SOC Analyst jobs in Israel

We are looking for a highly analytical, decisive SecOps Analyst to join our SecOps Team. Our SOC runs on an agentic AI platform that autonomously investigates and correlates security alerts across our infrastructure, cloud, and product environments. Your role is to be the critical human judgment layer: validating AI-driven investigations and owning confirmed incidents end-to-end. If you take full ownership of a problem until it's truly closed, think critically rather than trusting a tool blindly, and want to operate at the frontier of AI-driven security operations, this role is for you. Responsibilities AI Investigation Validation: Review and validate findings from our agentic AI SOC platform. Catch false positives/negatives and surface edge cases internally to improve agent accuracy. End-to-End Incident Ownership: Own confirmed incidents from escalation through containment, remediation, and reporting, driving cases to closure, not just triage. Application & Product Log Monitoring: Investigate anomalies across our application and product logs to detect abuse, tenant/account misuse, and threats unique to our platform. Human-in-the-Loop Decision Authority: Authorize containment actions (isolating a host, suspending an identity, revoking a session) on critical alerts with confidence and speed. Proactive Threat Hunting: Hunt for threats outside the current scope, including business-logic abuse, insider threats, and anomalies unique to our product. Phishing & User Defense: Own confirmed phishing cases end-to-end, from detection through user communication and takedown. Documentation: Maintain clear investigation runbooks and case documentation so knowledge is shared, not siloed. On-Call Rotation: Serve as the decision-maker for high-severity, AI-escalated incidents during off-hours — reserved for high-confidence critical escalations, not noise. Requirements 2+ years of hands-on experience in a SOC, Incident Response, or Threat Intelligence role. Strong experience querying and analyzing logs in Splunk (must). Deep understanding of common attack vectors, MITRE ATT&CK, and enterprise security tools (EDR, IdP, SASE/Firewalls). Demonstrated critical thinking: comfortable questioning AI/automated conclusions rather than accepting them at face value. Strong incident command instincts: fast, confident decisions under pressure with incomplete information. Excellent written and verbal English communication for documentation and cross-functional incident communication. Advantage Experience querying application/observability logs in Logz.io or ELK stack. Experience with AI-driven or agentic security tools. Experience in a SOAR-driven environment. Familiarity with investigating cloud-native threats. Relevant certifications (e.g., GCIA, GCIH, CySA+).

Description Upstream Security protects connected vehicles, mobility services, and their supporting digital ecosystems. Our AI-powered cybersecurity platform combines vehicle security, API security, threat intelligence, detection and response, and managed SOC services. We are looking for a Senior SOC Analyst to join Upstream’s managed cybersecurity services team. You will investigate and respond to cybersecurity incidents involving connected vehicles, mobility applications, backend services, and APIs. As a senior analyst, you will serve as a security focal point for customers, lead complex investigations, improve detection capabilities, and help deploy and maintain agentic AI workflows used across SOC operations. This is a full-time, hybrid position based in Herzliya, Israel. Responsibilities • Monitor, investigate, and respond to vehicle and API security alerts. • Lead complex investigations, assess impact, identify root causes, and provide actionable mitigation recommendations. • Analyze suspicious vehicle behavior, API activity, authentication events, and mobility-related telemetry. • Investigate API threats including authorization abuse, credential attacks, injection, data exposure, automation, and business-logic abuse. • Deploy, configure, test, and maintain agentic AI workflows supporting alert triage, investigations, threat hunting, reporting, and response. • Monitor the accuracy, reliability, and operational performance of AI-driven workflows and continuously improve their prompts, tools, guardrails, and decision logic. • Conduct proactive threat hunting and OSINT investigations to identify emerging threats and attack patterns. • Develop and maintain investigation playbooks, operational procedures, and response processes. • Tune detection logic, behavioral profiles, and machine-learning models to improve detection quality and reduce false positives. • Produce clear investigation reports, incident updates, dashboards, and executive-level summaries. • Act as a trusted security advisor to customers during investigations, workshops, and business reviews. • Mentor analysts and promote consistent investigation quality across the SOC. • Track operational performance against SLAs, quality standards, and SOC KPIs. • Collaborate with threat intelligence, research, product, engineering, and customer-facing teams to improve Upstream’s security capabilities. • Participate in the team’s rotating on-call schedule and provide timely support for urgent security incidents when required. Requirements • 3+ years of experience in SOC operations, incident response, threat hunting, or security investigations. • Previous customer facing analyst role, preferably within MSSP, consulting, or professional services context, preferably in English • Strong practical understanding of APIs, including REST, authentication, authorization, OAuth, and JWT. • Hands-on API security experience with technologies such as WAFs, API gateways, API security platforms, SIEM, Burp Suite, or similar tools. • Experience investigating common API threats, including account abuse, authorization flaws, injection, data exposure, and business-logic attacks. • Experience with SIEM, SOAR, XDR, security automation, and large-scale data analysis. • Experience deploying or maintaining automation, AI-assisted, or agentic AI workflows. • Scripting experience, preferably with Python or SQL. • Ability to lead complex investigations and operate effectively in high-pressure environments. • Fluent English. • Willingness to participate in a rotating on-call schedule. • Experience in automotive, mobility, IoT, cloud security, mobile application security, or managed security services is preferred. Upstream is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other characteristic protected by applicable law.

We are looking for an experienced and skilled SOC Analyst (L2/L3) with at least 3 years of relevant cybersecurity experience to join our global team. The role focuses on advanced security investigations, threat hunting, threat analysis, and continuous improvement of SOC detection and response capabilities. The position operates during regular business hours. Key Responsibilities: The SOC Analyst’s responsibilities may include, but are not limited to: • Security Operations: Perform advanced security analysis, proactively identify and investigate potential threats, and support security monitoring, threat hunting, and response activities according to operational and client needs. • Technical Contribution: Apply cybersecurity expertise to support SOC activities, address complex security challenges, and contribute to the continuous improvement of security capabilities and working practices. • Collaboration and Development: Work with relevant teams and stakeholders, provide professional guidance where appropriate, and continuously develop knowledge of evolving threats, technologies, and industry practices. #LI-EU Requirements: • At least 3 years of experience in a SOC, threat hunting, incident response, or a similar cybersecurity role. • Hands-on experience with SIEM and EDR/XDR technologies. • Strong understanding of incident investigation and response processes. • Experience analyzing endpoint, network, identity, cloud, and application security events. • Familiarity with the MITRE ATT&CK framework and common attacker techniques. • Experience developing or tuning detection rules and security use cases. • Knowledge of Windows, Linux, networking, Active Directory, and cloud security concepts. • Familiarity with query or scripting languages such as KQL, SPL, PowerShell, or Python is an advantage. • Relevant cybersecurity certifications are an advantage. Personal Strengths: • Strong analytical, investigative, and problem-solving skills. • Capable of working independently and taking ownership of complex investigations. • Excellent communication and teamwork abilities. • Able to clearly document and communicate technical findings. • Willing to guide and share knowledge with junior analysts. • Motivated to continuously improve technical expertise and SOC capabilities. About Accenture Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.Visit us at www.accenture.com Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.