Security Architect

THE JOB

This is an exciting opportunity for an experienced Cyber Security Architect to join the company’s team in Tel Aviv, where you will be responsible for auditing, assessing, and advising on the security architecture and practices across our IT systems. You will collaborate with various teams to ensure that security is seamlessly integrated into the design and development of new IT systems and services. Your primary focus will be identifying risks, ensuring compliance with security standards, and advising on the implementation of security controls.

You will play a critical role in reviewing security concepts, conducting assessments, and ensuring Porsche's IT infrastructure adheres to the highest security standards and best practices.

What You Will Do

• Security architecture reviews and assessments: Review and audit cloud, infrastructure, application architectures, and critical code components to ensure alignment with security standards and best practices. Identify weaknesses, recommend improvements, and validate security controls for new and existing IT systems.

• Security standards and compliance: Define, review, and enforce security standards and frameworks (e.g., ISO/IEC 27001, NIST) across IT projects by evaluating policies, controls, and architectural decisions.

• Risk assessment and threat modeling: Proactively identify and assess security risks through risk assessments and threat modeling, ensuring vulnerabilities are addressed early in the design and delivery lifecycle.

• Security strategy and coaching: Provide strategic security guidance and advanced coaching to development and infrastructure teams, embedding security principles into design, development, and operational workflows.

• Project and stakeholder collaboration: Partner closely with cross-functional teams to ensure security requirements are integrated into all stages of system design, development, and deployment.

• AI-assisted auditing: Evaluate AI- and ML-based security tools designed to support auditing and compliance processes, ensuring their outputs are reliable, secure, and aligned with enterprise security standards.

What You Bring Along

• 3–5 years of experience in cybersecurity, with hands-on expertise in security architecture reviews, audits, and assessments for enterprise IT systems.
• Strong background in designing and evaluating secure architectures across applications, infrastructure, and cloud environments (AWS, Azure, GCP), aligned with standards such as ISO/IEC 27001 and NIST.
• Proven experience in security risk management, including threat modeling, vulnerability assessments, and mitigation of common exploit types (OWASP Top 10, CWE/SANS Top 25).
• Experience conducting security and compliance reviews across cloud, infrastructure, and application layers.
• Agile, collaborative mindset with the ability to embed security into fast-paced IT projects.
• Bachelor’s or Master’s degree in a relevant field or equivalent experience; security certifications (e.g., CISSP, CISM) are a plus.
• Understanding of AI and machine-learning systems, with the ability to assess and address security, privacy, and governance risks in AI-based solutions.
• Strong communication skills in English and Hebrew (German is a plus).