Security Engineer (Cloud Security)

TL;DR

Security Engineer (Cloud Security): Securing cloud, SaaS, and AI-driven systems with an accent on cloud operations, incident monitoring, and GRC support. Focus on mitigating vulnerabilities across AWS, GCP, and Azure, managing identity access, and maintaining compliance frameworks like SOC 2 and ISO 27001.

Location: Tel Aviv

Company

hirify.global is a pioneering API security vendor that provides patented solutions to discover APIs, stop attackers, and ensure secure API development.

What you will do

• Monitor, triage, and investigate security alerts across EDR, CASB, ZTNA, and SaaS security platforms.
• Secure cloud environments in AWS, GCP, and Azure, focusing on IAM, network security, and CI/CD pipelines.
• Collaborate with DevOps and IT teams to implement and enforce security best practices across infrastructure and endpoints.
• Manage vulnerability scanning, prioritization, and remediation tracking.
• Respond to customer security questionnaires (RFPs/RFIs) with technical accuracy.
• Maintain compliance with SOC 2 and ISO 27001 frameworks and prepare audit evidence.

Requirements

• 1-2 years of experience in cybersecurity, cloud security, and security operations.
• Hands-on experience with AWS, GCP, or Azure.
• Understanding of core security concepts including IAM, networking, and least privilege.
• Familiarity with EDR, vulnerability scanners, or SaaS security solutions.
• Strong analytical and troubleshooting skills with high attention to detail.
• Location: Must be based in Tel Aviv

Nice to have

• Experience securing CI/CD pipelines and infrastructure-as-code (e.g., Terraform).
• Familiarity with identity systems such as Okta or Azure AD.
• Knowledge of compliance frameworks like SOC 2, ISO 27001, or NIST.

Culture & Benefits

• Dynamic startup environment with the ability to see the immediate results of your work.
• Opportunity to make an outsized impact on the company's security posture.
• Collaborative team culture that welcomes and embraces new ideas.
• Exposure to diverse challenges across technical security and GRC domains.