Security Leader
פורסם לפני 17 ימים · 0 מועמדים
התפקיד במילים פשוטות
התפקיד כולל הובלת אבטחת המידע בארגון המחקר והפיתוח של החברה ועיצוב אסטרטגיית האבטחה של מוצריה. המוביל ינהל את מחזור הפיתוח המאובטח (SDLC), יבצע סקירות ארכיטקטורה ומידול איומים, וישמש כמגיב ראשון באירועי אבטחה. בנוסף, התפקיד כולל ניהול כלי AppSec וטיפול בדיווחי פגיעויות.
- Proven ability to lead and influence leaders across the organization
- In-depth knowledge of Secure Development Life Cycle (SDLC) processes, secure architecture, third-party tools, and security policies
- Threat modeling & secure design - Ability to review architectures, identify abuse cases, and guide developers on secure design decisions early in the lifecycle
- Expertise in identifying, analyzing, and mitigating security vulnerabilities, including familiarity with Common Vulnerabilities and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS)
- Hands-on experience with AppSec tooling - SAST, DAST, SCA (e.g., SonarQube, Snyk, JFrog Xray), including tuning, triaging results, and integrating into CI/CD pipelines
- Prior experience in software development
חולץ מתיאור המשרה · מתעדכן אוטומטית
למי זה מתאים
התפקיד מתאים לאנשי אבטחת מידע בעלי יכולת הובלה והשפעה רוחבית, עם ידע מעמיק ב-SDLC, מידול איומים ושימוש בכלי AppSec כגון SAST ו-DAST. הוא פחות יתאים למי שאין לו ניסיון מעשי בניהול פגיעויות וארכיטקטורה מאובטחת.
תיאור המשרה המלא
המשרה המקורית · נשמר לעיוןWhy Join Us?
We are looking for a Security Lead to join Check Point’s R&D organization, taking a central, cross-functional role in shaping the security posture of our products. This role combines deep hands-on expertise with cross-organizational leadership, working closely with senior leaders to shape and implement security strategy across all product lines. You will lead end-to-end security initiatives, influence engineering practices at scale, and play a critical role in ensuring our products meet the highest security standards.
Key Responsibilities
• Lead security in the R&D organization by professionalism and cooperation across Check Point
• Maintain and develop the Secure Development Life Cycle of all Check Point’s Products Organization, work with R&D, QA, Sales, Support, external researchers, and customers to make the cyber landscape a safer place.
• Conduct architectural security reviews and threat modeling for R&D
• Full triage for Check Point's VDP and BBP reports, including analyzing reports, calculating severities and communications with reporters.
• Define and develop security training to implement cross organization
• Be a first responder in security incidents, including leading and defining actions to resolution
• Manage and monitor Check Point's SCA, SAST, DAST tools
Qualifications
• Proven ability to lead and influence leaders across the organization.
• In-depth knowledge of Secure Development Life Cycle (SDLC) processes, secure architecture, third-party tools, and security policies.
• Threat modeling & secure design - Ability to review architectures, identify abuse cases, and guide developers on secure design decisions early in the lifecycle.
• Expertise in identifying, analyzing, and mitigating security vulnerabilities, including familiarity with Common Vulnerabilities and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS).
• Hands-on experience with AppSec tooling - SAST, DAST, SCA (e.g., SonarQube, Snyk, JFrog Xray), including tuning, triaging results, and integrating into CI/CD pipelines.
• Experience with vulnerability management and the ability to interpret and apply security standards, guidelines, and regulations.
• Proficiency in secure coding practices and the ability to conduct code reviews for security vulnerabilities.
• Familiarity with incident response processes, security monitoring, and threat intelligence.
• Offensive mindset - Ability to think like an attacker (manual testing, basic exploitation techniques) to validate real impact and reduce false positives.
Advantage
• Prior experience in software development.
שאלות על המשרה
- המשרה לא ציינה שכר. אנחנו מציגים שכר רק כשהמעסיק מפרסם אותו.
- Proven ability to lead and influence leaders across the organization, In-depth knowledge of Secure Development Life Cycle (SDLC) processes, secure architecture, third-party tools, and security policies, Threat modeling & secure design - Ability to review architectures, identify abuse cases, and guide developers on secure design decisions early in the lifecycle, Expertise in identifying, analyzing, and mitigating security vulnerabilities, including familiarity with Common Vulnerabilities and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS), Hands-on experience with AppSec tooling - SAST, DAST, SCA (e.g., SonarQube, Snyk, JFrog Xray), including tuning, triaging results, and integrating into CI/CD pipelines