Vacancies
Senior Security Engineer (hybrid/ Tel-Aviv, Israel)
About this role
As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory.
You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support company’s ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide.
Responsibilities
- Secure product and clinical workflows end-to-end – Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features.
- Drive secure-by-design architecture – Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling.
- Strengthen cloud-native security – Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management.
- Embed security into the development lifecycle – Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls.
- Own vulnerability management as an engineering system – Prioritize vulnerabilities based on exploitability, product exposure, customer impact, clinical risk, and regulatory relevance. Drive remediation with engineering teams and reduce recurring issues through root-cause improvements.
- Secure AI/ML-driven features and data pipelines – Partner with AI, data, and platform teams to identify risks related to training and inference data, model inputs and outputs, model misuse, data leakage, access to sensitive datasets, pipeline integrity, and production monitoring.
- Improve software supply-chain security – Reduce risk across open-source dependencies, third-party components, third-party algorithms, container images, build systems, artifact repositories, release pipelines, and deployment processes.
- Mentor and enable engineers – Help developers understand security risks, make secure design decisions, and take ownership of security in their code, services, and infrastructure.
- Communicate risk clearly – Translate technical security findings into clear risk, impact, and trade-off language for engineering, product, leadership, quality, regulatory, and customer-facing stakeholders.
Requirements:
- 5+ years of experience in Product Security, Application Security, Cloud Security, or a similar hands-on security engineering role.
- Strong hands-on experience securing production systems, not only performing assessments or reviews.
- Strong understanding of secure design, threat modeling, and architecture risk analysis.
- Deep knowledge of application security, including OWASP Top 10, API security, authentication, authorization, access control, secure session handling, input validation, and modern attack vectors.
- Experience securing distributed systems, APIs, web applications, backend services, and cloud-native architectures.
- Strong experience with cloud environments, especially AWS and/or Azure, including IAM, network security, encryption, logging, monitoring, and workload security.
- Experience with Kubernetes, containers, infrastructure-as-code, CI/CD pipelines, and modern DevOps workflows.
- Practical experience with security tooling such as SAST, SCA, IaC scanning, container scanning, secrets detection, SBOM tools, vulnerability scanners, and cloud security tools.
- Experience with vulnerability management, risk prioritization, remediation planning, and working with engineering teams to fix issues at scale.
- Strong understanding of software supply-chain security, including dependency risk, build/release integrity, artifact security, and third-party component governance.
- Experience working with modern development stacks such as Python, Java, JavaScript/TypeScript, React, microservices, APIs, and cloud-native services.
- Ability to influence engineers through technical credibility, practical guidance, and strong collaboration.
- Strong communication skills and the ability to explain security risks to technical and non-technical stakeholders.
SecOps Detection & Response (hybrid/ Tel-Aviv, Israel)
About this role
As a Security Operations Analyst, Detection & Response, you will help protect cloud environments, products, corporate systems, and sensitive healthcare data by investigating SIEM alerts, supporting incident response, and improving the quality of security monitoring.
This is a hands-on security operations role for someone who can analyze security signals, understand real risk, communicate clearly, and help the organization respond quickly and effectively to security events.
You will work closely with real production environments, where accurate investigation, clear documentation, and practical escalation are critical to protecting sensitive healthcare data, customer trust, and the reliability of the clinical AI platform.
Responsibilities:
- Own the end-to-end investigation of SIEM alerts across cloud, product, identity, endpoint, and SaaS environments: analyze the relevant evidence, separate false positives from real threats, and prioritize cases based on risk and impact.
- Escalate high-risk findings with a clear summary of what happened, what is affected, why it matters, and what actions are required.
- Support incident response by collecting evidence, assisting with containment, tracking remediation, and maintaining clear investigation records for internal reviews, compliance needs, and post-incident learning.
- Improve SIEM rules, dashboards, alert logic, playbooks, telemetry coverage, and detection quality to reduce noise and strengthen security monitoring.
- Work with Security, IT, DevOps, R&D, Product Security, and Compliance teams to resolve issues and improve security operations.
Requirements:
- 2+ years of experience in Security Operations, SOC analysis, detection and response, incident response, cloud security operations, or a similar hands-on security role.
- Hands-on experience with SIEM-based investigations, including alert triage, log analysis, event correlation, evidence review, case prioritization, and escalation.
- Experience working with security telemetry from cloud platforms, identity providers, endpoints, SaaS systems, network tools, application logs, and production environments.
- Familiarity with cloud-native environments, including IAM, storage access, workloads, Kubernetes, containers, APIs, logging, monitoring, and CI/CD pipelines.
- Understanding of common attack techniques, including credential compromise, phishing, privilege escalation, suspicious API activity, malware, data exposure, lateral movement, and cloud misconfigurations.
- Experience with identity and endpoint investigation, including SSO, MFA, service accounts, privileged access, EDR alerts, and suspicious user or device activity.
- Ability to use query or scripting languages such as KQL, SPL, SQL, Python, Bash, or similar.
- Familiarity with incident response workflows, case management, evidence collection, remediation tracking, and post-incident review.
- Strong analytical judgment, with the ability to separate false positives from real risk and explain findings clearly.
- Ability to work independently, document investigations clearly, and escalate issues with the right level of urgency.
- Strong communication skills and the ability to work with Security, IT, DevOps, R&D, Product Security, Compliance, and business stakeholders.
- Close attention to detail, strong ownership, and comfort working in a fast-moving production environment.
Additional Strengths:
- Experience in healthcare, healthtech, medical devices, digital health, or regulated software environments.
- Familiarity with HIPAA, GDPR, SOC 2, ISO 27001, NIST CSF, or similar security and privacy frameworks.
- Familiarity with MITRE ATT&CK, detection logic, attacker behavior, and investigation playbooks.
- Experience with threat hunting, detection engineering, malware analysis, forensics, or advanced incident response.
- Experience with SOAR platforms, case management systems, threat intelligence feeds, detection-as-code, or SOC automation.
- Experience improving SOC metrics such as alert noise, false-positive rate, time to triage, time to escalation, and investigation quality.
- Experience working with sensitive data, PHI/PII, customer-facing environments, or audit-ready evidence collection.
QA Automation Engineer (REMOTE/ Ukraine)
About the role
We are looking for a strong QA Automation Engineer with a clear backend orientation and the ability to work across the full stack.
The ideal candidate has solid programming skills, strong analytical thinking, and hands-on experience designing and maintaining automated tests for backend services, APIs, integrations, UI flows, and E2E business scenarios. This role is primarily focused on backend and complex system validation, but requires someone who can understand the complete product flow, from user behavior and frontend interaction to backend processing, data, services, and integrations.
We are looking for a hungry, self-motivated, and self-learning engineer who takes ownership, asks the right questions, and continuously improves both the product and the testing approach.
Key Responsibilities:
- Design, develop, and maintain automated test suites for backend services, APIs, integrations, and E2E business flows.
- Build reliable and maintainable automation using Python, PyTest, TypeScript, Playwright, Cypress, and relevant testing frameworks.
- Validate RESTful APIs, service integrations, data flows, backend processes, frontend behavior, and critical user journeys.
- Analyze product requirements, architecture, technical designs, and customer use cases, and translate them into effective test scenarios.
- Understand complex user and system flows to identify risks, coverage gaps, edge cases, and critical validation points.
- Collaborate closely with developers, QA engineers, DevOps, product owners, project managers, and other stakeholders throughout the product SDLC.
- Work effectively in Agile environments, including refinement, planning, estimation, execution, demos, and retrospectives.
- Integrate automated tests into CI/CD pipelines using tools such as Jenkins, GitLab, or similar platforms.
- Investigate test failures, analyze logs and system behavior, report defects clearly, and support root-cause analysis processes.
- Participate in code reviews and contribute to improved code quality, testability, and automation standards.
- Support testing of performance, stability, scalability, and resilience where relevant.
- Take ownership of assigned areas, proactively identify quality risks, and drive improvements in automation coverage and testing practices.
- Continuously learn new tools, technologies, and testing approaches, and apply them where they create value.
Requirements:
- Proven experience in QA automation.
- Strong programming skills in Python.
- Hands on experience with PyTest or similar Python testing frameworks.
- Hands on experience writing E2E and UI automation tests using Playwright and/or Cypress with TypeScript or JavaScript.
- Strong understanding of RESTful APIs and backend testing practices.
- Strong understanding of testing methodologies.
- Experience testing complex systems, integrations, services, data flows, user flows, or distributed environments.
- Ability to work across the full stack while maintaining a strong backend testing focus.
- Strong customer orientation and the ability to understand product behavior from the user’s perspective.
- Experience working in Agile development environments.
- Good understanding of the product SDLC and the role of QA throughout the development lifecycle.
- Experience working with CI/CD pipelines and tools such as Jenkins, GitLab, or similar.
- Good understanding of databases and ability to work with SQL.
- Strong debugging, analytical, and problem-solving skills.
- High ownership, self-motivation, curiosity, and ability to learn independently.
- Ability to understand technical requirements, architecture, and system behavior.
- Strong communication and collaboration English (Upper-Intermediate+) skills.
- BSc in Computer Science, Engineering, or equivalent practical experience.
Nice to Have:
- Experience with load, performance, stability, or resilience testing.
- Experience with Docker, containers, or cloud-based environments.
- Experience with test reporting tools such as Allure or Xray.
- Manual QA background.
- Experience working in medical, laboratory, healthcare, regulated, or enterprise systems.
- Familiarity with AI assisted development or testing tools.