חברות הייטק בישראלSolvo, Now Part of CYEDFIR

DFIR

Solvo, Now Part of CYE logo
Solvo, Now Part of CYE· Computer and Network Security
Herzliya, Tel-Aviv District, Israelפורסמה החודשFull Time

כישורים מהמשרה

Digital ForensicsIncident ResponseCloud SecurityThreat HuntingTTP AnalysisNetwork ForensicsSplunkElasticsearchSQLVQLWindows ForensicsLinux ForensicsCyber Threat IntelligenceRemediation PlanningData AnalysisEnglish Communication

תיאור המשרה

CYE's DFIR team is responsible for responding to our clients' cyber incidents and crises. Our group is expanding. If you see yourself in the front line of the cybersecurity domain as a digital forensic and incident response (DFIR) talent, your place is with us. As a DFIR team member, you will participate in hands-on security research and investigations, helping our customers understand and mitigate cyber threats and attacks. Responsibilities Perform incident response lifecycle and real-time activities, including detection and analysis, containment and eradication, and recovery Perform incident response in a cloud environment (Azure, AWS etc.). Perform digital forensics investigations Research and analyze tactics, techniques, and procedures (TTPs) used by malicious actors Perform hunt-evil and find-evil activities for proactively detecting attacks Work closely with our in-house red team, CTI, and cyber architect teams Work closely with worldwide companies, CISOs, and technology experts Qualifications 2-3 years of experience as a DFIR team member Experience with performing digital forensics in a cloud environment Experience with performing digital forensics of Windows-based and/or Linux-based platforms, network forensics, and analysis Thorough understanding of threat hunting models, as well as cyber threat intelligence, including TTP and IoCs extraction and mapping Experience with research and data analysis of large DBs via Splunk, Elasticsearch, SQL, or VQL Strong understanding of targeted attacks; able to create customized tactical remediation plans Good written and verbal English communication skills About us Cye helps security and risk leaders gain a clear, defensible view of their cyber exposure, grounded in financial impact and real-world attack paths. By continuously quantifying exposure and validating it in context, organizations can establish a strong baseline, prioritize decisions with confidence, and track measurable reduction over time.
Solvo, Now Part of CYE logo

על Solvo, Now Part of CYE

Solvo is empowering developers and DevOps engineers by enabling them to run their cloud infrastructure with least privilege access, fast and at scale. Solvo is an adaptive cloud infrastructure security platform that enables organizations to innovate at cloud speed and scale. Leveraging real-time monitoring and analysis across cloud infrastructure, applications, data and users, Solvo automatically creates customized, constantly updated least privileged access policies based on the level of risk associated with entities and data in the cloud. Solvo’s contextual, multi-dimensional analytics help CISOs identify and prioritize risks, and proactively mitigate cloud misconfigurations and vulnerabilities while facilitating collaboration between security, DevOps and engineering teams. Using Solvo, organizations can reduce their cloud attack surface, simplify compliance, and grow their business in a secure manner.

לעמוד החברה

עוד משרות ב-Solvo, Now Part of CYE