Senior Cybersecurity Consultant

CISO as a Service & Security Consultant | Netanya and Tel Aviv area (On-Site)

CyCloak is a boutique Israeli cybersecurity advisory firm helping organizations manage cybersecurity risks and strengthen security across cloud environments, applications, and infrastructure.

We are looking for an experienced cybersecurity professional with a strong hands-on technical background and the ability to advise clients, lead security initiatives, and deliver CISO as a Service. The role focuses on advisory, technical guidance, and oversight of implementation by client teams.

What You’ll Do:

• Deliver CISO as a Service to clients: develop security strategies and prioritized work plans, define policies and security requirements, and track progress against business needs and security priorities.

• Review cloud and hybrid architectures and security configurations, and provide practical hardening recommendations across infrastructure and applications.

• Define security requirements for identity and access management, network segmentation, data protection, encryption, secrets management, secure access and AI security.

• Advise IT, development, and DevOps teams on application and API security and on integrating security requirements into technology projects and development processes.

• Guide client teams in addressing security gaps and penetration testing findings, prioritize remediation, and review evidence of implementation.

• Support clients in aligning security policies and practices with applicable standards and compliance requirements.

• Contribute to professional research, continuous learning, and knowledge sharing within the team.

 What We’re Looking For:

• At least 5 years of experience in information security, including hands-on technical experience hardening cloud infrastructure and applications.

• Strong knowledge of cloud identity and permissions, networking, encryption, and secrets management.

• Practical experience reviewing and configuring security controls in at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud.

• Practical understanding of application and API security, including authentication, authorization, secure configuration, and common vulnerabilities.

• The ability to translate technical findings into clear recommendations and prioritized work plans that account for business needs and operational constraints.

• The ability to lead client discussions, coordinate stakeholders, and drive security improvements. 

• Strong written and verbal communication skills in Hebrew and English, including professional documentation and presentations.

Personal Skills:

• Professional assertiveness and the ability to influence stakeholders and drive progress without direct authority.

• Strong service orientation and the ability to provide practical advice tailored to client needs.

• Excellent teamwork and collaboration with colleagues and client teams.

• The ability to explain technical risks clearly to both technical and non-technical audiences.

• Ownership, initiative, sound judgment, and the ability to manage priorities across multiple clients.

Nice to Have:

• Certificate of completion of a CISO training course and previous experience in a CISO role.

• Familiarity with information security governance, risk management, and certification processes such as ISO 27001

• Previous experience in cybersecurity consulting or client-facing technical roles.

• Familiarity with secure development practices and CI/CD security.

• A background in on-prem or cloud system and network administration.

• Certifications such as CISSP, CISM, CCSP, or cloud security certifications.

Why Join CyCloak:

• Join a boutique team that values expertise, collaboration, and quality service.

• Work on real-world cyber incidents and high-impact projects.

• Work with diverse organizations, technologies, and cloud environments.

• Develop your consulting and security leadership capabilities.