 years experience with Cybersecurity Operations • BA/BS degree in MIS/Computer Science or related degree strongly preferred (or relevant experience) • Relevant Certifications are a plus (e.g. CISSP, CEH, etc). • Fluent in both English and Hebrew • Experience with endpoint security tools, network security tools related to deployment, management, support, and troubleshooting. • Knowledge of IT security regarding ID access, data protection, system\application monitoring, system and application access. • Working Knowledge of Windows, Mac OS, and Linux OS. • Experience with the rollout of new technologies and migrations. • Knowledge of AWS, GCP security and Azure security (deployment, configuration, monitoring, etc). • Strong knowledge in SSE, ZTNA, CASB, DLP, EDR • Experience with AI security policies and tools • Knowledge of security frameworks and standards About Claroty Claroty empowers organizations to protect the mission-critical infrastructure that underpins modern life. The AI-powered Claroty Platform serves as the single source of operational truth, providing the deepest visibility and broadest protection across cyber-physical systems (CPS), leveraging five core solutions: asset inventory, exposure management, network protection, secure access, and threat detection. Claroty helps organizations operationalize CPS protection through a programmatic approach designed to reduce risk, maintain operational integrity, and meet compliance–whether in the cloud with Claroty xDome or on-premise with Claroty Continuous Threat Detection (CTD). Claroty is deployed by hundreds of organizations at thousands of sites globally. The company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America. To learn more, visit claroty.com. Claroty is widely recognized as the industry leader in CPS protection, backed by the world’s largest investment firms and industrial automation vendors. The company has been named a Leader in 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms two years in a row, a Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for CPS Protection Platforms, and a Leader and a Customer Favorite in The Forrester Wave™: Operational Technology Security Solutions, Q3 2026. Claroty has also been named to the Forbes Cloud 100 and Deloitte Technology Fast 500 multiple consecutive years. Claroty is an equal-opportunity employer committed to fostering a diverse and inclusive work environment for all. We encourage applications from candidates of ALL diverse backgrounds, and special accommodations are available upon request in all selection phases. Follow us on social media: • LinkedIn • LinkedIn Life Page • Facebook • Instagram #LI-HYBRID
Company Overview At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. Department Overview We are a specialized team developing mission-critical solutions for the defense sector. We operate in a highly secure and dynamic environment, where our work directly impacts large-scale and complex defense projects. We are currently focusing on bringing in an experienced Cybersecurity Engineer, and this role will be pivotal in helping us achieve our team's goals. Job Description We are looking for an experienced Cybersecurity Engineer to play a key role in operating, integrating, and leading security solutions across the organization. This position involves deep hands-on work in tech-rich environments, end-to-end ownership of enterprise-grade security solutions, and close collaboration with cross-functional teams. Key Responsibilities • Operations integration: deployment, configuration, tuning, and optimization of cybersecurity solutions across On-Premises and Enterprise environments (Firewalls, WAF, PAM/PIM, NAC, Endpoint Security, and Database Security). • Threat detection & remediation: defining SIEM/XDR rules, analytics, and detection logic, as well as driving remediation plans based on penetration testing (PT) findings and risk assessments. • Vendor & technology management: managing day-to-day interfaces with security vendors, leading Tier-3 troubleshooting, and managing complex integrations. • Guidance & support: providing technical leadership, guidance, and advanced escalation support to internal SOC and NOC teams. • Innovation & research: continuously researching, evaluating (POCs), and implementing new security tools and industry methodologies. Basic Requirements • 3+ years of hands-on experience operating and deploying at least 2 of the following: Firewalls, WAF, PAM/PIM, NAC, Endpoint Security, and Database Security. • B.Sc. in Computer Science / Engineering, OR background in a military technology unit, OR equivalent industry experience. • A mandatory formal cybersecurity certification. • Willingness to undergo a Level 2 Security Clearance process. • High self-learning capability, excellent interpersonal skills, and a strong team-player mindset. Nice-to-Haves: • An active Level 2 Security Clearance. • Hands-on experience with solutions from Fortinet, Symantec, or Imperva. • Deep knowledge of SIEM rule writing, analytics, and playbook creation. • Recognized certifications (e.g., CISSP, CISM) or official vendor certifications. • Experience in high-security, heavily compliant environments. Location: Beer Sheva area. Scope: Full-time, long-term position. Travel Requirements None Relocation Provided None Position Type Experienced Referral Payment Plan No Company Motorola Solutions Israel Limited EEO Statement Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic. We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world. If you’d like to join our team but feel that you don’t quite meet all of the preferred skills, we’d still love to hear why you think you’d be a great addition to our team.
About Us Riskified empowers businesses to unleash ecommerce growth by taking risk off the table. Many of the world’s biggest brands and publicly traded companies selling online rely on Riskified for guaranteed protection against chargebacks, to fight fraud and policy abuse at scale, and to improve customer retention. Developed and managed by the largest team of ecommerce risk analysts, data scientists and researchers, Riskified’s AI-powered fraud and risk intelligence platform analyzes the individual behind each interaction to provide real-time decisions and robust identity-based insights. Riskified is proud to work with incredible companies in virtually all industries including Booking.com, Acer, Gucci, Lorna Jane, GoPro, and many more. We thrive in a collaborative work setting, alongside great people, to build and enhance products that matter. Abundant opportunities to create and contribute provide us with a sense of purpose that extends beyond ourselves, leaving a lasting impact. These sentiments capture why we choose Riskified every day. About the Role The Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption – governing AI assistants, coding agents, and MCP integrations while keeping employees productive. You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team. What You'll Be Doing • Operate and maintain our corporate security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controls • Experience hardening endpoints and enforcing device policy via MDM/EDR – security baselines, disk encryption, local admin restrictions, and USB/peripheral controls • Monitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, and SaaS • Maintain identity security controls – SSO/MFA coverage, privileged access, joiner/mover/leaver, and access reviews • Secure our SaaS footprint – security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platforms • Implement and maintain DLP controls across email, endpoints, and SaaS • Run endpoint patching and vulnerability management, and coordinate remediation with owning teams • Run POCs and rollouts of IT security tools – evaluating vendors, testing controls, and deploying them in collaboration with IT and external vendors • Secure the company's use of AI tools – implement guardrails for AI assistants, coding agents, and MCP integrations, and build detections for AI-specific threats such as prompt injection and data exfiltration via connectors Qualifications • Experience operating EDR/XDR, IdP/SSO, and MDM platforms (CrowdStrike, Okta, IRU/Jamf or equivalents) • 4+ years of hands-on experience as a security engineer in a cloud-native / SaaS-first company • Hands-on experience implementing and tuning DLP controls across email, endpoints, • Experience in a cloud native high-scale SaaS or fintech environment • Hands-on experience with LLM-based tools and agents (coding agents, AI assistants, MCP) and a solid understanding of their security risks – prompt injection, tool/connector abuse, data leakage, over-permissioned integrations • Proven hands-on experience with incident response and forensic investigation in SaaS environments • Experience assessing SaaS and third-party integrations (OAuth scopes, API access, data flows) • Strong communicator, able to explain security risks to technical and non-technical stakeholders • Professional English (written and spoken) • Bachelor's degree in Computer Science, Information Security, or equivalent practical experience Life at Riskified We are a fast-growing and dynamic tech company with 750+ team members globally. We value collaboration and innovative thinking. We’re looking for bright, driven, and passionate people to grow with us. Our Tel-Aviv team is currently working in a hybrid of remote and in-office work. We have recently moved to our new space in Tel Aviv - check it out here! Some of our Tel Aviv Benefits & Perks: • Equity for all employees, Keren Hishtalmut, pension • Private medical insurance, extra time off for parents and caregivers • Commuter and parking benefits • Team events, fully-stocked kitchen,lunch stipend, happy hours, yoga, pilates, functional training, basketball, soccer • Wide-ranging opportunities to volunteer and make an impact • Commitment to your professional development with global onboarding, skills-based courses, lunch & learns • Awesome Riskified gifts and swag! In the News Geektime: Riskified Goes Public Walla!: Happy Hour at the Riskified Offices Geektime Insider: A look at Riskified Tel Aviv Globes: Riskified to contribute the highest amount up to date to Tmura Globes: Riskified is among Israel’s fastest growing companies TechCrunch: Riskified Prevents Fraud on Your Favorite E-commerce Site Riskified is deeply committed to the principle of equal opportunity for all individuals. We do not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, disability, veteran status, or any other status protected by law.
AppsFlyer’s Security team is looking for a highly skilled and security-savvy Application Security Engineer to lead our product and application security efforts. In this role, you will drive security design, ensure secure coding practices, and validate our services and environments against the highest security standards. You will work closely with our R&D and Product teams to identify, mitigate, and prevent security risks throughout the software development lifecycle (SDLC). You will own security initiatives, mentor developers on security best practices, and play a key role in shaping the security posture of AppsFlyer’s products. The ideal candidate is highly motivated, eager to learn, and has a “security by design” mindset. This role provides career growth opportunities, enabling you to deepen your expertise in AppSec, DevSecOps, and cloud security. What you'll do: • Partner with development and product teams to integrate security best practices into the SDLC • Lead threat modeling and architecture security reviews to proactively identify and mitigate risks • Conduct security assessments, including code reviews, vulnerability scans, penetration testing, and secure product design reviews • Stay up to date with emerging security threats, vulnerabilities, and industry trends, ensuring AppsFlyer remains ahead of evolving risks. • Support and contribute to security incident response activities, including root cause analysis and post-incident improvements • Automate security processes and integrate security tools within CI/CD pipelines • Develop and deliver secure coding training to engineering teams What you have: • 3+ years of experience in Application Security, Penetration Testing, or Product Security in a SaaS company • Deep understanding and hands-on experience of web application security, including OWASP Top 10, authentication, encryption, and secure coding principles • Proficiency in scripting or programming languages (Terraform, Python, JavaScript, Go, etc.) for security automation and infrastructure. • Experience with cloud security best practices (AWS, GCP, or Azure) • Strong communication skills, with the ability to explain security risks and recommendations to technical and non-technical stakeholders, including executive management • Experience working with large-scale, complex R&D environments Bonus Points: • Hands-on experience with DevSecOps and integrating security tools into CI/CD pipelines • Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience) • Being introduced by an AppsFlyer team member As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners. “As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In.” Oren Kaniel, CEO
Come join the organization that is redefining security for the AI era. As one of the fastest-growing startups ever, we enable teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. Trusted by security teams all over the world, we have a proven track record of success and a culture that values world-class talent. Not to mention, we're now powered by Google, meaning we offer our customers an AI-powered platform that harnesses Google’s Threat Intelligence and Security Operations to better detect, prevent, and respond to threats across all environments, allowing for further innovation. Our Wizards from all over the globe work together to protect the infrastructure of our customers, including over 65% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re honored to be a leading player in a massive and growing market, and we continue to look for exceptional Wizards who are eager to make a significant impact on our team. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our momentous growth. Come join our team and help us create secure cloud environments that allow even the best companies to move faster, all while having some fun! Minimum Qualifications • 5+ years of hands-on experience in Product Security, Cloud Security Engineering, or DevSecOps. • Experience with AWS platforms and services (equivalent experience in Azure and GCP also considered), Kubernetes (AWS EKS), and container infrastructure. • Experience with foundational cloud networking (VPCs, Security Groups) and cloud IAM at scale. • Hands-on experience writing Infrastructure as Code (Terraform) and developing security scripts/automation in Python, Go, or Shell. Preferred Qualifications • Bachelor's degree in computer science or a related field and / or candidates with equivalent job experience in lieu of a degree. • Experience leading Threat Modeling and Security Architecture Reviews with software engineering / R&D teams. • Experience with cloud detection, security monitoring, and live Incident Response operations. • Experience with CNAPP, CSPM, or CIEM solutions. About the Job We're looking for a Security Engineer - Wiz Product to spread the power of Wiz. The ideal candidate will have experience performing security reviews, vulnerability management, and detection and response operations in cloud-native environments. You’ll get to collaborate with our software development and DevOps teams to secure Wiz’s products, CI/CD infrastructure, and production infrastructure. You’ll also have the opportunity to influence our product roadmap by utilizing Wiz-for-Wiz to assess, monitor, and harden our environments. Responsibilities • Lead threat modeling and security design reviews with R&D and Product teams - identifying and mitigating architecture risks early in the development lifecycle. • Drive vulnerability management and remediation - actively writing IaC (Terraform), submitting code PRs, and developing security automations (Python/Go) to resolve risks. • Extend cloud detection and response capabilities - authoring detection rules, monitoring cloud environments, and investigating live security incidents across our production infrastructure • Act as "Customer Zero" by leveraging Wiz to protect Wiz - dogfooding new product features in our massive multi-cloud environment and directly shaping the product roadmap. • Partner with our DevOps and Wiz Federal teams - hardening CI/CD pipelines, container/Kubernetes infrastructure, and extending security controls to FedRAMP environments. • Enable engineering teams to deliver secure-by-design cloud and AI solutions without slowing down development velocity. Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship. This role does not offer visa sponsorship. Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. By submitting your application, you acknowledge that Wiz will process your personal data in accordance with Wiz's Privacy Policy.
Description Shape the Future of AI Infrastructure with VAST Data This is a rare opportunity to join one of the fastest-growing infrastructure companies in tech history, right at the epicenter of the AI revolution. Recognized by Forbes as "the future of the market," VAST Data is building the foundational enterprise software powering the AI era. We engineer platforms that capture, catalog, refine, and protect massive datasets across data centers, edge, and cloud, making real-time analytics, AI training, and inference simpler and faster than ever before. Our explosive growth is fueled by relentless engineering innovation, a customer-first mindset, and a team of fearless VASTronauts who thrive on solving computing's hardest problems. Join us at this pivotal moment in technology history and make a lasting impact on how the world processes data. We are looking for a hands-on, forward-thinking Security Engineer to join our growing security team. In this role, you will lead offensive security initiatives, build internal automation using modern workflows and AI agents, and manage cloud and infrastructure risks. You will conduct penetration tests across our architecture, analyze deep protocol flaws, write custom tooling, and take security findings from discovery all the way to resolution. Requirements Core Responsibilities: • Penetration Testing & AI Automation: Conduct comprehensive penetration tests across all components of our architecture—ranging from Web APIs down to S3 protocols—and design systems to automate routine pentesting using AI tools. • Protocol & Flaw Analysis: Leverage a deep understanding of network and application protocols to identify architectural and implementation flaws, using AI prompts and modern tooling to uncover edge-case security risks. • Tooling & Process Automation: Write custom internal security tools and leverage AI agents to automate repetitive tasks, incident responses, and continuous security workflows. Secondary Responsibilities: • Cloud Security Monitoring: Monitor and manage cloud security posture using CNAPP (Cloud-Native Application Protection Platform) tools, maintaining oversight of our cloud infrastructure and containerized environments. • Vulnerability Management & Remediation: Run and maintain regular SAST and DAST scans across operating systems, Docker containers, and source code. Own security findings from discovery through code remediation and validation. • Jira & Delivery Tracking: Manage, prioritize, and promote security Jira tickets through the full lifecycle—from initial triage and assignment through to final delivery and verification. • Software Supply Chain Security: Generate, analyze, and manage Software Bill of Materials (SBOMs) to track third-party dependencies and address supply-chain vulnerabilities. Qualifications & Skills Required Qualifications: • Offensive Security & Pentesting: Solid background in penetration testing covering APIs, microservices, cloud storage protocols (S3), and distributed network architectures. • Protocol & Code Analysis: Strong knowledge of underlying network and storage protocols with a demonstrated ability to uncover implementation flaws. Familiarity with C/C++ source code is a distinct advantage for low-level analysis and AI prompt engineering. • AI Integration: Experience or strong interest in leveraging AI agents and prompt engineering to automate security scanning, triage, and security research. Preferred Qualifications (Advantage): • Development & Automation: Proficiency in scripting/programming (Python, Go, or Bash) to build internal security tools, integrate APIs, and automate workflows. • Cloud Security Expertise: Hands-on experience with CNAPP, CSPM, or CWPP solutions in public cloud environments (AWS, GCP, or Azure). • Application & Infrastructure Security: Demonstrated experience with SAST/DAST tools, container security (Docker/Kubernetes), OS hardening, and secure code review. • Process & Ticket Lifecycle Management: Strong organizational skills to manage security backlogs, triage tickets in Jira, and collaborate cross-functionally with engineering teams to drive remediation to delivery.
Description #LI-Hybrid About DriveNets DriveNets is a leader in high-scale networking software for AI infrastructure and service providers. The company pioneered a disaggregated networking architecture that transforms the economics of large-scale networks while maximizing performance, utilization, and operational efficiency. DriveNets-powered networks are deployed by global leaders, including AT&T and Comcast, supporting more than 30% of total U.S. internet traffic. DriveNets AI Fabric delivers full-stack networking for AI infrastructures, providing the highest-performance, Ethernet-based alternative to InfiniBand. The solution is deployed by hyperscalers, NeoClouds, and enterprises worldwide. With over $1B raised, DriveNets continues to push the boundaries of modern networking infrastructure. Location: Ra'anana / Tel Aviv The Role: We are looking for a Senior Network & Security Engineer to join our dynamic IT team. • Design, deploy, and operate enterprise and datacenter network infrastructure. • Manage and troubleshoot LAN, WAN, WLAN, VPN, and security environments. • Configure and maintain routers, switches, firewalls, load balancers, and related infrastructure. • Design and implement scalable network architectures based on modern cloud and hyperscale principles. • Drive network automation using Python, Golang, Shell, or similar technologies. • Build and enhance self-service infrastructure platforms supporting engineering and lab environments. • Monitor network performance, availability, and security using automated monitoring and alerting systems. • Collaborate closely with Infrastructure, Security, and Engineering teams to implement security controls and best practices. • Participate in architecture reviews, capacity planning, disaster recovery, and operational excellence initiatives. • Mentor team members and contribute to technical leadership across Requirements • 5+ years of hands-on experience designing and operating enterprise or datacenter networks. • Strong expertise in routing and switching technologies. • Experience with network security technologies including firewalls, VPNs, IDS/IPS, and network segmentation. • Hands-on experience with BGP, OSPF, VLANs, VRFs, and modern networking concepts. • Experience with VXLAN, EVPN, MPLS, or similar overlay technologies – an advantage. • Experience with network automation and scripting (Python, Golang, Shell, or similar). • Strong troubleshooting and problem-solving skills. • Excellent communication and collaboration abilities. Preferred Experience • Fortinet, Cisco, Palo Alto, Arista, Juniper, or F5 technologies. • Datacenter and cloud-scale environments. • Kubernetes and container networking. • Infrastructure-as-Code and automation frameworks. • Network Access Control (NAC) and Zero Trust architectures. More About DriveNets Based in Israel with locations in Romania, US, India and Japan as well as extended teams, DriveNets operations cover more than twelve countries. With recognition by industry analysts and through partnerships with market leaders such as AMD, Broadcom, Dell and others, DriveNets is pushing market momentum, delivering the scale and efficiency that modern AI workloads demand. Visit our website: https://drivenets.com/company/
Description #LI-Hybrid About DriveNets DriveNets is a leader in high-scale networking software for AI infrastructure and service providers. The company pioneered a disaggregated networking architecture that transforms the economics of large-scale networks while maximizing performance, utilization, and operational efficiency. DriveNets-powered networks are deployed by global leaders, including AT&T and Comcast, supporting more than 30% of total U.S. internet traffic. DriveNets AI Fabric delivers full-stack networking for AI infrastructures, providing the highest-performance, Ethernet-based alternative to InfiniBand. The solution is deployed by hyperscalers, NeoClouds, and enterprises worldwide. With over $1B raised, DriveNets continues to push the boundaries of modern networking infrastructure. Location: Ra'anana / Tel Aviv The Role: We are looking for a Senior Network & Security Engineer to join our dynamic IT team. • Design, deploy, and operate enterprise and datacenter network infrastructure. • Manage and troubleshoot LAN, WAN, WLAN, VPN, and security environments. • Configure and maintain routers, switches, firewalls, load balancers, and related infrastructure. • Design and implement scalable network architectures based on modern cloud and hyperscale principles. • Drive network automation using Python, Golang, Shell, or similar technologies. • Build and enhance self-service infrastructure platforms supporting engineering and lab environments. • Monitor network performance, availability, and security using automated monitoring and alerting systems. • Collaborate closely with Infrastructure, Security, and Engineering teams to implement security controls and best practices. • Participate in architecture reviews, capacity planning, disaster recovery, and operational excellence initiatives. • Mentor team members and contribute to technical leadership across Requirements • 5+ years of hands-on experience designing and operating enterprise or datacenter networks. • Strong expertise in routing and switching technologies. • Experience with network security technologies including firewalls, VPNs, IDS/IPS, and network segmentation. • Hands-on experience with BGP, OSPF, VLANs, VRFs, and modern networking concepts. • Experience with VXLAN, EVPN, MPLS, or similar overlay technologies – an advantage. • Experience with network automation and scripting (Python, Golang, Shell, or similar). • Strong troubleshooting and problem-solving skills. • Excellent communication and collaboration abilities. Preferred Experience • Fortinet, Cisco, Palo Alto, Arista, Juniper, or F5 technologies. • Datacenter and cloud-scale environments. • Kubernetes and container networking. • Infrastructure-as-Code and automation frameworks. • Network Access Control (NAC) and Zero Trust architectures. More About DriveNets Based in Israel with locations in Romania, US, India and Japan as well as extended teams, DriveNets operations cover more than twelve countries. With recognition by industry analysts and through partnerships with market leaders such as AMD, Broadcom, Dell and others, DriveNets is pushing market momentum, delivering the scale and efficiency that modern AI workloads demand. Visit our website: https://drivenets.com/company/
Mobileye is looking for an Senior Information Security Engineer who will be part of the InfoSec team. The InfoSec team manages all security aspects such as inbound and outbound access, defense systems and protection in Israel and abroad. In this role, you will be responsible for all related security systems end to end, you will need a strong technical understanding as well as learn new content areas quickly. You will be part of the Information Technology department with a relationship with all the departments in the company and the CISO's team. This position requires on-site presence at our Jerusalem campus 3-4 days per week during the first three months. Following this period, a hybrid arrangement with some work from our central Israel sites may be possible. What will your job look like? • Manage Firewall. NAC, Proxy, Mail gateways, VPN and more • Configure and troubleshoot security devices, infrastructure and systems • Planning, researching and deploying security policies • Optimize current solutions and implement new solutions • Provide L2 support All you need is: • 5+ years of hands-on experience with relevant systems in security and cyber fields in large and dynamic environments. • Experience with firewall systems, including configuration, monitoring, troubleshooting, and implementation of network security policies. • Hands-on experience working with Windows and Linux environments. • B.Sc. in Computer Science / Information Systems / Security certifications (Security +, CISSP, ...) - advantage. • Strong teamwork and knowledge-sharing skills. Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!
NVIDIA is looking for an outstanding IT Engineer to join our Enterprise Security Team. This is a hands-on engineering role for someone who wants to build, automate, and operate the identity platforms that secure NVIDIA — and who is excited about using AI to make our infrastructure more visible, more stable, and easier for our users to work with. You will operate, automate, and maintain our Identity and Directory platforms, and implement the capabilities that move us toward a Zero Trust future. You will work day-to-day with IT, Cybersecurity, and business technologists to deliver on our IAM roadmap and keep our hybrid identity environment secure, simple, and stable. Do you want the opportunity to build an extraordinary user experience that delivers on both securing our company and enabling our company to move at the speed of light? What you'll be doing: • Be a key member of the Global Identity and Access Management (IAM) team, with a focus on Active Directory and Entra ID. • Operate and continuously improve our hybrid AD/Entra ID environment with a focus on security, simplicity, and stability — including upgrades, incidents, and third-party integrations. • Implement identity security capabilities that support NVIDIA's enterprise Zero Trust architecture, including SSO, conditional access, MFA, and privileged access. • Build automation and agentic workflows for identity lifecycle, access requests, directory hygiene, and service account governance — reducing manual toil and improving the end-user experience. • Implement identity and access controls for agentic and non-human identities (NHI) — service accounts, workload identities, machine credentials, and AI agents — covering provisioning, scoping, credential rotation, and lifecycle cleanup. • Apply AI tooling to improve infrastructure visibility and stability: telemetry, health checks, anomaly detection, and AI-assisted diagnostics that surface issues before users report them and give end users faster, self-service resolution. What we need to see: • B.Sc. or M.Sc. in Computer Science or related field, or equivalent professional experience, with 5+ years of hands-on Active Directory experience and 2+ years with Entra ID / Azure AD in a hybrid environment. • Solid understanding of core IAM concepts: single sign-on, multifactor authentication, conditional access, federation, privileged account management, secrets and password vaulting, and Zero Trust principles. • Hands-on scripting and automation skills in PowerShell or similar, plus practical experience using AI tools in day-to-day engineering work. • A strong security mentality, with the ability to quickly learn and adapt to new technologies. • Excellent interpersonal skills and hands-on experience collaborating with global teams.
Cato Networks is the converged network and security cloud for the AI era. As AI reshapes cybersecurity, enterprises face a dual challenge: unlocking AI’s potential while defending against AI-driven attacks. Cato addresses both through a unified, cloud-native platform, providing the visibility and context to prioritize risks and stop threats in real time across users, applications, data, and AI agents. Join us as we scale: take on ambitious technological challenges and shape the next generation of enterprise security at a company trusted by thousands of organizations worldwide. As part of this exciting journey, Cato recently joined forces with Aim Security — a fast-growing innovator redefining how organizations secure and build with AI. Backed by Cato’s global reach and powered by Aim’s startup energy, we’re building the future of AI Security together. The mission is to protect how the world adopts and builds with AI - from the world’s biggest enterprises to fast-moving disruptors. We tackle hard, unsolved problems in AI, cloud, and data security - the kind that shape the next decade of technology. Our products already serve Fortune 500 customers and forward-thinking organizations worldwide, and we’re just getting started. We’re looking for a Senior Software Developer who combines strong technical skills with product intuition and a sense of ownership. You’ll work across the stack - from infrastructure to backend services and intuitive UI/UX - building scalable, high-impact systems that shape how organizations secure their AI. What you’ll do • Own and run major features and subsystems end-to-end — you’ll take ideas from concept to production and beyond (monitoring, iteration, refinement). • Work across the full stack: infrastructure, platform, backend services, APIs, and UI/UX. You’ll be comfortable shifting between “how do we deploy this reliably” to “how does the user experience this”. • Drive team culture of ownership, craftsmanship, iteration and delivery: we’re not just about shipping features but owning the outcome, learning fast, and improving continuously. • Mentor and support other engineers: bring in the best practices of maintainability, scalability, reliability, and product thinking. What you bring • 5+ years of hands-on programming in Python, Node.js, or Go (you know one well, and you’re comfortable picking up the others). • 3+ years working with AWS, Kubernetes, and RDS (you know your way around cloud-native deployments, scaling, and persistence). • B.Sc. in Computer Science / Engineering or equivalent experience from a technological army unit. • Proven experience leading major projects: you’ve owned significant codebases or systems, taken them from design to delivery, and driven them into production. • Fullstack mindset: you’re comfortable crossing infra/devops/backend/frontend boundaries; you look at problems end-to-end. Why join us • Be part of a lean, elite team where your work doesn’t just sit in a backlog — you’ll ship real value, frequently, and see the impact. • Bridge the best of startup energy with the scale and reach of Cato Networks: you’ll build for enterprise-grade reliability and commercial scale, and also retain the innovation spirit of a startup.
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Application Security The team is responsible for the security of Nebius's main public offerings : Compute, VPC, Managed K8s, Marketplace, Managed Soperator, and others. This includes building out the Secure SDLC, threat modeling, and vulnerability management platforms. The Role We are looking for an Senior/Staff Application Security Engineer who will ensure the security of our software by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams. The ideal candidate will have a strong background in secure coding, threat modeling and building Secure SDLC. What you will do • Build and maintain Application Security Posture Management (ASPM) at the Company scale. • Automate and support SAST, SCA tools, etc as part of CI/CD pipelines. • Improving SAST, secrets detection rules. Keeping false positive rate low. • Identify, analyze, and remediate application security vulnerabilities. • Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC). • Develop and maintain secure coding guidelines for development teams. • Conduct, run threat modeling and risk assessments for new and existing applications. • Provide development teams with instruments that facilitate security-related work like threat modelling, vulnerability detection, etc. • Stay updated on the latest security threats, vulnerabilities, and mitigation techniques. • Serve as an application security subject matter expert to other teams. What we look for • 6+ years of experience in application security. • Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them. • Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. • Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary. • Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.). • Understanding of authentication protocols like SAML or OIDC. • Experience in conducting threat-modeling sessions. Bonus points • Confidence in presenting your ideas and opinions in a manner that can be challenged, while responding well to feedback. • Experience in designing, building, and maintaining security automation. • Experience in translating compliance and regulation requirements into technical specifications. • Experience in exploiting vulnerabilities in web applications, Linux kernels, containers, and networks. • Security certifications such as OSCP or OSWE. Hiring process • Recruiter's chat (30mins) • Live-coding interview (60mins) to asses basic coding skills • Security interview (60mins) to asses domain expertise • Security System Design interview (90mins) to assess practical experience • (Optional) Technical deep dive (90mins) to present a complex and impact project. • Final interview to close the hiring process (45mins) #LI-CP1 Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO. This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them. You will be responsible for implementing, managing, integrating and maintaining security systems across the organization’s IT landscape. The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices. Your responsibilities will include: • Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security. • Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms. • Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments. • Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation. • Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes. • Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy. • Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows. • Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices. We expect you to have: • 6+ years of experience in IT security, with a strong focus on System, Network, Information, Cyber. With at least 3 years in a Security Engineering role. • Proven hands-on engineering experience with enterprise security platforms - including policy authoring, tuning, incident workflow configuration, and platform administration. • Experience securing data across cloud environments and SaaS platforms, including shadow IT and unmanaged data stores. • Strong understanding of identity and access management and data access governance principles. • Experience working cross-functionally with Security, IT, Engineering, Product, and GRC teams. • Strong analytical mindset with the ability to communicate security risks clearly to technical and non-technical stakeholders. • Excellent written and verbal communication skills in English. • Proactive, detail-oriented, and ownership-driven. • Hand-on experience with multiple technologies such as: XDR (Extended Detection & Response), SWG (Secure Web Gateway), DLP (Data Leakage Prevention), Email Security, Network security (Firewalls, NAC, NDR), IGA (Identity Governance & Administration), CASB (Cloud Access Security Broker), PAM (Privileged Access Management), EPM (Endpoint Privilege Management), BAS (Breach & Attack Simulation), Vulnerability Scanners, SIEM (Security Information & Event Management), SOAR (Security Orchestration, Automation & Response), CTI (Cyber Threat Intelligence), Patch Management, TPRM (Third-Party Risk Management), EASM (External Attack Surface Management). It will be an added bonus if you have: • Experience building or scaling a security program from the ground up in a growing organization. • Experience with cloud-native security services (AWS, Azure, Google). • Knowledge of privacy and regulatory frameworks (GDPR, ISO 27001, SOC 2). • Scripting or automation skills (Python, PowerShell). • Relevant certifications such as CISSP, CISM. • BSc in Computer Science, Information Security, or a related field. • Project & people management experience. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. Role Summary We are looking for a Network Security Engineer to join our Network team. This role combines deep expertise in network engineering and cybersecurity. You will help implement end-to-end network security architectures for enterprise and data center backbone/fabric environments, work with network architects and the management team to guide these designs through review and approval with the Security team, and operate and maintain the implemented solutions day-to-day. You are expected to be hands-on with leading firewall platforms (Palo Alto, Check Point, etc.), understand complex routing and switching designs, and be comfortable implementing and troubleshooting these networks. Responsibilities • Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks. • Configure Layer 3/4 & Multi-VRF Segmentation, Security Policies, Secure Remote access. • Implement and test large hyper scale DC Security solutions : IPS/NDR solutions , AntiDDOS solutions. • Integrate NGFW platforms with modern identity providers such as Microsoft Entra ID and Okta, maintain NGFW management, automation, and logging capabilities required by the Security team. • Implement and maintain Security Capabilities, including Layer 7 application inspection, IPS, user identification, ZTNA, and SASE integrations. • Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado. • Regularly perform security hardening, vulnerability management, and patching and upgrades on network and infrastructure devices, and verify the effectiveness of these procedures. Required Qualifications • Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols) • Experience and Knowledge of Backbone & Datacenter technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN..) • Hands-on experience with next-generation firewalls (Palo Alto Networks, Check Point, or similar). • Experience with automation using Python, Go, or equivalent. • Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba, etc.). • Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID, and ZTNA. Preferred Qualifications • Good knowledge of IPv6. • Experience with automation tools (Ansible, Terraform, NetBox, SaltStack, etc.). • Experience with large-scale, highly available distributed systems. • Knowledge of Zero Trust principles and micro-segmentation approaches. • Relevant certifications (CCNP/CCIE, PCNSE, NSE 4/7) and professional working proficiency in English. • Familiarity with commercial or open-source monitoring, logging, and security analytics solutions such as Splunk; EDR/XDR platforms such as CrowdStrike; and centralized NGFW management platforms such as Panorama, Strata Cloud Manager, and FortiManager. • Bonus: Exposure to DevSecOps practices (SAST/DAST), CSPM/CWPP platforms such as Wiz, EDR, offensive security (OSCP/CPTS, red teaming), or security frameworks, standards, and regulations such as ISO/IEC 27001, NIST CSF, and GDPR. Benefits & Perks: • Competitive compensation • Career growth and learning opportunities • Flexibility and ownership • Collaborative and innovative culture • Opportunity to work on impactful AI projects • International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.
Description VPG is a global leader in precision measurement sensing technologies, helping make cars, planes, medical equipment, and consumer products safer and smarter. We're looking for a Senior Cyber Security Engineer to be the most senior hands-on member of our global security team. You'll own our core security platforms, lead the response to major incidents, and test our defenses by attacking them. We need someone who is effective from day one, self-driven, and calm under pressure. • Platform ownership: firewalls, NAC, IT/OT segmentation, Okta and privileged access, cloud/SaaS and enterprise AI tools, and OT security across our global sites. All work aligns with ISO 27001 and NIST 800-171. • Incidents and offensive security: act as the final escalation point for high-severity incidents and lead them to end. Build detections and SOAR playbooks. Lead red and purple team exercises and internal pentests based on MITRE ATT&CK and manage external testing vendors. • Guidance: mentor SOC analysts and serve as the security expert on IT and business projects. Requirements • 5+ years in cyber security, including 3+ at a senior level in incident response or offensive security • Proven experience leading real breach responses and red or purple teamwork • Strong background in Windows/AD, Linux, and networking • Hands-on experience with FortiGate, Okta, EDR, NG-SIEM, and forensics tools • Scripting in Python and PowerShell - An Advantage! • AI security experience: securing enterprise AI and LLM tools, and using AI in security operations • Self-learner who picks up new technologies independently • Organized, with strong communication and vendor management skills • Available for a compensated on-call rotation • Fluent Hebrew and English Advantage OT/ICS security, M365/Azure security, and certifications such as CISSP, Fortinet NSE, or Microsoft SC-200/AZ-500.
Job Description ServiceNow seeks a senior staff-level product security engineer to serve as a senior technical authority within the Product Security Incident Response Team (PSIRT). PSIRT is ServiceNow's awareness, response, and investigation capability for post-release vulnerabilities in ServiceNow-developed products and service offerings. This role is for a recognised expert who can operate independently and as part of a team on the most significant security issues facing the platform—vulnerabilities that require evaluating intangibles. You will lead deep-dive investigations, coordinate resolution across engineering, product, and release teams, and demonstrate calm, decisive leadership during significant security events. This is a role for someone who already understands product development cycles and the engineering and product relationships that drive them—and will use that fluency to lead fixes to completion under incident pressure. You will help shape how ServiceNow responds to product security vulnerabilities at scale and the technical rigour of the entire response capability. The coverage provided by this role is: • Sunday: 10:00 - 18:00 UTC. • Monday: 08:00 - 16:00 UTC. • Tuesday: 08:00 - 16:00 UTC. • Wednesday: 08:00 - 16:00 UTC. • Thursday: 08:00 - 16:00 UTC. Due to the nature of incident response and the needs of the business, coverage may change. Additional coverage outside of stated hours may be required in response to significant incidents. Key Responsibilities Lead Through Significant Security Events • Demonstrate technical and organisational leadership during these events—bringing structure and clear decision-making under pressure. • Partner with incident commanders, business information security leadership, engineering, and customer-facing teams to maintain clear ownership, workstream prioritization, and hand-offs during these events. Reduce Exposure Window • Drive coordinated response across affected releases, balancing risk and remediation feasibility. • Leverage an understanding of product development cycles and engineering/product partnerships to move fixes through the release pipeline without stalling on organisational boundaries. • Verify fix completeness and guard against incomplete mitigations before release. Drive the CVE & Coordinated Disclosure Process • Collaborate with external security partners, vendors, and researchers on coordinated disclosures, aligning timelines and messaging across parties. • Conduct technical accuracy reviews of external advisories, researcher write-ups, and joint disclosure content to ensure correctness before publication. • Represent PSIRT's technical position in multi-party coordinated disclosures and researcher engagements. Pursue After-Action Outcomes & Continuous Improvement • Author postmortems and drive lessons learned to closure following product security incidents. • Participate in retrospectives following significant product security events, translating findings into concrete process and technical improvements. • Contribute to partner teams tracking product security risk themes and trends across the portfolio. • Contribute to SDLC improvement areas, feeding incident learnings upstream into secure development practices. Qualifications To be successful in this role, you have: Qualifications • Minimum 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience; or equivalent experience. • Minimum of 5 years of auditing source code for security vulnerabilities. • Demonstrated leadership during significant security events or major incidents, with willingness to participate in on-call. • Ability to read and comprehend Java and JavaScript code. • Strong understanding of common Java and JavaScript vulnerabilities. • Proficiency in scripting in both Python and JavaScript for data gathering, processing, and visualisation. • Development of proof-of-concept exploits for web application vulnerabilities. • Written and verbal communication of complex security risks clearly to both technical teams and leadership. • Experience with leading fix implementation and release coordination across engineering, product, and test/release teams. • Proficiency in deep-dive product security investigations and root-cause analysis spanning design, code, configuration, and operational layers. • Exploit analysis and proof-of-concept development that distinguishes real exploitability from theoretical risk. • Familiarity with SDLC integration, CI/CD pipelines, SaaS threat models, and secure development practices. • Experience leading a CVE disclosure process, including CVE assignment, scoring (CVSS), and advisory publication. Preferred Qualifications • Experience in a PSIRT or similar function for a major software or SaaS platform. • Recognized expertise in product security incident response, vulnerability research, or application security within a software or SaaS environment. • Experience conducting vulnerability assessments on the ServiceNow platform. • Experience with emerging threats: AI-specific attack vectors, software supply chain security, and SDLC tooling security. • Experience with cloud infrastructure (AWS, Azure, GCP) and containerized environments. • Relevant security certifications (e.g., OSWE) or demonstrated equivalent expertise. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.
Job Description ServiceNow’s Product Security organisation is building a dedicated Security R&D function — a software engineering team that builds security capabilities with the same engineering rigour as ServiceNow’s product organisation. We are looking for a Staff Security Engineer to be a core contributor on this team. Security R&D operates in two complementary modes: open contribution to product engineering — writing code alongside product teams where security expertise adds value — and developing its own security capabilities, including internal tooling, externally facing product features, AI-powered security automation, and third-party integrations. This is a new team being stood up in Petah Tikva, Israel, co-located with ServiceNow’s AI Security Research team. You will help shape the team’s engineering practices and technical foundation from day one. This role reports to the Sr. Engineering Manager, Security R&D. What You Will Do Build Security Capabilities • Design and develop security tooling, automation, and platform services that operate at ServiceNow’s enterprise scale. • Contribute code directly into ServiceNow product engineering codebases, embedding security capabilities where they have the highest impact. • Build AI-powered security automation by integrating in-house models and third-party services into production workflows. • Leverage ServiceNow’s platform — Agent Framework runtime, ACL enforcement, data layer, and workflow engine — to create security capabilities that external vendors cannot match. Collaborate Across Teams • Work closely with the AI Security Research team on tooling for AI agent security, translating research insights into production-grade engineering. • Partner with product engineering teams during open contribution engagements, earning trust through code quality, reliability, and delivery. • Participate in design reviews, code reviews, and architecture discussions, contributing to the team’s technical standards and engineering culture. Grow with the Team • Help define engineering best practices as a founding member of the Security R&D team. • Contribute to hiring and onboarding as the team scales, helping maintain the engineering bar. • Stay current on emerging AI/ML technologies and security threats, bringing new ideas into the team’s roadmap. What Makes This Role Unique • Builder-led culture: Security R&D is defined by engineering output, not advisory reviews. We build production security capabilities with the same discipline as product engineering. • Dual operating model: The team both contributes directly to product engineering and develops its own security products and services. • Platform advantage: ServiceNow owns the entire stack — runtime, ACLs, data layer, workflow engine. You will build security capabilities that no external vendor can replicate. • Founding team: This is a new team being built from scratch. You will shape its engineering culture, technical standards, and identity from day one. • AI intersection: The role sits alongside the AI Security Research team, placing you at the frontier of securing AI systems at enterprise scale. Qualifications To be successful in this role, you have: • 8+ years of professional software engineering experience building production systems at scale. • Bachelor’s degree in Computer Science, Engineering, or a related technical field. • Strong hands-on proficiency in Python and Java. You write production code daily and take pride in software craftsmanship. • Strong, hands-on experience and a solid understanding of AI/ML pipelines, LLM integration, and agentic frameworks, including their underlying architectures and workflows. • Solid foundation in distributed systems, cloud-native architectures, and building services that meet enterprise requirements for scalability, reliability, and performance. • Experience working in collaborative engineering environments, contributing to shared codebases with high code quality standards. • Interest in or exposure to security engineering concepts — application security, infrastructure security, identity systems, or trust & safety. A security mindset is valued; deep security expertise can be developed on the team. Preferred • Experience with security tooling development, SSDLC automation, or building security features into a product. • Familiarity with container/Kubernetes environments, cloud security, or infrastructure-as-code. • Experience in a SaaS or platform company building multi-tenant enterprise software. • Experience working in a globally distributed engineering team. Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license. .
Description Quantum Machines (QM) is a global leader in control systems for quantum computing, a field on the verge of exponential growth. Our innovative hardware and software mark a groundbreaking approach in quantum computer control, scaling from individual qubits to expansive arrays of thousands. At the core of QM lies a passionate and ambitious team committed to reshaping the construction and operation of quantum computers. Our work is fueled by a deep understanding of customer needs, driving us to deliver unparalleled solutions in this revolutionary field. We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders. Key Responsibilities Microsoft 365 Tenant Administration • Administer and maintain enterprise-scale M365 tenants, including configuration, governance, and operational support. • Oversee service health, usage reporting, licensing, and user lifecycle management. • Maintain documentation of configurations, workflows, and operational procedures. Microsoft Intune / Endpoint Management (Full Scope) • Own all aspects of Intune administration, including: • Device enrolment (Windows, macOS, iOS/iPadOS, Android) • Configuration profiles, compliance policies, and security baselines • Autopilot provisioning, device naming policies, and lifecycle • Conditional Access integration with device compliance • Endpoint security policies (AV, firewall, ASR rules, BitLocker, etc.) Identity & Access Management (Entra ID / SSO) • Manage and secure Microsoft Entra ID (Azure AD) for identity, authentication, and access governance. • Configure and maintain SSO integrations with SaaS applications using SAML/OAuth/OIDC. • Implement and optimize: • Conditional Access policies • MFA enforcement and authentication methods policy • Privileged Identity Management • Identity Protection policies (risk-based controls) Security & Threat Protection • Deploy and manage Microsoft Defender stack relevant to the organization • Integrate and manage endpoint security posture with non-Microsoft EDR platforms, such as Sentinel One/CrowdStrike • Collaborate with Security teams to implement detection and response workflows, ensure coverage, and align with organizational policy. Messaging & Collaboration Exchange Online • Administer Exchange Online policies and configurations • Implement email security best practices and support incident response when needed. Microsoft Teams • Administer Teams policies and governance - Teams lifecycle policy, app permissions, meeting policies; External access and guest collaboration settings SharePoint / OneDrive • Administer SharePoint Online and OneDrive settings, including: • Site governance, permissions, and sharing controls • Sensitivity labels and information protection controls (if used) • Sync and storage management, auditing and access policies Azure & Cloud Infrastructure • Support Azure identity, security, and basic cloud resources relevant to M365 integrations. • Manage Azure configuration related to: • Entra ID integrations • Conditional Access • Hybrid identity (if applicable) • Azure security settings and monitoring Policy, Compliance, and Governance • Implement and maintain governance models across identity, endpoint, data sharing, and collaboration tools. • Support compliance initiatives, audits, and reporting needs. • Maintain secure tenant configurations aligned with best-practice frameworks (e.g., CIS, Microsoft Secure Score, NIST). Requirements Required Qualifications • 3-5 years of hands-on experience administering Microsoft 365 in an enterprise environment. • Proven expertise managing Intune (full end-to-end: enrolment → policy → deployment → compliance → reporting), Exchange Online, SharePoint Online / OneDrive, Microsoft Teams, Microsoft Entra ID, Conditional Access policies • Strong understanding of email security fundamentals and implementations: Transport rules, threat policies, anti-phishing controls SPF, DKIM, DMARC; experience integrating M365 security posture with non-Microsoft EDR/XDR tools • Strong troubleshooting capability across identity, endpoint, collaboration, and security layers. • Experience in scripting/automation • Experience with Microsoft Defender for Endpoint/Office 365/Cloud Apps. Key Skills & Competencies • Enterprise cloud administration mindset (scale, governance, standardization) • Strong security-first approach • Ability to translate business needs into practical policies • Comfortable owning production-critical services • Excellent communication and cross-functional collaboration • Structured documentation and operational discipline Preferred Skills Strong plus • Experience with Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery) • Familiarity with Zero Trust architecture and modern security frameworks. • Knowledge of SIEM integrations (Microsoft Sentinel, Splunk, etc.).
Get security engineer jobs sent to you
Add your work once. When an opening fits, it comes to you, and you see who you know at the company.
Get openings like these