Jerusalem
Full time
What will your job look like:
-
Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds.
-
Integrate security tools and services using APIs, webhooks, scripts, and automation platforms.
-
Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response.
-
Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms.
-
Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions.
-
Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems.
-
Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation.
-
Create and maintain incident-response runbooks, investigation guides, detection documentation, and automation procedures.
-
Translate investigation findings and post-incident lessons learned into improved detections, automation workflows, and security controls.
All you need is:
-
1-2 years of hands-on experience in Security Operations, SOC, Cyber Analysis, Incident Response, or Detection Engineering - Must.
-
Practical experience operating and maintaining SIEM platforms, including log onboarding, parsing, developing and tuning detection rules and alerting use cases - Must
-
Excellent written and verbal communication skills for documentation and reporting in English.
-
Experience analyzing security telemetry from different systems such as EDR, Windows and Linux systems, identity services, cloud environments, email-security tools, firewalls, DNS, proxy, VPN, and network devices.
-
Strong understanding of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework.
-
Proficiency in SIEM query languages such as KQL or SQL - Advantage
-
Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, JSON, or webhooks - Advantage.
-
Familiarity with SOAR platforms and automation workflows for alert enrichment, investigation, case management, and response - Advantage.
Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!
