Cyber Researcher & Industrial SOC Manager

NESS is looking for an Experienced Cyber Researcher & Industrial SOC Manager.

Location: Be'er Sheva (National Cyber Directorate) .

Position Type: Full-time.

Objective: Enhancing cyber resilience for hazardous materials industrial plants under the Ministry of Environmental Protection.

Role Overview:

We are seeking an experienced Cyber Researcher to manage an Industrial SOC. The role involves overseeing SOC operations, managing security incidents, communicating with monitored entities, and onboarding new organizations. The position requires a leader with a creative mindset, capable of working in a high-pressure, technology-driven environment that encourages self-learning and initiative.

Key Responsibilities

• SOC Management: Comprehensive management of SOC operations and incident response (IR).
• Stakeholder Management: Coordinating with monitored entities and integrating new organizations into the SOC.
• Advanced Research: Leading research initiatives in at least two of the following areas: Malware Analysis, Vulnerability Research, Forensics, Advanced Protocol Research, Penetration Testing, Reverse Engineering, and Cyber Intelligence.
• Technical Development: Developing supporting tools for advanced research and conducting systems/protocol-based studies.
• Monitoring & Investigation: Analyzing logs, traffic, and communications; performing cyber incident investigations and preparing attack surface mappings.
• Leadership: Managing a team of controllers and analysts.

Threshold Requirements & Education:

Candidates must meet one of the following educational criteria:

1. Academic Degree: Bachelor’s degree in Computer Science, Exact Sciences, or Engineering.
2. Practical Engineer (Handessai): Graduate in Computers or Technology.
3. Professional Training: Completion of significant professional cyber defense training (at least 400 hours, RAM-certified or equivalent).
4. Military Background: Graduate of an IDF technological unit (e.g., 8200, Mamram, Teleprocessing Corps).

Note regarding certifications: Official certifications are not mandatory at this stage. However, once the new certification standards come into effect, all service providers will be required to obtain them within 24 months as a condition for continued engagement.

Professional Experience & Skills

• Minimum 5 years of experience in cyber research and SOC operations.
• SOC Management Experience: Proven experience in managing a SOC, specifically one that monitors OT (Operational Technology) systems.
• Technical Proficiency:
• Proven experience with Big Data technologies and advanced research tools.
• Hands-on experience with Attack Surface Management tools (e.g., Bitsight, Panorays, or RiskRecon).
• Proficiency with SIEM/SOAR platforms (e.g., Splunk, QRadar, ArcSight, Chronicle).
• Deep understanding of OT Network Monitoring and industrial protocols.
• Security Stack Familiarity: Experience with security logs from EDR/Firewall providers (CrowdStrike, SentinelOne) and OT-specific security (TXONE, Aruba).
• Development: Knowledge of programming languages and YARA for rule writing.
• Interpersonal Skills: High-level leadership, teamwork, and the ability to work independently under pressure.

Additional Requirements

• Security Clearance: Candidates must hold or be eligible for a high-level security clearance.
• Professional Exam: Success in a professional technical exam (weighted as 20% of the total evaluation).
• Recommendations: Subject to providing references from previous employers.