Cyber Security Engineer

We are looking for a Cyber Security Engineer who can provide an ongoing participation and consultation in IT security aspects of OP’s customers systems and products.

Providing expertise in best systems security practices, advising on IT architecture, security posture, network hardening, analysing systems and participating in red-team processes and reports, are some of the diverse responsibilities we seek.

We’re looking for a team member. Someone who can collaborate with our multidisciplinary team of Cyber Security specialists to meet the challenges our customers encounter 

Ultimately, the successful candidate will work directly with customers to help solve their system security-related problems and ensure their satisfaction with OP’s solutions.

Responsibilities:

• Develop tailored security postures in IT and Network areas to meet customer requirements.
• Conduct risk assessments and audits to identify compliance gaps and recommend remediation strategies.
• Collaborate with cross-functional Cyber Security teams to provide solutions for OP’s customers.
• Prepare detailed reports of audit and red-teaming activities.
• Monitor changes in the security landscape and integrate best industry practices into customer workflows.

Qualifications:

•  5+ years of experience in cyber systems architecture, IT security or related fields.
• Experience drafting policies and procedures documentation.
• Understanding of security frameworks and standards (e.g., ISO 27001, NIST CSF, OWASP).
• Proven ability to conduct risk assessments and manage audit processes.
• Exceptional verbal, written, and presentation skills in English and Hebrew.

Preferred:

• Experience with industry-specific compliance regulations (such as Medical, Automotive, Security etc)
• Practical Knowledge and familiarity with cyber solutions and products.
• Software/System development related experience
• Certifications: CISA, CRISC, CISSP, or ISO 27001 Lead Implementer.
• Practical Knowledge of OWASP Top 10 and common vulnerabilities (for risk context).
• Experience with cloud compliance (AWS, Azure, GCP).