<p>We are looking for</p> <p>For our site in Haifa/Rehovot, we are looking for an Incident Responder - DFIR Specialist to join a dynamic cybersecurity team in the GO division.</p> <p>You will be at the forefront of defending the organization against cyber threats - investigating security incidents, performing deep-dive forensic analysis, and developing actionable response and remediation plans. Your work will directly impact the digital resilience of a leading defense organization, shaping its detection and response capabilities.</p> <p>Come be part of a team that tackles real-world challenges in an advanced technological environment where every action carries meaning.</p> <p>In this role you will</p> <p>Investigate and analyze security incidents to determine scope, impact, and root cause</p> <p>Perform Threat Hunting across internal and external data sources to identify malicious activity</p> <p>Conduct digital forensics on systems, including memory and host-based analysis</p> <p>Develop and implement incident response playbooks and remediation strategies</p> <p>Collaborate with cross-functional teams to contain and remediate threats</p> <p>Design and recommend defensive measures to prevent future attacks</p> <p>Stay current with evolving attacker TTPs (Tactics, Techniques, and Procedures)</p> <p>Participate in an incident response on-call rotation approximately once every four weeks</p> <p>Requirements</p> <p>At least 4 years of hands-on experience in Incident Response, Threat Hunting, Digital Forensics, and Security Monitoring</p> <p>Strong understanding of networking concepts and advanced network traffic analysis</p> <p>Proven ability to lead and coordinate incident response efforts across teams</p> <p>Deep knowledge of system forensics, including memory and host-based analysis</p> <p>Excellent communication skills with the ability to convey complex technical issues clearly</p> <p>Experience working in large-scale enterprise environments with complex security challenges</p> <p>Experience with cloud security practices in AWS and Azure environments; AWS Security Specialty and/or Azure Security Engineer Associate certification - advantage</p> <p>Proficiency in scripting languages (Python, Bash, PowerShell) for automation and tooling - advantage</p> <ul> <li>Only relevant applications will be answered </li></ul> <p>#Haifa</p>