דרושים בתחום אבטחת מידע וסייבר

We are looking for a Researcher with expertise in reverse engineering, the focus is on malware and embedded devices.
In this position you will preform in depth analysis of ICS devices, look for exploits and analyze protocols.
You will join a team of experienced researchers and work with them side by side.
Stuff you'll be doing:
Improving and enhancing the platform capabilities
Research into industrial malware and software
Discover new exploits and undocumented protocols
Develop tools to automate malware analysis and other research procedures
מיקום - הרצליה פיתוח

Few years of experience in Reverse Engineering
Experience with coding in Python
Ability to solve complex problems with creative ideas
Malware analysis experience is a benefit

The ideal candidate will have a passion for cybersecurity and developing/automating creative solutions. He/she must be a leader skilled at identifying security gaps in new and existing endpoints, infrastructure and process, and execute projects to address them.
· Researches, analyzes, evaluates, and formulates recommendations on emerging security technologies and solutions to protect next generation modern endpoint environments.
· Designs, implements, configures, and manages solutions within the supported technologies, products, and services.
· Defines security configurations for threat detection and prevention tools.
· Proactively manages supported services ensuring performance, availability, and security.
· Research and recommend innovative and automated approaches for operational tasks.
· Integrates threat, vulnerability, IT, and business to prioritize incident handling and investigations.
· Knowledge of system and network architecture and integrations – both technical and functional.
· Demonstrated experience with performing security policy assessments.
· Maintains direction, and balances big-picture concerns occurring within the industry with day-to-day issues.

• In this full time role in Yehud, Israel you will work as an Application & Infrastructure Security Architect to support the secure development of Micro Focus products. In this role you will work with multiple worldwide product groups, in a fast DevOps Agile environment. You will establish, advance and keep up to date the security aspects of the products, ranging from infrastructure security, application security, and cloud security.
• The responsibility includes working on a daily basis with the development teams – conduct threat modelling to their products/features/user stories, and provide the necessary security requirements for them to provide a secure product. Conduct research on new technologies, security controls, security capabilities, and more.
• The position also includes working closely with our internal Penetration Testing teams, providing testing scope and guidance, reviewing testing results, and communicating results and recommendations to R&D.
• In addition, you will provide security training sessions and conduct research on relevant security topics. You’ll also work with our sales/product management teams, respond to customer security related issues.

Requirements:

· At least 2 years’ experience as a SW developer in Java/JS
· At least 1 year as a system architect for complex systems or at least 2 years of software security experience as a security architect, with good knowledge of threat modelling process.
· Good familiarity with OWASP TOP 10 vulnerabilities.
· Advantage: At least 1-2 years’ experience with container technology and cloud technology and associated security.
· Advantage: Conducting penetration tests using manual and automatic testing methodologies
· Great Communication and leadership skills – (Ability to communicate with a Developer, a Manager or Director)
· Security Policies Governance – Writing policy, standard and guideline documentations. Familiarity with ISO27001/34/GDPR
· Project Management Skills
· Very good English – Writing, and communications skills

An international company is looking for a Russian speaker Information Security Analyst
The job includes:
● Monitor organization networks for security issues.
● Investigate security breaches and other cyber security incidents.
● Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
● Interaction with IT, Fraud analysis team, Contact center, global RnD

● Strong knowledge of cloud environments and network technologies.
● Ability to identify security vulnerabilities.
● Experience in configuration of different security products
● Experience with Vulnerability Management products (Tenable Nessus, Evident IO, Max Patrol, RedCheck, Whitesource)
● Experience with Log Management / SIEM products (HP ArcSight, IBM QRadar, Splunk, McAfee ESM, MaxPatrol SIEM)
● Experience in developing rules for correlation of information security events
● Knowledge of standards and information security requirements, as well as the best practices of information protection such as OWASP TOP 10, NIST,
ISO27K.
● Skills of using the command line interface, developing scripts (python, perl, bash, etc.)
● Strong knowledge of SQL and different database types
● Proficient in Hebrew, English and Russian.
At least 2 years of experience in SOC or similar positions