Experienced IT Security Engineer

You’ll join our IT Security team, part of our InfraSec group based in our headquarters in Tel Aviv, Israel.

You will design, implement, and mature the security controls that protect our business applications, our workforce, and our corporate environment. You will be part of the IT Security team and partner with other security teams in the department, IT, R&D, and other stakeholders to embed security controls at scale.

Our strategy is built on an AI-first mindset, identity-centric controls, Zero Trust principles and scalable automation. You will own key security domains end-to-end, complete lifecycle, identifying and translating the risk to requirements to implementation of controls and operations. This is a highly technical role for someone who has matured the security posture of a continuously growing company.

About the role:

Platform & Posture Management: Own overall security posture and optimize enterprise tools across AI, IdP, DLP, EDR, BDR, SSPM, network, and email security.

Zero Trust & Hardening: Design workforce/external Zero Trust policies and harden endpoint, browser, SaaS, network, and supply chain configurations (including extensions, plugins, and packages).

Tech Evaluation & Automation: Evaluate and deploy new security technologies from PoC to production, building automated workflows to scale controls without added headcount.

Governance, Audits & SaaS Risk: Conduct SaaS and vendor risk assessments, access reviews, deployment audits, posture remediation, and AI governance.

Incident Support & Collaboration: Serve as a domain expert for SecOps incident response, partnering with IT and R&D to embed security standards and SOPs into operational processes.

Requirements:

Core Background: 5+ years in Cybersecurity Engineering, ideally in a high-growth SaaS environment.

Domain Expertise: Hands-on experience in Identity (Must: Okta, Ping, or Entra ID) plus 2+ of: Data Security (DLP/DSPM), Endpoint (EDR/BDR), Email, or Network/SASE.

Platforms & Controls: Hands-on with SSO, MFA, RBAC, SCIM, Zero Trust, SSPM platforms, SaaS, and applications security evaluations, understanding of common security frameworks (CIS, NIST, OWASP).