Security Systems Engineer

Company Description

Colmex Israel established in 2016, Colmex Israel operates under a Trading Arena Operator License and is regulated by the Israel Securities Authority.

We place client interest at the core of everything we do - guided by professionalism, transparency, and reliability.

Our platform provides access to CFDs on indices, commodities, forex, U.S. equities, and TASE-listed stocks, supported by competitive pricing, transparent fee structures, and fast execution, delivering a reliable and efficient trading experience for the Israeli market.

Role Description:

Cybersecurity Strategy & Enterprise Governance

• Design, develop, and lead the implementation of comprehensive security policies, standards, and governance frameworks across the enterprise stack.
• Advise on emerging security trends and risk-based prioritization.

Advanced Security & Operations

• Architect and optimize access control and identity management (IAM) models across the enterprise.
• Lead system hardening initiatives for complex Windows and Linux environments, establishing baseline security standards for all new infrastructure.
• Serve as the Security Subject Matter Expert (SME) for IT projects, ensuring "Security by Design" is integrated into all system implementations.
• Evaluate and recommend new security tools and technologies to enhance the defensive posture.
• Vulnerability Lifecycle: Lead the Vulnerability Management program; prioritizing patching and remediation efforts based on risk scoring (CVSS) and exploitability.
• Lead Penetration Testing (PT) engagements with external firms and take actions for remediating findings with the IT team.
• Multi-Cloud Security: Design and oversee security controls across multi-cloud environments, ensuring consistent identity boundaries and data protection.

Compliance Management (ISA, CySEC, DORA)

• Assist with regulatory audits.
• Execute tasks related to risk assessments, gaps, remediation.
• Ensure policies are aligned with regulatory requirements.
• Translate complex regulatory requirements into actionable technical controls.

Incident Orchestration & Risk Management

• Incident Response function, including high-level triage, forensic evidence collection oversight, and post-mortem analysis.
• Optimize SIEM/SOC workflows to improve detection capabilities and reduce "Mean Time to Respond" (MTTR).
• Perform quantitative and qualitative risk assessments, presenting findings and mitigation strategies.

Must have:

• 6+ year's experience in Cybersecurity
• Technical Mastery: Proven experience implementing and tuning Cloudflare and Microsoft Defender (ATP/M365).
• Hardening Expertise: Hands-on experience securing both Windows and Linux.
• Automation: Ability to script for automated compliance monitoring.
• Audit Experience: Background in leading ICT audits and managing external pentest teams.
• Network/Cloud: Experience with Azure/AWS security groups and cloud native security tools.
• Language: English, Hebrew