דרושים בתחום אבטחת מידע

Threat Hunting

Threat Hunter is responsible for participating in threat intelligence driven investigations, developing new detection logic and providing support to the Incident Response Team. The focus of the Threat Hunter is to detect, disrupt and eradicate threat actors from enterprise networks. To execute this mission, the Threat Hunter will use data analysis, threat intelligence, and cutting-edge security technologies while working closely with the global SOC.

Provide analytic investigative support of large scale and complex security incidents. Provide forensic analysis of network packet captures, DNS, proxy, EDR logs as well as logs from various types of security sensors, applications and operating systems
Perform analysis of security incidents & threat actors for further enhancement of Detection Catalog and Hunt missions by leveraging the MITRE ATT&CK framework.

Provide input on best practices with the security staff using available collaboration tools and workspaces
Review alerts generated by detection infrastructure for false positive alerts and modify alerts as needed.

2+ years of recent operational security experience (SOC, Incident Response, Malware Analysis, IDS/IPS Analysis, etc.)
2+ years overall IT Infrastructure experience
Bachelor’s degree in Information Technology, related discipline or relevant work experience – Advantage
Demonstrated strong knowledge of Linux/UNIX & Windows operating systems
Demonstrated knowledge of the Sumologic search syntax, alerts, dashboards and report building
Detailed understanding of the TCP/IP networking stack & network technologies
Working knowledge of full packet capture PCAP analysis and accompanying tools (Wireshark, etc.)
Nominal understanding of regular expression and at least one common scripting language (Python, Powershell etc)
Strong collaborative skills and proven ability to work in a diverse global team of security professionals
Strong organizational skills

· Company offices are located at Tel Aviv
·
· jobs@komodosec.com

A global & profitable cloud security company, is seeking a Cloud OPS - AWS Expert. Flexible hours and work-life balance. The offices are in Herzliya Pituah.

Job Responsibilities:
* Assume production ownership of AWS part of our Hyper-Cloud environment.
* Raise and implement non-functional requirement from AWS environment.
* Maintain, monitor, analyze and troubleshoot issues in the AWS production environment.
* Developing and improving the software tool chain methodologies and automation needed for continuous deployment, infrastructure maintenance and troubleshooting.
* Operate and optimize the company's infrastructure components and products, running on AWS.
* Work with Operations and R&D activity leads from the moment of feature inception till the roll-out to production.

* 3+ years of experience in similar position in at least two companies.
* 5+ years of proven working experience in AWS's:
- Technology stack.
- Configuration management (Ansible - preferably).
- Monitoring | Log management.
- Cost optimization.
- Environment creation (Terraform).
* Proven experience in building CI/CD tool chain for application on AWS.
* +2 years of scripting language programming experience (Python - an advantage).
* Knowledge in one or more infrastructure components (like: Kubernetes, etc.) - an advantage.
* Working knowledge with Azure - an advantage.
* Excellent communication skills.
* Project management skills.
* High level verbal and written English (German, Icelandic - an advantage).

A promising & young under the radar startup, developing a cyber security product is looking for an independent and highly motivated Security Researcher with background in Vulnerability checks to lead the research field. The offices are in Tel Aviv.

* Experience working in cyber environment.
* High level of research ability.

5+ years experience:
Check-Point | Fortinet firewall
F5/NetScaler ADC
Cisco / Juniper switches & routers/switches
Analyzing, troubleshooting and correcting network and security problems remotely and on-site.
Maintaining and administering perimeter and backbone security systems such as firewalls, WAF's and intrusion detection systems.
Maximizes network and security performance by monitoring performance; troubleshooting network and security problems and outages; scheduling upgrades.
Collaborating with network and security manager on network optimization.
Secures network and security systems by establishing and enforcing policies; defining and monitoring access.
Configure and troubleshoot security infrastructure devices.
Participates in incident management, asset management, change management, project management, and continuous improvement of network and security environment.
Assist in the maintenance/development of security policies and procedures, while evaluating new and existing security technologies.
Accomplishes information systems and organization mission by completing related results as needed.
Reporting network operational status by gathering, prioritizing information; managing projects.