Cyber Security Operations Specialist

Listed by employer · Checked under 1h ago

Posting date unknown

hybrid
Full time
IT & Information Security
Jerusalem, Israel

Work arrangement: hybrid
Employment: Full time
Stated compensation: Not specified
Stated sponsorship: Not stated

Apply on company website ↗

01 / A QUICK CHECK BEFORE YOU APPLY

Does the location policy fit?

Choose where you would work from. We’ll compare it with the posting’s stated requirements.

Check this role from your country

Choose the country you will work from. You can change this anytime.

I would need employer visa sponsorship

Country and sponsorship changes take effect when you click Check eligibility.

Choose a country to check geographic compatibility. The source requirements are available below.

Source: leverChecked under 1h agoOriginal posting ↗

This checks the posting’s stated requirements, not your legal right to work. Confirm details with the employer.

Requirements

2 with evidence7 unclear or unstated

Remote policy: hybrid
“Provider workplace type: hybrid”
From employer posting metadata
Minimum experience (years): 1
“1-2 years of hands-on experience in Security Operations, SOC, Cyber Analysis, Incident Response, or Detection Engineering - Must.”
See matched passage in original description ↓
Employment type: Full time

8 fields not stated in this posting

Employer sponsorship: Not specified
Geographic scope: Not specified
Degree requirement: Not specified
Security clearance: Not mentioned
Timezone / hours: Not specified
Citizenship requirement: Not mentioned
Work authorization: Not specified
Compensation: Not specified

These details were not stated in the tracked posting. Confirm with the employer.

READ IT IN THE EMPLOYER’S OWN WORDS

Original job description

Reading view uses normalized posting text so exact evidence excerpts can be highlighted.

We are seeking a hands-on Cyber Security Operations Specialist with strong SIEM/SOAR and Cyber Analyst capabilities. You will work closely with SOC analysts, IT, cloud, infrastructure, and engineering teams to improve security visibility, reduce response times, and continuously enhance the organization’s cyber resilience. The ideal candidate combines strong analytical and investigative capabilities with practical experience in security monitoring, log analysis, detection engineering, scripting, and security-tool integrations.

Read full descriptionShow less description

This position requires on-site presence at our Jerusalem campus 4 days per week, with the option to work from home one additional day. What will your job look like: Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds. Integrate security tools and services using APIs, webhooks, scripts, and automation platforms. Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response. Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms. Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions. Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems. Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation. Create and maintain incident-response runbooks, investigation guides, detection documentation, and automation procedures. Translate investigation findings and post-incident lessons learned into improved detections, automation workflows, and security controls. All you need is: 1-2 years of hands-on experience in Security Operations, SOC, Cyber Analysis, Incident Response, or Detection Engineering - Must. Practical experience operating and maintaining SIEM platforms, including log onboarding, parsing, developing and tuning detection rules and alerting use cases - Must Excellent written and verbal communication skills for documentation and reporting in English. Experience analyzing security telemetry from different systems such as EDR, Windows and Linux systems, identity services, cloud environments, email-security tools, firewalls, DNS, proxy, VPN, and network devices. Strong understanding of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework. Nice to have: Proficiency in SIEM query languages such as KQL or SQL. Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, JSON, or webhooks. Familiarity with SOAR platforms and automation workflows for alert enrichment, investigation, case management, and response. Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!

Original formatting and links

We are seeking a hands-on Cyber Security Operations Specialist with strong SIEM/SOAR and Cyber Analyst capabilities.
You will work closely with SOC analysts, IT, cloud, infrastructure, and engineering teams to improve security visibility, reduce response times, and continuously enhance the organization’s cyber resilience.
The ideal candidate combines strong analytical and investigative capabilities with practical experience in security monitoring, log analysis, detection engineering, scripting, and security-tool integrations.

This position requires on-site presence at our Jerusalem campus 4 days per week, with the option to work from home one additional day.

What will your job look like:

Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds.

Integrate security tools and services using APIs, webhooks, scripts, and automation platforms.

Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response.

Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms.

Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions.

Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems.

Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation.

Create and maintain incident-response runbooks, investigation guides, detection documentation, and automation procedures.

Translate investigation findings and post-incident lessons learned into improved detections, automation workflows, and security controls.

All you need is:

1-2 years of hands-on experience in Security Operations, SOC, Cyber Analysis, Incident Response, or Detection Engineering - Must.

Practical experience operating and maintaining SIEM platforms, including log onboarding, parsing, developing and tuning detection rules and alerting use cases - Must

Excellent written and verbal communication skills for documentation and reporting in English.

Experience analyzing security telemetry from different systems such as EDR, Windows and Linux systems, identity services, cloud environments, email-security tools, firewalls, DNS, proxy, VPN, and network devices.

Strong understanding of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework.

Nice to have:

Proficiency in SIEM query languages such as KQL or SQL.

Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, JSON, or webhooks.

Familiarity with SOAR platforms and automation workflows for alert enrichment, investigation, case management, and response.

Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!

Similar roles

All mobileye jobs →

No similar roles found yet — browse all mobileye jobs.