About CYBERcom
We are a leading player in Israel’s cybersecurity ecosystem, operating a cutting-edge SOC that protects our clients with high-value, mission-critical environments. Our teams work hands-on with Cortex XSIAM and other advanced platforms, and automation frameworks — in real time, against real threats.
Whether it’s securing financial systems, cloud infrastructure, or global enterprise assets, we’re trusted by OUR CLIENTS to detect and respond with speed and precision.
We believe in promoting from within, mentoring, and enabling sharp minds to move fast, think deep, and become tomorrow’s Tier 2/3 leaders.
About the Role
This is not your average Tier 1 job.
We’re hiring for a Tier 1+ hybrid role designed for early-career analysts who already bring practical experience, a sharp eye for detail, and the hunger to grow beyond basic triage. You’ll work shoulder-to-shoulder with advanced analysts and gain real exposure to deep investigations, hunting, and detection engineering..
What You’ll Do
- Monitor alerts and events using Cortex XSIAM and supporting detection tools.
- Perform high-quality triage, reduce false positives, and escalate meaningful incidents.
- Assist in deep-dive investigations and participate in threat hunting with senior analysts.
- Help optimize detection logic and improve alert fidelity through hands-on tuning.
- Document your findings with clarity and precision — your reports drive response actions.
- Work in a rotating 24/7 shift model, with a structured team support environment.
What We’re Looking For
- 1–3 years in a SOC, NOC, or cybersecurity operations role (military/8200 experience welcome).
- Practical knowledge of security monitoring tools — especially SIEM/XDR platforms like Cortex.
- Strong understanding of phishing, malware, MITRE ATT&CK, network security, and incident response workflows.
- Experience analyzing logs from endpoints, firewalls, WAFs, and cloud platforms.
- Advantage: basic scripting (Python, Regex), automation, or playbook familiarity.
- High attention to detail, curiosity, and ability to thrive in a high-tempo environment.
- Fluent Hebrew and strong English communication — written and verbal.
- Preferred Certifications (not mandatory, but a big plus):
- CompTIA Security+
- CySA+ (Cybersecurity Analyst)
- GCIA / GCIH (SANS)
- Microsoft SC-200 (Security Operations Analyst Associate)
- Palo Alto Networks Certified SOC Analyst (PCCSA / PCNSA)
🚀 Why You’ll Love It Here
- Work directly with senior analysts and detection engineers — learn by doing.
- Be part of an advanced MSSP team driving innovation in a Palo Alto XSIAM-powered SOC.
- Work with cutting-edge technologies and market-leading vendors.
- Thrive in a collaborative and inclusive environment committed to your professional growth.
- Strong team culture. Strong tech stack. Strong mission.
Equal Opportunity Statement
CYBERcom is committed to fostering a diverse and inclusive workplace. We welcome applicants from all backgrounds and ensure equal opportunities for all.