Jerusalem
Full time
About us:
Mobileye is a global leader in Physical AI, developing computer vision, software, and hardware to power autonomous driving solutions and humanoid robots. Our mission is to bring autonomy into the real world by building intelligent technologies that are designed to expand accessibility and enhance everyday life, from advanced driver assistance systems (ADAS) and autonomous driving to robotics and humanoids.
Built on decades of automotive innovation and industrial-scale AI expertise, Mobileye technologies power more than 230 million vehicles worldwide. With teams around the world, we continue to innovate at the forefront of autonomous systems, advancing the next generation of Physical AI for the real world.
About the team:
What will your job look like:
-
Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds.
-
Integrate security tools and services using APIs, webhooks, scripts, and automation platforms.
-
Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response.
-
Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms.
-
Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions.
-
Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems.
-
Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation.
-
Create and maintain incident-response runbooks, investigation guides, detection documentation, and automation procedures.
-
Translate investigation findings and post-incident lessons learned into improved detections, automation workflows, and security controls.
All you need is:
-
1-2 years of hands-on experience in Security Operations, SOC, Cyber Analysis, Incident Response, or Detection Engineering - Must.
-
Practical experience operating and maintaining SIEM platforms, including log onboarding, parsing, developing and tuning detection rules and alerting use cases - Must
-
Excellent written and verbal communication skills for documentation and reporting in English.
-
Experience analyzing security telemetry from different systems such as EDR, Windows and Linux systems, identity services, cloud environments, email-security tools, firewalls, DNS, proxy, VPN, and network devices.
-
Strong understanding of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework.
-
Proficiency in SIEM query languages such as KQL or SQL - Advantage
-
Experience with scripting or automation using Python, PowerShell, Bash, REST APIs, JSON, or webhooks - Advantage.
-
Familiarity with SOAR platforms and automation workflows for alert enrichment, investigation, case management, and response - Advantage.
Mobileye changes the way we drive, from preventing accidents to semi and fully autonomous vehicles. If you are an excellent, bright, hands-on person with a passion to make a difference come to lead the revolution!
