The role

Nebius is looking for a highly technical, hands-on SIEM Engineer Lead to design, implement, and optimize advanced Security Information and Event Management (SIEM) capabilities. This role is responsible for developing detection strategies, improving security visibility, and driving automation across security operations processes. The ideal candidate will combine deep SIEM expertise with strong analytical and engineering skills to enhance threat detection, incident response efficiency, and security monitoring maturity. This is not a people management position, you will provide technical guidance, mentorship, and direction to SOC analysts, security engineers, and cross-functional teams

You’re welcome to work in our offices in Tel Aviv.

Your responsibilities will include: 

• Architect, deploy, and maintain enterprise SIEM platforms and related security monitoring infrastructure.
• Develop and optimize detection rules, correlation logic, and alert mechanisms to identify security threats and anomalous activity.
• Design and implement log ingestion pipelines, normalization, and enrichment processes across diverse data sources.
• Continuously improve detection coverage by analyzing threat intelligence, attacker techniques, and emerging vulnerabilities.
• Create and maintain dashboards, reports, and metrics to support security visibility and operational decision-making.
• Drive automation of security monitoring and response workflows using scripting, APIs, and orchestration tools.
• Perform tuning and performance optimization of SIEM platforms to ensure scalability and reliability.
• Conduct threat hunting activities and support complex security investigations using SIEM data.
• Collaborate with engineering, infrastructure, and security stakeholders to integrate new log sources and telemetry.
• Develop documentation, standards, and best practices for SIEM configuration, logging, and detection engineering.
• Create APIs and interfaces that enable AI agents to query SIEM, pull evidence, and execute actions

We expect you to have: 

• 5+ years of experience in cybersecurity with strong focus on SIEM engineering or security monitoring.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, CrowdStrike, Elastic, or similar.
• Strong knowledge of log analysis,event correlation, and detection engineering.
• Experience with data pipelines, log parsing, and schema design.
• Experience with SOAR platforms and security automation.
• Experience with scripting or programming (e.g., Python, PowerShell, Bash) for automation and integrations.
• Solid understanding of network protocols, operating systems, cloud environments, and common attack techniques.
• Familiarity with frameworks such as MITRE ATT&CK, NIST, or CIS for detection mapping and security controls.
• Experience integrating threat intelligence and security tools with SIEM platforms.
• Knowledge of cloud logging and monitoring (AWS, Azure, GCP).
• Strong knowledge of Kubernetes architecture and security concepts
• Experience with Terraform, CI/CD pipelines and Detection as code workflow

It will be an added bonus if you have: 

• Experience building and deploying LLM-based AI agents
• Experience in transitioning from manual SOC to AI-augmented operations.
• Relevant security certifications
• Certification in cloud computing, including administration, development, engineering, or architecture.
• Knowledge of AI safety and reliability - guardrails, validation, human oversight mechanisms

About QuantHealth

QuantHealth is a growing AI startup in the clinical trial space, leveraging AI, biomedical data, knowledge graphs, and real-world patient data to simulate and optimize clinical trials for pharmaceutical companies. Our platform combines large-scale biomedical knowledge, clinical trial data, and patient-level data to help customers simulate clinical trials, reduce development risk and cost, shorten timelines, and improve the probability of clinical trial success.

About the Role

This role combines day-to-day IT help desk support with ownership of identity and access
governance across the organization. The successful candidate will serve as the primary
point of contact for end-user IT issues while also acting as the gatekeeper for user
provisioning, access control, and compliance with IAM policies.

Responsibilities - IT HELPDESK

· Serve as the first point of contact for IT support requests via ticket, phone, or in
person
· Troubleshoot hardware, software, network, and connectivity issues for end users
· Perform password resets, account unlocks, and MFA resets
· Escalate unresolved issues to second-line support or specialist teams
· Maintain and update the IT helpdesk knowledge base and ticket records
· Set up and configure workstations, laptops, and peripherals for new joiners

Responsibilities - IDENTITY & ACCESS GOVERNANCE

· Create, modify, and deactivate user accounts across Active Directory, Office 365,
and other enterprise platforms
· Manage user provisioning and deprovisioning throughout the employee lifecycle
(onboarding, role changes, offboarding)
· Enforce role-based access control (RBAC) and least-privilege principles across
systems and applications
· Process and review access requests, ensuring approvals align with security policies
· Conduct periodic access reviews and recertification campaigns to identify and
remediate role drift
· Monitor and audit access logs to detect anomalies or policy violations
· Support segregation of duties (SoD) policy enforcement
· Maintain documentation for IAM processes and contribute to policy updates
· Assist with compliance requirements (e.g. ISO 27001, GDPR, SOX) as they relate to
access governance

Qualifications

· 1-3 years in an IT helpdesk or IT support role
· Hands-on experience with Office 365/ Google workspace administration
· Working knowledge of IAM concepts: SSO, MFA, RBAC, LDAP, SAML
· Familiarity with ticketing systems (e.g. Jira Service Management)
· Strong troubleshooting and analytical skills
· Clear communication skills, able to explain technical issues to non-technical users
· High attention to detail and commitment to data accuracy

Nice to have

· Exposure to IGA (Identity Governance & Administration) tools
· Scripting skills in PowerShell or Python for automation tasks

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

BeyondTrust is a global leader in privileged access management. Our products provide remote access and privileged control capabilities that are deployed across thousands of enterprise environments worldwide. That makes us a high-value target. Nation-state actors, ransomware operators, and sophisticated threat groups actively target companies like ours—not just to compromise our corporate environment, but to reach the customers who trust our software to protect their most sensitive systems. A compromise of BeyondTrust is a compromise of the privileged access layer inside our customers’ networks. We take that responsibility seriously.

As a SOC Analyst on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance.

This team is building toward an AI-augmented operating model. You will be expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want to build something.

What You’ll Do

Alert Triage & Monitoring 

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments.
• Investigate alerts to determine scope, severity, and whether escalation is warranted.
• Leverage AI-assisted triage and enrichment tools to accelerate analysis and reduce mean time to detect.
• Classify, document, and track alerts through the full lifecycle using ticketing and case management systems.

Incident Response & Investigation 

• Participate in or lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication.
• Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure.
• Execute established IR runbooks across identity, endpoint, cloud, and email investigation workflows.
• Manage or assist with evidence handling, forensic artifact collection, and chain-of-custody procedures.
• Produce clear, decision-ready incident summaries and post-incident reports for both technical and leadership audiences.

Detection Engineering & Threat Intelligence 

• Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms, with a focus on reducing false positives and closing coverage gaps.
• Translate threat intelligence (CVE advisories, CISA alerts, vendor bulletins, open-source feeds) into actionable detection content, with particular attention to threats targeting privileged access tooling and supply chain attack vectors.
• Help maintain and evolve detection coverage mapped to MITRE ATT&CK.
• Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts.

AI Integration & Automation 

• Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations.
• Contribute to the evaluation, integration, and optimization of AI and automation capabilities across the team’s workflows.
• Assist in designing prompts, agent workflows, or LLM-based pipelines that augment analyst capabilities and reduce manual effort.
• Partner with engineering teams to improve log ingestion, data quality, and tool integrations.

Operational Excellence 

• Maintain daily operational notes and shift handoff documentation.
• Contribute to and refine IR runbooks, playbooks, and standard operating procedures.
• Participate in on-call rotation for after-hours incident escalation.
• Track and report on operational metrics (MTTD, MTTR, MTTC, false positive rate) and identify improvement opportunities.
• Participate in tabletop exercises, purple team activities, and post-incident reviews. 

What You’ll Bring

• 2+ years of experience in a SOC, security operations, or incident response role.
• Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and familiarity with writing search or detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).
• Comfort using AI systems (e.g., LLM-based assistants, copilots, or AI-driven analysis tools) as part of security workflows.
• Strong written communication skills; able to document findings clearly and concisely for both technical and non-technical audiences.

Nice To Have

• Experience leading or co-leading complex incident response engagements from triage through remediation.
• Experience with identity and access management platforms and cloud security posture management tools.
• Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows.
• Familiarity with SOAR platforms or orchestration tools for automated response and enrichment.
• Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security use cases.
• Experience building or contributing to threat intelligence programs or detection-as-code pipelines.
• Understanding of the privileged access management landscape and the threat actors that target it.
• Track record of evaluating and adopting emerging technologies in a production security environment.

Better Together

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com. 

#LI-DF1

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

BeyondTrust is a global leader in privileged access management. Our products provide remote access and privileged control capabilities that are deployed across thousands of enterprise environments worldwide. That makes us a high-value target. Nation-state actors, ransomware operators, and sophisticated threat groups actively target companies like ours—not just to compromise our corporate environment, but to reach the customers who trust our software to protect their most sensitive systems. A compromise of BeyondTrust is a compromise of the privileged access layer inside our customers’ networks. We take that responsibility seriously.

As a SOC Analyst on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance.

This team is building toward an AI-augmented operating model. You will be expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want to build something.

What You’ll Do

Alert Triage & Monitoring 

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments.
• Investigate alerts to determine scope, severity, and whether escalation is warranted.
• Leverage AI-assisted triage and enrichment tools to accelerate analysis and reduce mean time to detect.
• Classify, document, and track alerts through the full lifecycle using ticketing and case management systems.

Incident Response & Investigation 

• Participate in or lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication.
• Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure.
• Execute established IR runbooks across identity, endpoint, cloud, and email investigation workflows.
• Manage or assist with evidence handling, forensic artifact collection, and chain-of-custody procedures.
• Produce clear, decision-ready incident summaries and post-incident reports for both technical and leadership audiences.

Detection Engineering & Threat Intelligence 

• Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms, with a focus on reducing false positives and closing coverage gaps.
• Translate threat intelligence (CVE advisories, CISA alerts, vendor bulletins, open-source feeds) into actionable detection content, with particular attention to threats targeting privileged access tooling and supply chain attack vectors.
• Help maintain and evolve detection coverage mapped to MITRE ATT&CK.
• Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts.

AI Integration & Automation 

• Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations.
• Contribute to the evaluation, integration, and optimization of AI and automation capabilities across the team’s workflows.
• Assist in designing prompts, agent workflows, or LLM-based pipelines that augment analyst capabilities and reduce manual effort.
• Partner with engineering teams to improve log ingestion, data quality, and tool integrations.

Operational Excellence 

• Maintain daily operational notes and shift handoff documentation.
• Contribute to and refine IR runbooks, playbooks, and standard operating procedures.
• Participate in on-call rotation for after-hours incident escalation.
• Track and report on operational metrics (MTTD, MTTR, MTTC, false positive rate) and identify improvement opportunities.
• Participate in tabletop exercises, purple team activities, and post-incident reviews. 

What You’ll Bring

• 2+ years of experience in a SOC, security operations, or incident response role.
• Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and familiarity with writing search or detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).
• Comfort using AI systems (e.g., LLM-based assistants, copilots, or AI-driven analysis tools) as part of security workflows.
• Strong written communication skills; able to document findings clearly and concisely for both technical and non-technical audiences.

Nice To Have

• Experience leading or co-leading complex incident response engagements from triage through remediation.
• Experience with identity and access management platforms and cloud security posture management tools.
• Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows.
• Familiarity with SOAR platforms or orchestration tools for automated response and enrichment.
• Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security use cases.
• Experience building or contributing to threat intelligence programs or detection-as-code pipelines.
• Understanding of the privileged access management landscape and the threat actors that target it.
• Track record of evaluating and adopting emerging technologies in a production security environment.

Better Together

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com. 

#LI-DF1

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

BeyondTrust is a global leader in privileged access management. Our products provide remote access and privileged control capabilities that are deployed across thousands of enterprise environments worldwide. That makes us a high-value target. Nation-state actors, ransomware operators, and sophisticated threat groups actively target companies like ours—not just to compromise our corporate environment, but to reach the customers who trust our software to protect their most sensitive systems. A compromise of BeyondTrust is a compromise of the privileged access layer inside our customers’ networks. We take that responsibility seriously.

As a SOC Analyst on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance.

This team is building toward an AI-augmented operating model. You will be expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want to build something.

What You’ll Do

Alert Triage & Monitoring 

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments.
• Investigate alerts to determine scope, severity, and whether escalation is warranted.
• Leverage AI-assisted triage and enrichment tools to accelerate analysis and reduce mean time to detect.
• Classify, document, and track alerts through the full lifecycle using ticketing and case management systems.

Incident Response & Investigation 

• Participate in or lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication.
• Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure.
• Execute established IR runbooks across identity, endpoint, cloud, and email investigation workflows.
• Manage or assist with evidence handling, forensic artifact collection, and chain-of-custody procedures.
• Produce clear, decision-ready incident summaries and post-incident reports for both technical and leadership audiences.

Detection Engineering & Threat Intelligence 

• Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms, with a focus on reducing false positives and closing coverage gaps.
• Translate threat intelligence (CVE advisories, CISA alerts, vendor bulletins, open-source feeds) into actionable detection content, with particular attention to threats targeting privileged access tooling and supply chain attack vectors.
• Help maintain and evolve detection coverage mapped to MITRE ATT&CK.
• Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts.

AI Integration & Automation 

• Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations.
• Contribute to the evaluation, integration, and optimization of AI and automation capabilities across the team’s workflows.
• Assist in designing prompts, agent workflows, or LLM-based pipelines that augment analyst capabilities and reduce manual effort.
• Partner with engineering teams to improve log ingestion, data quality, and tool integrations.

Operational Excellence 

• Maintain daily operational notes and shift handoff documentation.
• Contribute to and refine IR runbooks, playbooks, and standard operating procedures.
• Participate in on-call rotation for after-hours incident escalation.
• Track and report on operational metrics (MTTD, MTTR, MTTC, false positive rate) and identify improvement opportunities.
• Participate in tabletop exercises, purple team activities, and post-incident reviews. 

What You’ll Bring

• 2+ years of experience in a SOC, security operations, or incident response role.
• Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and familiarity with writing search or detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).
• Comfort using AI systems (e.g., LLM-based assistants, copilots, or AI-driven analysis tools) as part of security workflows.
• Strong written communication skills; able to document findings clearly and concisely for both technical and non-technical audiences.

Nice To Have

• Experience leading or co-leading complex incident response engagements from triage through remediation.
• Experience with identity and access management platforms and cloud security posture management tools.
• Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows.
• Familiarity with SOAR platforms or orchestration tools for automated response and enrichment.
• Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security use cases.
• Experience building or contributing to threat intelligence programs or detection-as-code pipelines.
• Understanding of the privileged access management landscape and the threat actors that target it.
• Track record of evaluating and adopting emerging technologies in a production security environment.

Better Together

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com. 

#LI-DF1

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

BeyondTrust is a global leader in privileged access management. Our products provide remote access and privileged control capabilities that are deployed across thousands of enterprise environments worldwide. That makes us a high-value target. Nation-state actors, ransomware operators, and sophisticated threat groups actively target companies like ours—not just to compromise our corporate environment, but to reach the customers who trust our software to protect their most sensitive systems. A compromise of BeyondTrust is a compromise of the privileged access layer inside our customers’ networks. We take that responsibility seriously.

As a SOC Analyst on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance.

This team is building toward an AI-augmented operating model. You will be expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want to build something.

What You’ll Do

Alert Triage & Monitoring 

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments.
• Investigate alerts to determine scope, severity, and whether escalation is warranted.
• Leverage AI-assisted triage and enrichment tools to accelerate analysis and reduce mean time to detect.
• Classify, document, and track alerts through the full lifecycle using ticketing and case management systems.

Incident Response & Investigation 

• Participate in or lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication.
• Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure.
• Execute established IR runbooks across identity, endpoint, cloud, and email investigation workflows.
• Manage or assist with evidence handling, forensic artifact collection, and chain-of-custody procedures.
• Produce clear, decision-ready incident summaries and post-incident reports for both technical and leadership audiences.

Detection Engineering & Threat Intelligence 

• Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms, with a focus on reducing false positives and closing coverage gaps.
• Translate threat intelligence (CVE advisories, CISA alerts, vendor bulletins, open-source feeds) into actionable detection content, with particular attention to threats targeting privileged access tooling and supply chain attack vectors.
• Help maintain and evolve detection coverage mapped to MITRE ATT&CK.
• Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts.

AI Integration & Automation 

• Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations.
• Contribute to the evaluation, integration, and optimization of AI and automation capabilities across the team’s workflows.
• Assist in designing prompts, agent workflows, or LLM-based pipelines that augment analyst capabilities and reduce manual effort.
• Partner with engineering teams to improve log ingestion, data quality, and tool integrations.

Operational Excellence 

• Maintain daily operational notes and shift handoff documentation.
• Contribute to and refine IR runbooks, playbooks, and standard operating procedures.
• Participate in on-call rotation for after-hours incident escalation.
• Track and report on operational metrics (MTTD, MTTR, MTTC, false positive rate) and identify improvement opportunities.
• Participate in tabletop exercises, purple team activities, and post-incident reviews. 

What You’ll Bring

• 2+ years of experience in a SOC, security operations, or incident response role.
• Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior.
• Experience with at least one SIEM platform and familiarity with writing search or detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).
• Comfort using AI systems (e.g., LLM-based assistants, copilots, or AI-driven analysis tools) as part of security workflows.
• Strong written communication skills; able to document findings clearly and concisely for both technical and non-technical audiences.

Nice To Have

• Experience leading or co-leading complex incident response engagements from triage through remediation.
• Experience with identity and access management platforms and cloud security posture management tools.
• Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows.
• Familiarity with SOAR platforms or orchestration tools for automated response and enrichment.
• Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security use cases.
• Experience building or contributing to threat intelligence programs or detection-as-code pipelines.
• Understanding of the privileged access management landscape and the threat actors that target it.
• Track record of evaluating and adopting emerging technologies in a production security environment.

Better Together

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com. 

#LI-DF1

Glilot, Israel 
Hybrid 
Full-time

What you’ll do:

• Lead the design, evolution and day-to-day ownership of Payoneer’s CI/CD delivery platform used across R&D 

• Architect and maintain high-performance, fault tolerant, scalable ALM systems – from version control, builds and deployments to monitoring, configuration management and release gates 

• Drive GitOps-based delivery and Kubernetes deployment patterns across public and private cloud environments 

• Build shared pipeline templates, reusable extensions and self-service tooling that let product teams ship safely without reinventing the wheel 

• Own delivery-platform SLOs and reliability – drive root-cause analysis, permanent fixes, and continuous improvements to build/deploy speed and stability 

• Partner with Security, SRE and Compliance to embed SAST/DAST/SCA and secret scanning 

• Work closely with product, QA, developers and IT/Operations to streamline their working methods and remove friction from the software delivery lifecycle 

• As a member of the team, participate in ‘On-Call’ duties on Payoneer production systems, working in non-conventional hours including weekends and holidays (from time to time), and lead major incidents when needed 

Who you are: 

• At least 5 years’ experience as a DevOps / Platform / Build & Release Engineer, with clear senior-level scope (cross-team initiatives, technical leadership, mentoring) 
• A minimum of 3 years of exposure running production workloads in public cloud (AWS, Azure or GCP) and hybrid environments 
• Strong experience designing and operating CI/CD platforms and ALM tooling (Azure DevOps strongly preferred; GitHub Actions / GitLab CI / Jenkins also relevant), including shared templates, custom tasks/extensions and source control management (Git, SonarQube, Artifactory/Harbor, etc.) 

• Proven experience with GitOps at scale (ArgoCD or Flux) and Helm-based delivery 

• Experience leveraging AI/LLM tooling (Cursor, Copilot, Claude Code, MCP) to accelerate delivery, and building AI-assisted automations into CI/CD pipelines and internal developer platforms 

• Strong experience with configuration management tools like Ansible, Chef or Puppet, and Infrastructure as Code (Terraform) 

• Proven scripting capabilities in PowerShell / Bash / Python, with a track record of building internal tools that remove toil for many teams 

• High level Linux OS expertise; comfortable also operating Windows server workloads 

• Programming experience (C#, NodeJS or similar) – you can contribute to real services, not just scripts 

• Experience managing application servers and web servers in regulated / mission-critical environments 

• Experience with monitoring and logging solutions (e.g. Prometheus, Grafana, ELK, Dynatrace)
• BS degree in computer science, computer engineering, relevant technical discipline or equivalent practical experience

#LI-AG2

We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. 

We sell to industries with large, consumer-facing businesses such as: banking, financial services, insurance, fintech, gaming, ecommerce/retail, telco / media, utilities, etc.

About the Role:

The IT Specialist is responsible for analyzing, diagnosing, and repairing end user issues pertaining to their daily job duties. Managing and resolving service request tickets on a daily basis. This individual is responsible for providing high quality technical assistance and support related to the company’s computer systems, software, and hardware. This position is directly responsible for interaction with end users and their machines on a daily basis.

What you’ll do:

• Assisting employees (end users) with the MacOS desktop systems
• Strong knowledge of Windows / macOS environments
• Initial IT orientation of new employees during their “sign-in” process
• Providing computer support services for software and hardware within established company standards and guidelines
• Testing of computers to ensure all computer systems are functioning properly
• Identifying and solving any problems that affect computer operating systems
• Communicating effectively with the individual end users on issues that pertain to their machines
• Maintenance and upgrading of computer systems , including offering recommendations on upgrades on an as-needed basis
• Assistance in implementing IT related company initiatives as provided by IT leadership
• Maintaining computer peripheral devices such as printers and scanners and solving the related issues pertaining to these devices
• Responsible for delivering, tracking, and recording the assignments of hardware to new employees
• Training end users and orienting them on how to use the MacOS hardware and software on an entry level basis
• Responsible for understanding the network topology to assist the Network Technician and Systems Administrator during outages
• Deep understanding of SaaS services and their operations 
• Experience and understanding of SSO, SAML, OpenID Connect Protocols
• Assist with onboarding and offboarding of employees

What you’ll need:

• Professional certification macOS Support Essentials or proven macOS experience 
• SaaS Systems Administration (MDM, GSuite, Slack, SalesForce, Zoom, ..., etc)
• Network Administration multiple floors: WiFi, LAN, Fortigate Firewall, ...
• Well organized IT Assets manager 
• Another Professional certification (e.g. CCNS, CISSP, MCSE) is an advantage
• Customer service background or experience required
• Experience working in a fast-paced team environment is strongly recommended
• 3+years experience in a Help Desk or Support role required
• High level English

Added Bonus:

• Bash, Google Script, Powershell scripting or similar is a plus
• Cloud Experience is an advantage (AWS, Azure, GCP)
• Experience and familiarity with AI tools
• Automations

#LI-AM1 #LI-Hybrid 

#LI-TL1 #LI-Hybrid 

What you'll do:

• Own the end-to-end technical health, stability, and scalability of operational systems and internal tools
• Manage and continuously optimize the Zendesk ticketing ecosystem, including workflows, integrations, and automation
• Lead the design and development of automated and self-service solutions to reduce manual effort and improve operational efficiency
• Own the resolution of complex technical issues, from investigation through root cause and permanent fix
• Plan and execute work within a two-week sprint cycle, balancing operational reliability with continuous improvement and innovation
• Design, build, and maintain system integrations and new platform capabilities supporting Operations and CX teams
• Leverage AI capabilities (including LLM-based applications and multi-agent systems) to enhance system intelligence and automate decision-making
• Identify manual, repetitive processes and transform them into scalable, AI-driven workflows
• Partner closely with Operations, Product, and Engineering stakeholders to translate business needs into technical solutions
• Ensure internal tools are reliable, observable, secure, and continuously evolving through proactive improvements and monitoring

Who you are:

• AI & Prompt Engineering: Proven experience leveraging cutting-edge AI tools and Large Language Models (LLMs) to accelerate development, automate complex tasks, and enhance solution quality. Must demonstrate an ability to craft sophisticated prompts and integrate AI outputs into functional workflows.
• Azure Platform Expertise: Hands-on experience building and managing solutions within the Azure ecosystem, specifically:
  • Function Apps (Serverless compute)
  • Automation Accounts (Process automation and configuration)
  • Logic Apps (Workflow orchestration)
  • Azure DevOps (Boards, Repos, and Pipelines)
• API Integration: Proven experience working with REST APIs to connect disparate systems and build cohesive technical ecosystems.
• Agile & Operations: Must have experience working within a formal ticketing system (ZenDesk, SF) and delivering work through structured sprints.
• Business Translation: A demonstrated ability to take high-level business requirements and architect the technical "how-to" from scratch.
• Problem Solving: Excellent analytical skills with a track record of troubleshooting complex environment issues independently.
• Ability to work independently and manage multiple tasks effectively
• Microsoft Power Platform: Experience with Power Apps or Power Automate.

Advantage:

• Data & Scripting: Advantage for candidates with strong proficiency in data manipulation and scripting (PowerShell, Bash, or SQL).
• Coding: Advantage Experience with Python coding is a significant plus.
• Familiarity with additional languages.

#LI-AG2

As a DevOps Infrastructure Engineer, you will operate and evolve Payoneer’s mission‑critical on‑premise and hybrid infrastructure that powers our financial services. You will be responsible for running secure, highly available VMware‑based data center environments, integrating them with public cloud platforms, and providing reliable infrastructure services to R&D, DataOps, and DevOps teams in a regulated FinTech environment.
This role combines hands‑on operations, automation, monitoring, infrastructure hardening, and close collaboration with security and application teams to ensure our platforms remain resilient, compliant, and ready to scale.

While titled DevOps, this is an infrastructure‑focused role, with an emphasis on operating and evolving on‑prem and hybrid platforms rather than application‑level CI/CD pipelines.

What you'll do:

We’re looking for a team player with excellent interpersonal skills & service oriented. Creative & out of the box thinker. An autodidact, quick, effective and versatile who’s able to change directions in midstream. Independent & Accountable.

As a Senior DevSecOps Engineer at Payoneer, you’ll play a critical role in embedding security throughout the software development lifecycle (SDLC). You’ll help design, implement, and maintain security controls and automations across our CI/CD pipelines, infrastructure, and application stack.

What you'll do:

• Integrate and maintain security tools across the CI/CD pipeline:
  • SAST (e.g., SonarQube)
  • SCA (Software Composition Analysis) / Dependency Scanning (e.g., Snyk, Trivy, GitHub Dependabot)
  • Secret Detection (e.g., Gitleaks, HashiCorp Vault)
  • Container/Image Scanning (e.g., Aqua, Prisma Cloud, Trivy)
• Drive security automation and enforcement for:
  • Infrastructure as Code (e.g., Terraform)
  • Configuration Management (e.g., Ansible, Chef)
  • GitOps workflows (e.g., ArgoCD)
  • Embed security guardrails and best practices across the SDLC
  • Automate compliance checks (e.g., OWASP Top 10, CIS Benchmarks) into development workflows
  • Integrate with observability and monitoring systems (e.g., Prometheus, Grafana, ELK, Coralogix)
• Collaborate cross-functionally with Product, QA, Development, and IT/Ops teams to continuously improve the security posture
• Participate in on-call rotations for production systems as needed

Who you are:

• At least 3 years’ experience as DevOps/DevSecOps/Security Engineer
• A minimum of 3 years of exposure running production workloads (AWS, Azure or GCP)
• Experience with CI/CD tools and source control management tools (e.g., Git, Azure DevOps, SonarQube, Artifactory etc...)
• Proven experience securing CI/CD pipelines
• Expertise in SCA, SAST, secret scanning, and container security
• Hands-on experience with Kubernetes, Docker, and GitOps tooling (ArgoCD or Flux)
• Proven Scripting capabilities: (e.g. PowerShell/Bash/Python)
• Experience with logging, SIEM, and monitoring platforms
• Experience with IAM, secrets management, and compliance frameworks (SOC2, ISO, etc.)
• High level Linux OS expertise
• Strong troubleshooting skills
• Proactive by nature; internal drive for excellence and improvement
• BS degree in computer science, computer engineering, relevant technical discipline or equivalent practical experienc

Advantage:

• Experience with relational and non-relational databases (Oracle, PostgreSQL, SQL, MongoDB) Experience with software development and development frameworks
• Experience with event streaming and messaging platforms such as Kafka, RabbitMQ
• Knowledge and understanding Storage and Networking

#LI-AG2

Israel
Hybrid
Full-time

We are looking for a versatile, autodidact Senior DevOps Engineer - someone who learns fast, thinks laterally, and isn't afraid to pivot mid-stream when the mission changes.
You are independent and accountable, but you thrive in a collaborative ecosystem. If you’re a service-oriented problem solver who views "infrastructure as code" as a craft, we want to talk.

What You'll do:

As a core member of our infrastructure team, you will bridge the gap between development and operations, ensuring our hybrid-cloud environment is seamless, scalable, and resilient.

• Architect & Implement: Lead the design of hybrid-cloud solutions with a heavy focus on cloud best practices.

• Own the Production: Take full accountability for production environments, ensuring 24/7 stability, availability, and performance.

• Automate Everything: Replace manual toil with elegant automation using Terraform, Crossplane, and Ansible.

• Bridge the Hybrid Gap: Maintain and optimize application layers across both cloud and private cloud environments.

• Cross-Functional Partnership: Collaborate with Product, QA, and Dev teams to streamline CI/CD pipelines and remove delivery bottlenecks.

• Resilience: Participate in a rotating On-Call schedule to keep our high-volume systems humming.

Who you are:

• The Experience: 7+ years in DevOps, SRE, or Platform Engineering, with at least 5 years specifically managing high-scale cloud production workloads (AWS / GCP).

• Orchestration: Deep expertise in Kubernetes and OCI container ecosystems.

• IaaC Mastery: Advanced scripting and deployment skills in Terraform (Crossplane is a major plus).

• CI/CD: Proven track record of designing and maintaining robust CI/CD pipelines to ensure seamless code-to-production workflows.

• Networking & Connectivity: Strong grasp of advanced networking concepts, including VPCs, Load Balancing, DNS, Service Mesh, and hybrid-cloud connectivity.

• Security & Compliance: Commitment to Security Best Practices - implementing "Security as Code," IAM least-privilege principles, container security, and secret management.

• Version Control: Expert-level proficiency with Git, including advanced branching strategies and repository management.

• Linux & Scripting: Strong Linux administration background with proficiency in Python, Bash, or PowerShell.

• Observability: Hands-on experience with Prometheus, Grafana, and ELK to diagnose and resolve complex production issues.

• Trouble Shooting: Fluent and comfortable working in the Linux terminal.

• Education: BS in Computer Science, Engineering, or equivalent practical "in-the-trenches" experience.

Advantage:

• Cloud Certified: AWS Professional level certifications (Solutions Architect or DevOps Engineer).

• Modern Delivery: Experience with GitOps workflows (ArgoCD or Flux).

• Messaging: Familiarity with Kafka or RabbitMQ.

• Legacy/Hybrid: Experience with VMware, SQL/NoSQL databases, or older SCM tools like TFVC.

• Dev Background: You’ve spent time on the "other side" writing software or working with dev frameworks.

#LI-AG2

Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeem, Trusteer and more). Cato's unique technology inspired a brand-new product category, later named "SASE" by Gartner and a market expected to reach $25 billion by 2027. 
 
This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader - don't miss it! 

Cato Networks is seeking an experienced IT Support Specialist to join our IT support team. In this role, you will be responsible for providing first-line support to Cato’s employees by managing user accounts and access, troubleshooting hardware and software issues, and handling our employees' onboarding and offboarding. 

Responsibilities: 

• Provide first-line technical support to Cato’s employees across all global offices, ensuring fast, professional, and customer-oriented service. 
• Lead and execute IT processes for employee onboarding and offboarding, including systems provisioning, access governance, device setup, and security compliance. 
• Provide AV support for the company auditorium and conference rooms, including management and troubleshooting of Zoom Rooms, Polycom systems, and other video-conferencing technologies 
• Troubleshoot and resolve hardware, software, and network-related issues on both Windows and (mostly) macOS environments. 
• Manage IT requests and incidents related to cloud services and enterprise applications, including Microsoft 365, Slack, Zoom, and additional SaaS platforms used internally. 
• Administer and monitor cloud-based infrastructure components, including Azure AD, Intune, Kandji, as part of the company’s internal IT ecosystem. 
• Collaborate closely with the Systems and Security teams to identify, escalate, and resolve complex technical issues, as well as improve IT workflows and automation. 

Requirements:  

• Minimum of 1 years of experience in IT support or a related technical role (experience in high-tech or startup companies - advantage). 
• Hands-on experience with Azure, Entra ID, and Microsoft 365 cloud environments - advantage. 
• Strong troubleshooting skills for Windows and macOS laptops, as well as mobile devices. 
• Solid understanding of network infrastructure concepts, including firewalls, Wi-Fi, and VPN technologies. 
• Working knowledge of AV conferencing systems (Zoom, Polycom) 
• Background in the system administration field - advantage 
• Experience with endpoint management tools such as Intune or Kandji - advantage 
• Knowledge of IT automation or scripting (PowerShell/Python) - advantage 
• Knowledge of IT knowledge base and documentation processes - advantage 

Personal Skills: 

• Strong service-oriented mindset with a high level of professionalism. 
• Excellent problem-solving abilities and strong analytical thinking. 
• Highly organized, detail-oriented, and able to manage multiple tasks simultaneously. 
• Strong communication and interpersonal skills, with the ability to support employees at all levels. 
• Ability to work both independently and collaboratively within a fast-paced team environment. 
  
  

Senior IT Support Specialist

So, what’s the role all about? 

We're looking for an experienced Senior IT Support Specialist to join our local IT team in Israel, supporting a hybrid Mac and Windows environment and managing regional A/V solutions. You'll work independently within our ticketing system to manage your workflow, while collaborating with global IT teams to maintain high service levels across the organization. This is a hands-on, hybrid role that requires solid technical skills, professional maturity, and a strong service mindset.

How will you make an impact?  

Incident, Problem & Request Management

You'll serve as L2 support for technical issues across a mixed Mac and Windows environment, with occasional L3 involvement in your areas of expertise. This includes independently managing incidents, service requests, and problems in ServiceNow from intake through resolution. You'll perform root cause analysis on recurring and high-impact issues to drive permanent fixes, maintain SLA adherence, and execute Move, Add, Change (MAC) activities such as workstation setup, onboarding/offboarding, desk moves, and hardware refreshes.

A/V & Conferencing Support (Israel Region)

You'll ensure the operational readiness of meeting rooms and collaboration systems across our Israel offices. That means supporting Poly, Cisco, Logitech, and Microsoft Teams Rooms hardware — displays, controllers, switchers, codecs, and networked A/V components. You'll manage high-visibility events including town halls, executive meetings, webinars, and training sessions, and proactively monitor A/V systems to minimize downtime.

Process Improvement & Automation

You'll look for opportunities to streamline IT operations through scripting, automation, and AI-driven tools. We value practical, measurable improvements — things like automated provisioning workflows, self-service solutions, or proactive alerting systems.

Inventory & Asset Management

You'll manage day-to-day IT asset and inventory operations — tracking, receiving, and distributing laptops (Mac and PC), peripherals, A/V equipment, and accessories across the hardware lifecycle.

Have you got what it takes? 

• 5+ years of experience in IT Support, Workplace Technology, or Service Operations, with at least 3 years in a large-scale enterprise environment (1,000+ employees, multi-site or global operations)
• Relevant industry certifications (e.g., CompTIA, ITIL, Microsoft, Jamf, Cisco, or similar)
• Hands-on experience with ServiceNow (Incident, Request, and Asset modules)
• Proven experience with enterprise A/V and conferencing technologies
• Strong Mac and Windows configuration and troubleshooting skills — you should be able to explain why something broke, not just what broke
• Solid understanding of networking fundamentals (LAN/WAN, Wi-Fi, IP addressing, DNS, DHCP)
• Experience with endpoint management across Windows, macOS, and Linux
• Familiarity with inventory and asset lifecycle management practices
• Experience supporting executive-level users in a global tech or enterprise software company
• Scripting skills (PowerShell, Bash, Python) applied to operational automation
• Experience with MDM platforms (Jamf, Intune, or similar)
• Familiarity with Zero Trust or modern endpoint security frameworks

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.

Requisition ID:  9804
Reporting into: Team Lead, IT Technical Support
Role Type: IC

#LI-Hybrid

Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeem, Trusteer and more). Cato's unique technology inspired a brand-new product category, later named "SASE" by Gartner and a market expected to reach $25 billion by 2027. 
 
This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader - don't miss it! 

Cato Networks is seeking an experienced IT Support Specialist to join our IT support team. In this role, you will be responsible for providing first-line support to Cato’s employees by managing user accounts and access, troubleshooting hardware and software issues, and handling our employees' onboarding and offboarding. 

Responsibilities: 

• Provide first-line technical support to Cato’s employees across all global offices, ensuring fast, professional, and customer-oriented service. 
• Troubleshoot and resolve hardware, software, and network-related issues on both Windows and (mostly) macOS environments. 
• Manage IT requests and incidents related to cloud services and enterprise applications, including Microsoft 365, Slack, Zoom, and additional SaaS platforms used internally. 
• Administer and monitor cloud-based infrastructure components, including Azure AD, Intune, Kandji, and AWS services, as part of the company’s internal IT ecosystem. 
• Lead and execute IT processes for employee onboarding and offboarding, including systems provisioning, access governance, device setup, and security compliance. 
• Collaborate closely with the Systems and Security teams to identify, escalate, and resolve complex technical issues, as well as improve IT workflows and automation. 
• Provide AV support for the company auditorium and conference rooms, including management and troubleshooting of Zoom Rooms, Polycom systems, and other video-conferencing technologies 
• Participate in IT projects and initiatives with other teams, helping improve our internal systems and the overall employee experience. 

Requirements  

• Minimum of 3 years of experience in IT support or a related technical role (experience in high-tech or startup companies - advantage). 
• Hands-on experience with Azure, Entra ID, and Microsoft 365 cloud environments. 
• Strong troubleshooting skills for Windows and macOS laptops, as well as mobile devices. 
• Solid understanding of network infrastructure concepts, including firewalls, Wi-Fi, and VPN technologies. 
• Experience with endpoint management tools such as Intune or Kandji - advantage 
• Knowledge of IT automation or scripting (PowerShell/Python) - advantage 
• Knowledge of IT knowledge base and documentation processes - advantage 

Personal Skills: 

• Strong service-oriented mindset with a high level of professionalism. 
• Excellent problem-solving abilities and strong analytical thinking. 
• Highly organized, detail-oriented, and able to manage multiple tasks simultaneously. 
• Strong communication and interpersonal skills, with the ability to support employees at all levels. 
• Ability to work both independently and collaboratively within a fast-paced team environment.