דרושים בתחום מומחה אבטחת מיד

We are looking for a talented CTO with a solid development and architectural background to join our group.
Main responsibilities:
Join a team which owns the overall architecture of Check Point Threat Prevention offering.
Lead cross-groups complicated technical projects / ventures.
Consult and help the teams during design / implementation phases.

Desired Background
At least 5 years of Threat Prevention (Cyber) background as technology leader / technical team leader.
Personal knowledge in - network security, reverse engineering, OS internals, malware and exploit ecosystem.

A young & well-funded Big Data startup, led by experienced entrepreneurs, is looking to hire a Security Analyst to join its product team and make an impact on the company's new Security Analytics SaaS product. The offices are in Tel Aviv.

* 2+ years of experience in threat monitoring, incident response and malware analysis.
* Experience with deployment of information security tools such as FWs, EDRs, Vulnerability Management.
* Demonstrated experience with a SIEM product, performing analysis of logs from a variety of sources.
* Knowledge of current cyber security trends, threats, and techniques.
* Experience with packet analysis (Wireshark) and scripting (Perl, Python, or bash).
* Good communication skills (Proficiency in English).
* Hands on, technical, analytical and detail oriented.
* Knowledge of AWS/Azure/Google/365 cloud infrastructure.
* Experience in a SOC environment.

A global & award-winning cyber security company, based in Herzliya, is looking for a Security Researcher- Threat Hunting to join a strong research team and help analyze various Cyber threats and attack scenarios and find creative ways to automate the detection and investigation of malware as part of the product.

* 2+ years of proven experience in application and/or network security research, preferably in a product company.
* Experience with Threat hunting, Incident Response and Digital Forensics domains.
* Programming skills (scripting and/or OO languages).
* Deep understanding of contemporary threats landscape and attack vectors.
* Knowledge and deep understanding of networking and internet protocols.
* Knowledge and deep understanding of malware techniques and methods.
* Willing to travel abroad occasionally.

Threat Hunting

Threat Hunter is responsible for participating in threat intelligence driven investigations, developing new detection logic and providing support to the Incident Response Team. The focus of the Threat Hunter is to detect, disrupt and eradicate threat actors from enterprise networks. To execute this mission, the Threat Hunter will use data analysis, threat intelligence, and cutting-edge security technologies while working closely with the global SOC.

Provide analytic investigative support of large scale and complex security incidents. Provide forensic analysis of network packet captures, DNS, proxy, EDR logs as well as logs from various types of security sensors, applications and operating systems
Perform analysis of security incidents & threat actors for further enhancement of Detection Catalog and Hunt missions by leveraging the MITRE ATT&CK framework.

Provide input on best practices with the security staff using available collaboration tools and workspaces
Review alerts generated by detection infrastructure for false positive alerts and modify alerts as needed.

2+ years of recent operational security experience (SOC, Incident Response, Malware Analysis, IDS/IPS Analysis, etc.)
2+ years overall IT Infrastructure experience
Bachelor’s degree in Information Technology, related discipline or relevant work experience – Advantage
Demonstrated strong knowledge of Linux/UNIX & Windows operating systems
Demonstrated knowledge of the Sumologic search syntax, alerts, dashboards and report building
Detailed understanding of the TCP/IP networking stack & network technologies
Working knowledge of full packet capture PCAP analysis and accompanying tools (Wireshark, etc.)
Nominal understanding of regular expression and at least one common scripting language (Python, Powershell etc)
Strong collaborative skills and proven ability to work in a diverse global team of security professionals
Strong organizational skills

· Company offices are located at Tel Aviv
·
· jobs@komodosec.com