Security Engineer jobs in Israel

Description Quantum Machines (QM) is a global leader in control systems for quantum computing, a field on the verge of exponential growth. Our innovative hardware and software mark a groundbreaking approach in quantum computer control, scaling from individual qubits to expansive arrays of thousands. At the core of QM lies a passionate and ambitious team committed to reshaping the construction and operation of quantum computers. Our work is fueled by a deep understanding of customer needs, driving us to deliver unparalleled solutions in this revolutionary field. We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders. Key Responsibilities Microsoft 365 Tenant Administration • Administer and maintain enterprise-scale M365 tenants, including configuration, governance, and operational support. • Oversee service health, usage reporting, licensing, and user lifecycle management. • Maintain documentation of configurations, workflows, and operational procedures. Microsoft Intune / Endpoint Management (Full Scope) • Own all aspects of Intune administration, including: • Device enrolment (Windows, macOS, iOS/iPadOS, Android) • Configuration profiles, compliance policies, and security baselines • Autopilot provisioning, device naming policies, and lifecycle • Conditional Access integration with device compliance • Endpoint security policies (AV, firewall, ASR rules, BitLocker, etc.) Identity & Access Management (Entra ID / SSO) • Manage and secure Microsoft Entra ID (Azure AD) for identity, authentication, and access governance. • Configure and maintain SSO integrations with SaaS applications using SAML/OAuth/OIDC. • Implement and optimize: • Conditional Access policies • MFA enforcement and authentication methods policy • Privileged Identity Management • Identity Protection policies (risk-based controls) Security & Threat Protection • Deploy and manage Microsoft Defender stack relevant to the organization • Integrate and manage endpoint security posture with non-Microsoft EDR platforms, such as Sentinel One/CrowdStrike • Collaborate with Security teams to implement detection and response workflows, ensure coverage, and align with organizational policy. Messaging & Collaboration Exchange Online • Administer Exchange Online policies and configurations • Implement email security best practices and support incident response when needed. Microsoft Teams • Administer Teams policies and governance - Teams lifecycle policy, app permissions, meeting policies; External access and guest collaboration settings SharePoint / OneDrive • Administer SharePoint Online and OneDrive settings, including: • Site governance, permissions, and sharing controls • Sensitivity labels and information protection controls (if used) • Sync and storage management, auditing and access policies Azure & Cloud Infrastructure • Support Azure identity, security, and basic cloud resources relevant to M365 integrations. • Manage Azure configuration related to: • Entra ID integrations • Conditional Access • Hybrid identity (if applicable) • Azure security settings and monitoring Policy, Compliance, and Governance • Implement and maintain governance models across identity, endpoint, data sharing, and collaboration tools. • Support compliance initiatives, audits, and reporting needs. • Maintain secure tenant configurations aligned with best-practice frameworks (e.g., CIS, Microsoft Secure Score, NIST). Requirements Required Qualifications • 3-5 years of hands-on experience administering Microsoft 365 in an enterprise environment. • Proven expertise managing Intune (full end-to-end: enrolment → policy → deployment → compliance → reporting), Exchange Online, SharePoint Online / OneDrive, Microsoft Teams, Microsoft Entra ID, Conditional Access policies • Strong understanding of email security fundamentals and implementations: Transport rules, threat policies, anti-phishing controls SPF, DKIM, DMARC; experience integrating M365 security posture with non-Microsoft EDR/XDR tools • Strong troubleshooting capability across identity, endpoint, collaboration, and security layers. • Experience in scripting/automation • Experience with Microsoft Defender for Endpoint/Office 365/Cloud Apps. Key Skills & Competencies • Enterprise cloud administration mindset (scale, governance, standardization) • Strong security-first approach • Ability to translate business needs into practical policies • Comfortable owning production-critical services • Excellent communication and cross-functional collaboration • Structured documentation and operational discipline Preferred Skills Strong plus • Experience with Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery) • Familiarity with Zero Trust architecture and modern security frameworks. • Knowledge of SIEM integrations (Microsoft Sentinel, Splunk, etc.).

About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need. About this role As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory. You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support Aidoc's ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide. What Makes This Role Unique at Aidoc • Clinical AI with real-world patient impact - Aidoc operates in an environment where security is not only about protecting systems and data. Security decisions can affect clinical workflows, care-team coordination, customer trust, and patient safety. • Highly sensitive healthcare data - You will help protect medical imaging data, clinical metadata, PHI/PII, customer environments, and AI-driven workflows that require strong privacy, access control, data protection, and auditability. • Security for AI/ML and medical imaging systems - The role extends beyond traditional AppSec into AI/ML security, data pipeline protection, inference integrity, model-related risks, and misuse scenarios in clinical workflows. • Complex healthcare integrations - Aidoc integrates with hospital systems and healthcare workflows that may include PACS, EHR, VNA, RIS/worklists, scheduling systems, and communication platforms. You will help secure the data flows, authentication models, APIs, and deployment patterns behind these integrations. • Engineering-driven security in a regulated environment - This is not a checkbox compliance role. However, because Aidoc operates in healthcare and clinical AI, security must be practical, evidence-based, and aligned with regulatory, customer, and quality expectations. • Cloud-native scale and production ownership - You will work with modern cloud infrastructure, Kubernetes, containers, CI/CD pipelines, identity and access management, observability, vulnerability management, and software supply-chain controls. Responsibilities • Secure product and clinical workflows end-to-end - Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features. • Drive secure-by-design architecture - Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling. • Strengthen cloud-native security - Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management. • Embed security into the development lifecycle - Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls. • Own vulnerability management as an engineering system - Prioritize vulnerabilities based on exploitability, product exposure, customer impact, clinical risk, and regulatory relevance. Drive remediation with engineering teams and reduce recurring issues through root-cause improvements. • Secure AI/ML-driven features and data pipelines - Partner with AI, data, and platform teams to identify risks related to training and inference data, model inputs and outputs, model misuse, data leakage, access to sensitive datasets, pipeline integrity, and production monitoring. • Improve software supply-chain security - Reduce risk across open-source dependencies, third-party components, third-party algorithms, container images, build systems, artifact repositories, release pipelines, and deployment processes. • Mentor and enable engineers - Help developers understand security risks, make secure design decisions, and take ownership of security in their code, services, and infrastructure. • Communicate risk clearly - Translate technical security findings into clear risk, impact, and trade-off language for engineering, product, leadership, quality, regulatory, and customer-facing stakeholders. Requirements • 5+ years of experience in Product Security, Application Security, Cloud Security, or a similar hands-on security engineering role. • Strong hands-on experience securing production systems, not only performing assessments or reviews. • Strong understanding of secure design, threat modeling, and architecture risk analysis. • Deep knowledge of application security, including OWASP Top 10, API security, authentication, authorization, access control, secure session handling, input validation, and modern attack vectors. • Experience securing distributed systems, APIs, web applications, backend services, and cloud-native architectures. • Strong experience with cloud environments, especially AWS and/or Azure, including IAM, network security, encryption, logging, monitoring, and workload security. • Experience with Kubernetes, containers, infrastructure-as-code, CI/CD pipelines, and modern DevOps workflows. • Practical experience with security tooling such as SAST, SCA, IaC scanning, container scanning, secrets detection, SBOM tools, vulnerability scanners, and cloud security tools. • Experience with vulnerability management, risk prioritization, remediation planning, and working with engineering teams to fix issues at scale. • Strong understanding of software supply-chain security, including dependency risk, build/release integrity, artifact security, and third-party component governance. • Experience working with modern development stacks such as Python, Java, JavaScript/TypeScript, React, microservices, APIs, and cloud-native services. • Ability to influence engineers through technical credibility, practical guidance, and strong collaboration. • Strong communication skills and the ability to explain security risks to technical and non-technical stakeholders. Working at Aidoc Our Perks: • Be part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives) • We work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees. • Amazing and healthy breakfasts and lunches prepared daily by our personal chef! • Stocked up kitchen & meal card • Wellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes. • Amazing culture - collaborative, transparent & fun! • Attractive compensation package & benefits Aidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

About Aidoc Aidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year. Aidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions. Medical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need. About this role As a SecOps Engineer, you will help protect Aidoc’s cloud environments, products, corporate systems, and sensitive healthcare data by investigating SIEM alerts, supporting incident response, and improving the quality of security monitoring and operations. This is a hands-on security operations role for someone who can analyze security signals, understand real risk, communicate clearly, and help the organization detect, investigate, and respond quickly and effectively to security events. You will work closely with real production environments, where accurate investigation, clear documentation, and practical escalation are critical to protecting sensitive healthcare data, customer trust, and the reliability of Aidoc’s clinical AI platform. Responsibilities • Own the end-to-end investigation of SIEM alerts across cloud, product, identity, endpoint, and SaaS environments: analyze the relevant evidence, separate false positives from real threats, and prioritize cases based on risk and impact. • Escalate high-risk findings with a clear summary of what happened, what is affected, why it matters, and what actions are required. • Support incident response by collecting evidence, assisting with containment, tracking remediation, and maintaining clear investigation records for internal reviews, compliance needs, and post-incident learning. • Improve SIEM rules, dashboards, alert logic, playbooks, telemetry coverage, and detection quality to reduce noise and strengthen security monitoring. • Work with Security, IT, DevOps, R&D, Product Security, and Compliance teams to resolve issues and improve security operations. Requirements • 2+ years of experience in Security Operations, SOC analysis, detection and response, incident response, cloud security operations, or a similar hands-on security role. • Hands-on experience with SIEM-based investigations, including alert triage, log analysis, event correlation, evidence review, case prioritization, and escalation. • Experience working with security telemetry from cloud platforms, identity providers, endpoints, SaaS systems, network tools, application logs, and production environments. • Familiarity with cloud-native environments, including IAM, storage access, workloads, Kubernetes, containers, APIs, logging, monitoring, and CI/CD pipelines. • Understanding of common attack techniques, including credential compromise, phishing, privilege escalation, suspicious API activity, malware, data exposure, lateral movement, and cloud misconfigurations. • Experience with identity and endpoint investigation, including SSO, MFA, service accounts, privileged access, EDR alerts, and suspicious user or device activity. • Ability to use query or scripting languages such as KQL, SPL, SQL, Python, Bash, or similar. • Familiarity with incident response workflows, case management, evidence collection, remediation tracking, and post-incident review. • Strong analytical judgment, with the ability to separate false positives from real risk and explain findings clearly. • Ability to work independently, document investigations clearly, and escalate issues with the right level of urgency. • Strong communication skills and the ability to work with Security, IT, DevOps, R&D, Product Security, Compliance, and business stakeholders. • Close attention to detail, strong ownership, and comfort working in a fast-moving production environment. Additional Strengths • Experience in healthcare, healthtech, medical devices, digital health, or regulated software environments. • Familiarity with HIPAA, GDPR, SOC 2, ISO 27001, NIST CSF, or similar security and privacy frameworks. • Familiarity with MITRE ATT&CK, detection logic, attacker behavior, and investigation playbooks. • Experience with threat hunting, detection engineering, malware analysis, forensics, or advanced incident response. • Experience with SOAR platforms, case management systems, threat intelligence feeds, detection-as-code, or SOC automation. • Experience improving SOC metrics such as alert noise, false-positive rate, time to triage, time to escalation, and investigation quality. • Experience working with sensitive data, PHI/PII, customer-facing environments, or audit-ready evidence collection. Working at Aidoc Our Perks: • Be part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives) • We work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees. • Amazing and healthy breakfasts and lunches prepared daily by our personal chef! • Stocked up kitchen & meal card • Wellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes. • Amazing culture - collaborative, transparent & fun! • Attractive compensation package & benefits Aidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary The Team Engineering - Our engineering team is at the core of our products and connected directly to the mission of preventing cyberattacks. We are constantly innovating - challenging the way we, and the industry, think about cybersecurity. Our engineers don’t shy away from building products to solve problems no one has pursued before. We define the industry instead of waiting for directions. We need individuals who feel comfortable in ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment. Job Summary In this role, you will be dedicated to safeguarding our clients’ data within the dynamic cloud landscape. As an expert in Data Security Posture Management (DSPM) for SaaS and DBaaS, you will develop cutting-edge solutions for data discovery, classification, and protection across platforms like Snowflake, Databricks and MongoDB Atlas. Your work will focus on proactively identifying and eliminating risks, ensuring our clients' sensitive information remains secure, compliant, and accessible only to authorized users, empowering them to grow their business securely. Key Responsibilities • Drive innovation by designing and implementing impactful solutions that address client needs, contributing to the full feature development lifecycle from design to deployment. • Take ownership of specific feature segments, ensuring high-quality code and robust functionality through meticulous attention to detail and a focus on execution. • Proactively collaborate and exchange information with cross-functional teams, including product and infrastructure, to ensure seamless integration and alignment on shared objectives. • Challenge the status quo by generating innovative ideas and actively participating in brainstorming sessions to foster product and architectural improvements. • Actively engage in technical discussions, openly sharing knowledge and learning from others to solve complex problems and elevate team expertise. • Design and build highly scalable, resilient, and secure cloud-based applications and microservices. • Contribute to an agile and dynamic engineering culture, demonstrating a strong drive and outstanding communication skills to deliver results efficiently. Qualifications Required Qualifications • 5+ years of hands-on software engineering experience. • Proven experience designing and building large-scale, scalable cloud-based applications. • Expertise in microservices architecture, including technologies like Kubernetes, Docker, GKE, EKS, or AKS. • Experience with relational or NoSQL databases (e.g., MySQL, PostgreSQL, MongoDB) and ORMs (e.g., JPA, Hibernate). • Bachelor of Science in Computer Science or equivalent practical experience. Preferred Qualifications • Experience with Java or Kotlin with Spring Boot. • Familiarity with CI/CD pipelines and cloud infrastructure automation. • Experience with big-data architectures and technologies. • Knowledge of cybersecurity, information security, and software security principles. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are In order to be the cybersecurity partner of choice, we must trailblaze the path and shape the future of our industry. This is something our employees work at each day and is defined by our values: Disruption, Collaboration, Execution, Integrity, and Inclusion. We weave AI into the fabric of everything we do and use it to augment the impact every individual can have. If you are passionate about solving real-world problems and ideating beside the best and the brightest, we invite you to join us! We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Summary As a Senior SOC Engineer within Unit 42 at Palo Alto Networks, you will drive the creation, validation, and optimization of custom detection rules and automated playbooks across our global customer base. Acting as a trusted advisor, you will collaborate closely with clients to maximize their security posture using Cortex XSIAM and Unit 42 expertise. This highly analytical role leverages your deep understanding of detection lifecycles, proactive automation, and threat intelligence to secure enterprise environments. You will architect end-to-end security lifecycles that seamlessly connect data ingestion with high-fidelity detection engineering. Key Responsibilities • Own the full lifecycle of custom detections and response automations, deploying them as high-fidelity Cortex XSIAM correlation rules and playbooks through a rigorous engineering process of development, testing, staging, and soft implementation. • Drive the continuous refinement of correlation rules to ensure strict standards for performance, accuracy, and operational relevance. • Translate Unit 42 threat intelligence research and emerging adversary TTPs into actionable, robust detection logic. • Champion proactive automation by engineering sophisticated playbooks to resolve emerging security challenges and optimize operational workflows ahead of demand. • Architect the end-to-end security lifecycle within Cortex XSIAM, seamlessly connecting data ingestion, high-fidelity detection engineering, and sophisticated response automation. Qualifications Required Qualifications • 5+ years of hands-on experience in a Senior SOC, Detection Engineering, or Security Architecture role utilizing SIEMs, firewalls, EDR, sandboxes, and SOAR platforms in complex enterprise environments. • Proven mastery of the Detection Engineering lifecycle, including experience with rule testing frameworks, soft-deployment strategies, and continuous tuning. • Demonstrated experience reviewing and QA-ing detection logic written by others, with the ability to provide constructive optimization feedback. • Exceptional consultative and communication skills, with the confidence to guide enterprise customers through complex architectural and workflow decisions. • Proactive engineering mindset with a track record of designing complex automation playbooks (Cortex XSOAR or similar) based on anticipated threat vectors, not just reactive requests. • Strong background in incident response, threat hunting, and translating threat intelligence into actionable defense mechanisms. • Software development experience with a strong proficiency in Python for security automation and scripting. Preferred Qualifications • Previous hands-on experience utilizing and optimizing Cortex XSIAM. Our Commitment We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at [email protected]. Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship? No. Please note that we will not sponsor applicants for work visas for this position.

Job Details: Job Description: Join us to help build the next generation of AI hardware solutions. You will be part of a team developing cutting-edge HW for the AI domain, where we push the boundaries of what silicon can do for emerging AI workloads. We are continuously developing modern and effective working methods, including hands-on adoption of AI tools throughout the chip development flow. The environment is fast-paced and intellectually stimulating. Your Mission: Integrate hardware security IP into the SoC/die and define the HW security architecture protecting a large-scale data center's compute, network, and control infrastructure. Responsibilities: • Integrate third-party and internal HW security IP (Root of Trust, crypto engines, HSMs, TRNG, key vaults) into the die; write and own the RTL/integration code wiring these units into the SoC. • Author RTL for security units, glue logic, fuse/OTP interfaces, and bus/fabric (AXI/AHB/NoC) connections; manage clock/reset/power domains and CDC. • Develop integration test benches, run lint/CDC/synthesis-readiness checks, and support DV/verification of the embedded security IP. • Architect platform Root of Trust, secure boot, attestation, and confidential computing (TDX/SGX/SEV-equivalent) across the server fleet. • Threat-model the full stack (silicon, firmware, BMC, supply chain) and define HW mitigations against physical and side-channel attacks. • Drive secure key management, debug-lockdown, fuse provisioning, and crypto offload for tenant isolation at scale. • Collaborate closely with architecture, design verification, physical design, firmware, and platform teams throughout the development cycle. Qualifications: • B.Sc., M.Sc., or Ph.D. in Electrical Engineering, Computer Engineering, Computer Science, or a related field. • 5+ years of experience in RTL development, SoC design, or hardware security integration. • Proficient in Verilog/SystemVerilog RTL, IP integration, bus protocols (AXI/AHB/NoC); lint, CDC, synthesis, DV flows. • Expertise in roots of trust, TEEs, secure boot/firmware, crypto IP, side-channel mitigations. • Plus: fuse/OTP provisioning, supply-chain security, multi-tenant cloud isolation. Job Type: Experienced Hire Shift: Shift 1 (Israel) Primary Location: Israel, Haifa Additional Locations: Israel, Petah-Tikva Posting Statement: All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance. Position of Trust N/A Work Model for this Role This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. * Job posting details (such as work model, location or time type) are subject to change. *

About Payoneer Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories. By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence. Role summary We are seeking an Application Security Engineer to join our Cyber Team in Payoneer. As an Application Security Engineer, you will be responsible for overall Application Security standards, guidelines, and requirements for different groups in Payoneer. Your expertise in secure architecture, design, and SSDLC will play a crucial role in ensuring the security of our products and the protection of our sensitive financial data. This is a strategic position that offers an opportunity to shape and drive the security initiatives of our cutting-edge fintech solutions. Glilot Hybrid Full-time What you’ll do: • Review and approve secure architecture designs for new features and use-cases for Payoneer customers, partners, integrators or in-house solutions, considering best practices, regulatory requirements and business objectives, as well as many AI initiatives and use-cases. • Collaborate with cross-functional teams (mainly R&D and DevOps/DevSecOps) to define security requirements and design robust security controls for systems, both on-prem and in the cloud. • Define CI/CD processes and gates, such as SAST, SCA, Secret scanning and image/containers scanning during CI and Runtime. • Provide technical guidance and expertise to internal teams in selecting and integrating in-house solutions or third-party vendors. • Stay up-to-date with the latest security technologies, threats, and trends, and provide recommendations for continuous improvement. • Serve as a subject matter expert on application security, providing guidance and mentorship to other teams in the company. • Optimizing AppSec processes and workflows through AI-powered tooling and automation. • Assist in creating or researching for security solutions – solving security challenges, both on-prem, in the cloud and in the AI domain. Who you are: • 4+ years of experience in cybersecurity, including at least 2 years of experience in Application Security \ Product Security. • In-depth understanding of CI/CD workflows and methodology (Azure DevOps and Github is an advantage). • Familiarity with AI/agentic architectures and the MCP, with hands-on experience building custom skills and agents for security use cases. • Excellent communication and collaboration skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders. • Multi-task skills: ability to work on multiple projects in parallel, providing application security support for different teams and initiatives in the company. Advantages: • Bachelor's degree in Computer Science, Information Security, or a related field. • Experience/familiarity (hands-on) with security tools integrated into our CI/CD and production environments such as SonarQube, Snyk, Wiz and others. • Strong knowledge with AWS, Azure and GCP as well as their associated security services and features. • Strong knowledge and experience with Kubernetes platform and services. • knowledge with Microsoft enterprise ecosystem, including Active Directory/Azure Entra ID, Office 365 APIs, Azure Cloud services. • Familiarity with GitHub and GitHub Actions, including experience working with CI/CD pipelines and source code management workflows. • Ability to read and review code, particularly in .NET, Node.js, and Python. • Additional skills related to Secure Software Development Lifecycle (SSDLC) and Application Security (AppSec) further enhance the candidate's value. These skills may include risk assessments, threat modeling, vulnerability assessments or penetration testing. • Experience in fintech or financial services industry. • Familiarity with regulatory requirements and compliance standards in the financial industry, such as PCI DSS, PSD2 and GDPR. #LI-AG2 The Payoneer Ways of Working Act as our customer’s partner on the inside Learning what they need and creating what will help them go further. Do it. Own it. Being fearlessly accountable in everything we do. Continuously improve Always striving for a higher standard than our last. Build each other up Helping each other grow, as professionals and people. If this sounds like a business, a community, and a mission you want to be part of, apply today. We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here. About Us SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters. Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity. What Are We Looking For? We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes. As a Staff Software Engineer- Linux & Cloud Workload Security, you will lead a squad building Linux and cloud workload security detection capabilities, from researching the threat landscape to designing detection strategies and delivering them at scale. You will own the squad's technical direction, delivery and people growth while staying hands-on with the hardest problems, from low-level kernel hooks to complex detection engines. Your work will protect thousands of customers worldwide, including enterprises, public sector organizations and some of the largest companies in the world. What Will You Do? Primary responsibilities include: • Lead a squad of engineers, owning its technical direction, delivery and results end to end • Own the squad's performance management: set goals and expectations, give continuous feedback, conduct performance reviews and support career growth • Own the squad's Scrum process, including planning, backlog refinement, retrospectives and sprint reviews, keeping delivery predictable and transparent • Define the squad's roadmap with Product and Research, turning loosely defined problems into a clear multi-quarter plan and well-scoped work • Take end-to-end responsibility for new detection capabilities, from researching the Linux and container security landscape to designing detection strategies and algorithms • Architect and deliver innovative security solutions at scale, working across the stack from low-level kernel hooks to detection engines and systems engineering • Lead modeling and proofs of concept for complex, high-risk problems and drive the successful ones into production • Set the technical bar through design reviews, thorough code reviews and engineering standards and best practices • Partner with Product, Research, QA and other engineering teams to align priorities, manage dependencies and communicate status and risks • Serve as the technical escalation point for complex customer issues and requests within the squad's domain What Skills and Knowledge Will You Bring? Ideal candidates will have: • Significant experience in software development, with a track record of designing and delivering complex systems at scale • Proven experience leading a team or squad, including mentoring engineers, giving performance feedback and running Agile/Scrum delivery • Deep knowledge of Linux internals and security, such as kernel hooks, eBPF, system calls and process and file behavior • Strong understanding of container and cloud workload technologies, such as container runtimes, Kubernetes and cloud platforms • Experience in detection engineering, threat research or security product development, and in designing detection strategies and algorithms • Strong programming skills in languages such as C/C++ or Rust, and the ability to architect solutions from loosely defined problems • Excellent communication and cross-team collaboration skills, with the ability to influence technical direction and stakeholders Why SentinelOne? AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place. We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family: Equity & Rewards • Restricted Stock Units (RSUs) • Employee Stock Purchase Plan (ESPP) Time Off & Wellbeing • Competitive leave benefits • Gender-neutral parental leave • Employee Assistant Program • Workout sessions and a Wellness App Insurance & Financial Security • Medical and insurance benefits • Pension • Employee Assistance Program (EAP) Work Perks & Flexibility • Global home office allowance • Mobile phone reimbursement • Study Fund SentinelOne is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. SentinelOne participates in the E-Verify Program for all U.S. based roles. To learn more about how we use AI in our hiring process, please review our AI in Hiring Candidate Disclosure.

Job Description • Lead the application security team, providing strategic direction and mentorship. • Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework. • Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails. • Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities. • Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity. • Implement and manage security automation tools and processes to enhance the efficiency of security operations. • Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture. • Provide expert guidance on security architecture and design for new and existing applications. • Lead incident response efforts related to application security breaches and vulnerabilities. • Foster a culture of security awareness and continuous improvement within the organization. Qualifications • Bachelor's degree in Computer Science, Information Security, or a related field. • Minimum of 7 years of experience in application security, with at least 3 years in a leadership role. • Proven experience in implementing and managing SSDLC frameworks. • In-depth knowledge of security frameworks and methodologies. • Strong understanding of threat modeling methodologies, secure coding practices and common vulnerabilities (e.g., OWASP Top Ten). • Proficiency in programming languages such as Java, Python, C#, or similar. • Experience in implementing security tools and technologies such as ASPM, SAST, DAST in complex and high-scale environment. • Excellent communication and leadership skills, with the ability and passion to drive change across the organization. • Relevant certifications such as CISSP, CISM, or CSSLP are desirable. • Proven experience in a similar role at another leading software development company.

Job Description • Lead, mentor, and grow a team of JavaScript developers, fostering a culture of technical excellence, ownership, and continuous improvement. • Own the design, development, and maintenance of high-performance JavaScript applications and components focused on browser security. • Drive the team's technical roadmap and priorities in partnership with product managers, designers, and other stakeholders. • Conduct code and design reviews, set coding standards, and ensure quality, performance, and security best practices across the team's deliverables. • Manage team planning, task allocation, and delivery timelines while balancing hands-on contribution with leadership responsibilities. • Stay up to date with the latest browser security trends, vulnerabilities, and attack vectors to proactively guide the team in identifying and addressing potential threats. • Lead architecture and technical design discussions to drive forward-thinking solutions that meet current and future business needs. • Improve development processes, tools, and methodologies to enhance team productivity and efficiency. • Support team members' professional development through regular feedback, one-on-ones, and career growth planning. • Join sessions with customers for feedback and troubleshooting, gathering insights to enhance product functionality and address concerns. Qualifications • 8+ years of experience as a Software Developer. • 3+ years of experience leading or managing a software development team. • Coding experience in JavaScript and TypeScript. • BSc in Computer Science/Software Engineering or equivalent knowledge. • Strong problem-solving skills and the ability to analyze complex technical challenges in a fast-paced environment. • Proven ability to mentor engineers and drive team delivery. • Good communication and interpersonal skills. • Fluent English, verbal and written. Advantages: • Experience in React tools including React.js & Webpack. • Experience in client-side applications in Windows. • Experience in C#. • Experience in server-side development. • Experience in developing security products. • Experience in WASM.

Description Role Overview: As the SecOps Security Engineer at Cellebrite, you will be part of a team of security professionals responsible for defining and executing our security operations strategy, driving initiatives to enhance our overall security posture. You will identify security issues and risks, develop mitigation plans, and implement security-focused tools and services. You will also be responsible for developing and interpreting security policies and procedures, delivering training materials, and evaluating and recommending new and emerging security products and technologies. Additionally, you will participate in tier 3 security operations support and incident handling. Responsibilities: • Design, implement, and maintain security tools and controls across endpoint, identity, cloud, and network layers. • Identify security gaps and risks across the environment and develop and execute mitigation plans. • Manage and tune security platforms including EDR/EPP, PAM/EPM, NAC, VPN, web Proxy, and identity providers (Okta, Entra ID). • Administer and optimize Palo Alto firewall and Prisma Access (and Strata Cloud Manager, where applicable) policies and egress controls. • Monitor cloud environments for misconfigurations and risk using CSPM/DSPM tooling (e.g., Wiz), across AWS and other cloud providers. • Develop, document, and maintain security policies, procedures, and standards, and deliver related training materials to stakeholders. • Provide tier 3 security operations support, including advanced troubleshooting and incident handling/response. • Apply the MITRE ATT&CK framework to map threats, build detection logic, and inform mitigation strategies. • Evaluate and recommend new and emerging security products and technologies to strengthen the organization's security posture. • Conduct proof-of-concept (POC) evaluations on various security products, leading each POC end to end from scoping through evaluation and recommendation. • Leverage AI-powered tools and automation (e.g., Claude Code, LLM-based workflows) to improve efficiency in security operations, while applying MCP and AI guardrail principles to ensure secure, governed use of AI tooling. • Write and maintain scripts (Python, Bash, Batch) to automate security operations, reporting, and remediation tasks. • Collaborate cross-functionally with IT, R&D, and compliance teams to align security initiatives with business needs. • Mentor other team members as needed, sharing knowledge and best practices to strengthen overall team capability. Requirements • At least 5 years hands-on experience deploying, managing, and supporting security infrastructure in a highly available 24x7 environment from a global company. • Experience with different security solutions including web Proxy, Okta, Entra ID, EDR/EPP, NAC, VPN, EPS, PAM/EPM, PKI, etc. • Proven knowledge of Palo Alto firewalls and Prisma Access; knowledge of Strata Cloud Manager (SCM) is an added value. • Experience providing security solutions within complex environments (physical, virtual, SaaS, and IaaS). • Experience with cloud security across AWS, and similar experience/knowledge with other cloud providers such as Microsoft Azure and Google Cloud Platform (GCP). • Experience with cloud security posture and data security posture tools (e.g., Wiz, CSPM/DSPM). • Working knowledge of networking fundamentals as they relate to security (e.g., TCP/IP, DNS, VPN tunneling, network segmentation, basic routing/firewalling concepts). • Proven scripting capabilities (Python, Bash, Batch). • Advanced AI skills, including hands-on experience leveraging AI-powered tools (e.g., Claude Code, LLM-based automation) to streamline security operations, policy development, and workflow efficiency, along with knowledge of Model Context Protocol (MCP) and AI guardrails for secure and governed AI tool integration. • Knowledge of the MITRE ATT&CK framework, including mapping threats/IOAs and applying it to detection and mitigation strategies. • Professional certifications such as CISSP, CISM, or equivalent. • Bachelor's degree in Computer Science, Information Security, or a related field – an advantage. • High level troubleshooting skills. • Team player with excellent interpersonal skills. • Excellent written and verbal communication skills in both English and Hebrew. #LI-HI1