Cyber security EngineerWe seek a dynamic and experienced Cyber security Engineer to join us! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.As a Cyber security Engineer at our company, you will be responsible for:Design and implement security architectures and controls across the organizationMaintain and manage security tools within our environment, such as Firewalls, WAF, EDR, IDS/IPS, SASE, and Security Information systems.Identify and remediate vulnerabilities and security findings in our infrastructure.Monitor and optimize security architecture to comply with our compliance requirements and policiesץLead and execute cross-organizational security projects and initiativesCollaborate with internal teams to enhance security measures

We're looking for a Security Engineer for Product & Production Infrastructure . The ideal candidate will have experience performing security reviews, vulnerability management, and detection and response operations in cloud-native environments. Youll get to collaborate with our software development and DevOps teams to secure products, CI/CD infrastructure, and production infrastructure. Youll also have the opportunity to influence our product roadmap by utilizing to assess, monitor, and harden our environments.

WHAT YOULL DO

Lead threat modeling and security review exercises across production and CI/CD environments identifying and mitigating risks in our products and the cloud services that support them
Drive vulnerability management and remediation efforts prioritizing issues, implementing mitigations, and designing strategic preventative controls
Extend our detection and response capabilities building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents
Collaborate with our Federal team extending our DevSecOps and Product Security practices to FedRAMP environment and ensure it meets key security requirements
Build deep functional partnerships with engineering and operations teams helping them deliver secure-by-design solutions

As an Application Security Engineer , you will play a pivotal role in safeguarding our products against security threats and vulnerabilities. You will work closely with our development teams to integrate security best practices into the software development lifecycle, conduct thorough security assessments, and implement robust security measures to protect our applications and data.
Key Responsibilities:
Collaborate with development teams to integrate security controls into the software development lifecycle (SDLC)
Conduct regular security assessments, including code reviews, vulnerability scans, and penetration testing, to identify and remediate security vulnerabilities in applications
Design and implement security solutions to protect against common security threats, such as SQL injection, cross-site scripting (XSS), and authentication bypass
Conduct threat modeling and architecture security review
Develop and maintain secure coding standards and guidelines for application developers
Monitor and analyze security incidents and provide timely response and resolution
Stay current with emerging threats, vulnerabilities, and industry best practices in application security
Participate in security incident response activities and contribute to post-incident reviews and remediation efforts
Collaborate with cross-functional teams to ensure security requirements are effectively integrated into product development processes
Deliver secured development training to developers

The Product Detection Engineering team at develops impactful security detection content for portfolio of security products. As part of the Security Research organization, you will join a diverse team of hackers and builders who launch impactful security products and research via cross-company collaboration, partnerships with the security community and open source initiatives.

As a Product Threat Detection Engineer II, you will deliver detection content sourcing a wide variety of data, especially cloud native datasets and workload runtime events, to detect threats for our customers in near real-time. You will creatively identify ways to provide detection coverage across different technology classes such as public cloud platforms, SaaS applications, endpoint and network technologies, and many more. Together with your team, you will research attacker techniques against cloud-native technologies and other attack surfaces to evangelize your findings with the community. Youll apply data-driven insights to generate the highest quality security signal for customers. Additionally, youll serve as the voice of the customer to continuously provide product feedback through our partner product teams.

we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our can create a work-life harmony that best fits them.



What Youll Do:
Learn everything about detecting threats and vulnerabilities in cloud-native environments and pour it back into building a great cloud security product for our customers
Research and ideate the most ideal way to operationalize telemetry end-to-end from our data platforms into our Cloud SIEM and CSM Threats products as detections at scale
Partner with product management, engineering, security research and customers to develop roadmaps of content for various integrations and other security concerns
Identify and drive inefficiencies out of content development processes through the creation of innovative tooling, automation; shepherd platform issues impacting content development and user experience through engineering to completion
Evangelize yourself and the security brand through blog posts, documentation, webinars, and workshops. Present at conferences to highlight the challenges and successes in the field

Required Senior Offensive Security Engineer
As a Senior Offensive Security Engineer, you will spearhead our offensive security operations and lead advanced threat research initiatives, playing a pivotal role in safeguarding our organization and customers from evolving cyber threats. You will develop and execute Red Team exercises, simulate real-world attacks, and identify security weaknesses in our systems and applications. We seek a highly skilled, proactive tech leader who thrives in challenging environments and is passionate about advancing security research and offensive strategies.
As a Senior Offensive Security Engineer, you will
Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against our infrastructure, applications, and cloud environments
Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities
Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations for improving our security posture
Collaborate closely with security engineering, DevOps, and software development teams to implement findings and enhance our defenses
Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises
Mentor and guide a team of security professionals, fostering a culture of innovation, collaboration, and continuous learning
Participate in incident response when Red Team exercises reveal vulnerabilities, providing expertise on attack techniques, forensics, and post-attack mitigation
Continuously assess and improve security processes, playbooks, and threat detection mechanisms.

Security is at the core of our operations, and we are seeking a Security & IT Specialist to take full ownership of cybersecurity, IT infrastructure, and data protectionensuring that our systems, data, and operations are protected both internally and externally against unauthorized access, cyber threats, and data breaches.
Key Responsibilities
Cybersecurity & data Protection (Internal & External)
Enforce strict in-house security policies to prevent unauthorized internal data access, copying, or extraction by employees or external parties. Implement DLP ( data Loss Prevention) systems to monitor and restrict data transfers, ensuring no FINQ data is leaked or misused. Secure network infrastructure, cloud environments, and endpoint devices from external cyber threats. Oversee network security, endpoint security, cloud security, IAM, and SOC tools. Regularly assess and update security protocols to stay ahead of cyber threats. Manage IAM policies, ensuring employees can only access data relevant to their role. Monitor third-party integrations, vendors, and service providers to ensure compliance with FINQs security standards.?? IT Infrastructure & Security Operations
Monitor and document availability of all systems and external service providers by direct observation, remote connection, and through alerting systems and respond immediately to security or usability concerns. Troubleshoot operational issues rapidly and analyze and resolve underlying issues to restore production systems and maintain continuity of business. Maintain and optimize FINQs IT infrastructure, ensuring all systems, networks, and databases are secure. Implement secure cloud Storage policies and encryption techniques to protect sensitive financial data. Manage user permissions, multi-factor authentication (MFA), and identity & access management (IAM) systems. Oversee backup and disaster recovery strategies to ensure business continuity.?? Security Compliance & Risk Management
Ensure compliance with financial security regulations, including SOC2, ISO 27001, GDPR, and other industry standards. Conduct security audits, vulnerability assessments, and penetration tests to identify and mitigate risks. Implement cybersecurity awareness training for employees to prevent internal security threats (e.g., phishing, insider threats). Stay updated on emerging threats and security technologies, providing recommendations for continuous improvements.?? Incident Response & Threat Mitigation
Develop and maintain incident response protocols to quickly detect, contain, and remediate cyberattacks. Investigate and respond to security breaches, data leaks, or unauthorized access attempts. Work with law enforcement and regulatory bodies when necessary to handle security incidents.

we are looking for a Security Engineer with experience in threat modeling, TTP identification, and detection engineering.
Youll work alongside Software Engineers and Offensive Security Engineers to identify critical assets, assess the top risks, and evaluate potential attacks against our systems.
You will be working across engineering teams supporting Production and Corporate systems to develop detection and response automation leveraging both industry-standard and custom detection and response platforms.
Youll generate detection ideas utilizing some of the worlds largest data sets and build on top of hyper-scale data pipelines.
Security Engineer - Surface Coverage, Detection Engineering Responsibilities:
Lead cross-functional projects to improve our capabilities to effectively detect and respond to security incidents
Review security architecture of large-scale custom and commercial systems and independently propose logging, detection and prevention controls
Perform TTP-based Threat Modeling for a wide variety of assets including endpoints, mobile, servers, internal services, public & private cloud environments and networking equipment
Perform analysis against logs from a variety of sources (e.g. individual host logs, network traffic logs) to identify potential threats and detection ideas
Build response workflows and actions that auto-resolve false positives and provide context scaling our ability to investigate
Support security incident response in a cross-functional environment and drive incident resolution
Design and implement attack testing automation to validate detection coverage
Build logging pipelines using our custom datasets and infrastructure

If you are an experienced, tech lover, cloud enthusiastic and want to be part of an industry-disrupting tech company, please apply to join our journey in building the next big thing in finance.

Responsibilities:
Design, implement, and maintain automated infrastructure solutions using tools like Terraform, CloudFormation, and scripting languages.
Lead the deployment and management of infrastructure in AWS, ensuring scalability, reliability, and security.
Develop and optimize CI/CD pipelines to ensure rapid and reliable deployment of applications and infrastructure changes using tools like CircleCI and Terraform Cloud.
Implement, monitor, and maintain Docker containers and Kubernetes clusters to facilitate scalable, high-performance application environments.
Ensure infrastructure is secure, compliant, and resilient by applying best practices in access control, monitoring, encryption, and disaster recovery planning; Participate in regulatory audit processes such as those conducted by the Bank of Israel and SOC 2.
Continuously monitor infrastructure performance, identify bottlenecks, and resolve incidents to maintain uptime and reliability in compliance with SLA.
Collaborate cross-functionally with development, security, and operations teams; Establish and promote the standards of IaC and a DevOps mindset within the company.