GRC Consultant

2Bsecure is looking for a GRC Consultant to join our Cybersecurity Consulting team.

The role includes supporting organizations in information security governance, regulatory compliance, risk management, and implementation of security standards and privacy requirements.

Responsibilities:

• Provide professional consulting services in the areas of Governance, Risk and Compliance (GRC).
• Support organizations throughout the implementation and certification process of ISO 27001.
• Assist organizations in meeting the requirements of Israeli privacy laws and regulations, including the Protection of Privacy Law and Privacy Protection Regulations.
• Conduct gap assessments and support the implementation of information security policies, procedures, and controls.
• Work closely with customers, management teams, IT and security stakeholders.
• Support the development and implementation of information security governance processes.
• Prepare professional documentation, policies, procedures, reports, and remediation plans.

Requirements:

• At least 2 years of hands-on experience in Information Security / Cybersecurity.
• Proven experience supporting organizations with ISO 27001 implementation and compliance processes.
• Experience working with organizations on privacy regulations and data protection requirements.
• Strong understanding of information security governance, risk management, and compliance processes.
• Excellent communication, consulting, and documentation skills.
• Ability to work independently and manage multiple customers and projects.

Advantage:

• Previous experience providing CISO as a Service (CISOaaS) services.

2BSecure is seeking an experienced and highly motivated Network & Security Engineer to join our team, supporting an international client’s global information security environment.

In this role, you will lead and maintain the operational-engineering framework of an advanced global security environment for an international client, carrying end-to-end responsibility for the configuration, policy management, upgrades, and monitoring of network security infrastructure, secure access, XDR systems, and the vulnerability management platform, across a large-scale Enterprise environment (1,400+ users).

Responsibilities

• Manage and maintain network security infrastructure and secure access solutions end-to-end.
• Configure, deploy, and maintain Palo Alto security products (Firewalls, Panorama, GlobalProtect, Prisma Access)
• Operate and maintain remote access solutions using BeyondTrust (PRA / Bomgar).
• Manage vulnerability assessment and endpoint protection through the Qualys platform and leading XDR systems
• Support identity and access integrations, including SAML, RADIUS, Azure AD / Okta, and MFA mechanisms.
• Forward and manage security logs (Syslog/API) into SIEM systems.
• Monitor, upgrade, and continuously improve the security environment in line with business needs.

Requirements

• 4–6 years of experience as a Security Engineer / Cyber Security Specialist in complex Enterprise environments.
• Proven hands-on experience with Palo Alto products (Firewalls, Panorama, GlobalProtect, Prisma Access) – required.
• Hands-on experience with BeyondTrust products (PRA / Bomgar) – required.
• In-depth familiarity with the Qualys platform and leading XDR systems – required
• Strong understanding of communication protocols, routing, and Identity & MFA mechanisms (SAML, RADIUS, Azure AD / Okta)
• Very high proficiency in English (speaking, reading, and writing) – required, for daily work with global interfaces.

Advantages

• Technologies & Tools: Microsoft Defender XDR, Microsoft Sentinel, CrowdStrike, Cortex XDR, Splunk, IBM QRadar, Velociraptor, KAPE, Axiom.
• Nice to Have
  • Professional certifications: Cisco CCNA/CCNP, PCNSE, PCSAE, Qualys Certified Specialist.
  • Experience working with SOC teams and investigating complex cyber incidents.
  • Knowledge of scripting and automation (Python, PowerShell, Bash, API Integrations)

At 2Bsecure, we’re looking for a Senior Incident Response & DFIR Consultant to join our Cyber Consulting team and help organizations respond to sophisticated cyber threats.

This role combines hands-on Incident Response, Digital Forensics, Threat Hunting, and strategic cybersecurity consulting. You’ll investigate real-world attacks, lead incident response engagements, work directly with customer executives and technical teams, and help organizations improve their security posture before the next attack happens.

If you thrive under pressure, enjoy solving complex technical challenges, and want to work on some of the most interesting cyber engagements in the industry—we’d love to meet you

Responsibilities

• Lead end-to-end Incident Response engagements across enterprise environments.
• Conduct Digital Forensics investigations and preserve digital evidence.
• Analyze endpoints, servers, Active Directory, Microsoft 365, and cloud environments to identify attack activity.
• Conduct proactive Threat Hunting activities to identify hidden threats.
• Collaborate with customer executives, IT teams, security teams, and external vendors throughout incident response engagements.
• Produce clear technical reports, executive summaries, and actionable remediation recommendations
• Participate in cybersecurity consulting projects, including risk assessments and security reviews.
• Perform penetration testing engagements based on experience and customer needs
• Support customers in improving their cyber resilience through practical security recommendations.

Requirements

• 3+ years of hands-on experience in Incident Response and Digital Forensics (DFIR).
• Proven experience leading cyber incident investigations for enterprise customers.
• Strong experience with Windows environments, Active Directory, and log analysis.
• Deep understanding of the MITRE ATT&CK framework.
• Experience writing professional technical reports in both Hebrew and English.
• Excellent analytical thinking, problem-solving, and communication skills with the ability to work directly with customers.
• Ability to manage multiple engagements independently, perform under pressure, and present findings to executive audiences.
• Advantages
  • Technologies & Tools: Microsoft Defender XDR, Microsoft Sentinel, CrowdStrike, Cortex XDR, Splunk, IBM QRadar, Velociraptor, KAPE, Axiom.
• Additional Experience: Microsoft 365 investigations, Cloud environments (Azure, AWS, GCP), Threat Hunting, Penetration Testing, Risk Assessments & Security Audits.
• Relevant Certifications: GCFA, GCIH, GCFE, CHFI, OSCP, CEH, HDE, PNPT

2BSecure, a leading cybersecurity consulting company, is looking for an experienced cyber professional with experience in GRC and in serving as CISO or VCISO.

In this role, you will work closely with our customers, serving as a trusted cybersecurity advisor while leading strategic security initiatives, governance programs, regulatory compliance, and cyber risk management.

Responsibilities

• Serve as a Virtual CISO for customers across various industries.
• Lead information security governance, risk management, and compliance (GRC) programs.
• Develop cybersecurity strategies, roadmaps, and multi-year security plans aligned with business objectives.
• Conduct cyber risk assessments, gap analyses, and maturity assessments.
• Build and maintain security policies, procedures, standards, and governance frameworks.
• Lead compliance initiatives including ISO 27001, NIST CSF, SOC2, GDPR, Privacy Protection Regulations, and additional regulatory frameworks
• Present cybersecurity risks, recommendations, and strategic plans to executive management and key stakeholders
• Support secure architecture reviews and provide security guidance throughout business and technology projects.
• Lead awareness initiatives, third-party risk assessments, and Business Continuity & Disaster Recovery (BC/DR) programs.
• Collaborate with technical teams, auditors, legal, and business units to deliver comprehensive cybersecurity solutions.

Requirements

• 3+ years of experience in Information Security, Cybersecurity Consulting, or GRC.
• Previous experience as a CISO, Deputy CISO, Information Security Manager, or Senior GRC Consultant.
• Strong knowledge of cybersecurity governance, risk management, and compliance methodologies.
• Hands-on experience with standards and regulations such as ISO 27001, NIST CSF, SOC 2, Privacy Protection Regulations, GDPR, and other industry standards
• Proven experience conducting risk assessments, compliance audits, and security maturity reviews.
• Excellent customer-facing, consulting, and presentation skills.
• High level of Hebrew and English (written and spoken).
• Advantages
  • CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or equivalent certifications.

2Bsecure is looking for an experienced Cyber Risk Assessment Consultant to join our Cybersecurity Consulting team.

In this role, you will conduct comprehensive cyber and information security risk assessments across a wide range of technologies, infrastructures, applications, and organizational environments. You will work closely with both technical teams and business stakeholders, identify security gaps and potential threats, evaluate their business impact, and provide practical recommendations to reduce organizational risk.

Responsibilities

• Conduct cyber and information security risk assessments for information systems, IT infrastructures, networks, Web and Mobile applications, cloud environments, and security solutions.
• Identify vulnerabilities, security gaps, threats, and potential attack scenarios.
• Evaluate risk levels based on likelihood, impact, and business context.
• Prepare professional risk assessment reports including findings, risk ratings, and remediation recommendations.
• Interview technical and business stakeholders and lead information-gathering processes as part of the assessment.
• Review existing security controls, processes, architectures, and technologies.
• Present findings and recommendations clearly to technical teams, management, and other relevant stakeholders.
• Support customers in prioritizing remediation activities and improving their overall security posture.

Requirements

• At least 3 years of hands-on experience in Cybersecurity and Information Security, with a strong focus on risk assessments.
• Proven experience conducting risk assessments for information systems, IT infrastructure, Web/Mobile applications, networks, and security solutions.
• Strong understanding of cyber threats, vulnerabilities, security gaps, and risk analysis.
• Experience writing professional security assessment reports and providing practical remediation recommendations.
• Familiarity with industry standards and frameworks such as ISO 27001, NIST, CIS Controls, and common cyber risk management methodologies.
• Solid understanding of IT and security environments, including Active Directory, operating systems, networking, Firewalls, WAF, Endpoint Security, remote access solutions, cloud environments, and enterprise systems.
• Experience working with both technical and business stakeholders.
• Strong analytical skills, attention to detail, and the ability to distinguish between technical findings and material business risks.
• Excellent presentation and communication skills.
• High-level verbal and written communication skills in both Hebrew and English.

Advantage

• Previous experience in a consulting company.
• Experience working with large or enterprise organizations.
• Experience conducting risk assessments across diverse environments and technologies.
• Relevant professional certifications in Cybersecurity or Information Security.

We are looking for an experienced Endpoint Security Expert (AV / EDR / XDR) to join our team. In this role, you will act as a technical authority within our security integration practice, designing, deploying, and managing advanced endpoint protection solutions for large-scale enterprise environments.

You will work closely with our enterprise clients and lead multi-vendor integration projects from scratch—architecting robust defense strategies across diverse server and workstation ecosystems. If you thrive in a dynamic ecosystem working with industry-leading technologies and collaborating with cross-functional teams, this is your place.

Responsibilities

• Architecture & Deployment: Lead end-to-end design, planning, architecture, and integration of endpoint security solutions (AV, EDR, XDR) from scratch for enterprise clients.
• Multi-Vendor Integration: Deploying and managing solutions from leading vendors (Palo Alto Networks, SentinelOne, Trellix, Trend Micro, Symantec), tailored to complex client infrastructures.
• Operations & Troubleshooting: Handle complex security events, optimization, and deep troubleshooting across Windows and Linux operating systems in both server and endpoint environments.
• Cross-Functional Collaboration: Serve as a key technical interface working hand-in-hand with internal and client-side IT, System, and SOC teams to ensure seamless security operations.
• Vendor & Client Engagement: Maintain ongoing technical communication with global technology manufacturers and enterprise clients regarding deployments, architecture, and best practices

Requirements

• Enterprise Experience: Proven, hands-on experience in implementing and managing endpoint protection solutions (AV, EDR, XDR) within large-scale enterprise organizations.
• OS Expertise: Deep knowledge of Windows and Linux operating systems across both server and workstation environments.
• Vendor Expertise: Practical, hands-on experience with at least one (ideally more) of the industry-leading vendors: Palo Alto Networks, SentinelOne, Trellix, Trend Micro, Symantec.
• Integration & Architecture Mindset: Strong background in designing, building, and architecting endpoint security solutions from the ground up (a major advantage).
• Collaborative Interface: Proven experience working in matrix/interface environments alongside IT, System, and SOC teams (a major advantage).
• Communication Skills: Very high level of English proficiency, with strong verbal and written communication skills for direct engagement with international vendors and enterprise clie

We are looking for a SOC Analyst to join our Cyber Defense Center.
The role involves handling cybersecurity incidents and analyzing data collected from various monitored systems and security tools.

Responsibilities:

• Monitoring, detection, and analysis of security events using SIEM and other monitoring systems
• Investigation and response to security alerts received in the SOC environment
• Conducting deep-dive incident analysis and preparing investigation reports
• Performing proactive threat hunting activities
• Integrating cyber intelligence reports into monitoring and response processes

Requirements:

• A completed Information Security course – mandatory.
• Previous technical experience in an enterprise environment (HD / NOC) – mandatory.
• Availability for 24/7 shift rotations (including weekends and holidays).
• Ability to work on-site from our Kfar Saba office.

2BSecure is looking for an experienced and motivated F5 Engineer to join our Security & Infrastructure team.
In this role, you will be responsible for designing, implementing, and maintaining F5 BIG-IP solutions, ensuring secure and high-performing environments for our clients. You will work closely with infrastructure, security, and development teams to deliver advanced, reliable, and scalable solutions.

Responsibilities:

• Design and implement WAF policies and security rules
• Manage and integrate authentication and SSO solutions (AD, MFA, SAML, OAuth2, Kerberos)
• Configure and optimize Load Balancing (LTM)
• Analyze logs, troubleshoot issues, and investigate security events
• Collaborate with cross-functional teams to ensure system availability and performance

Requirements:

• Strong knowledge of networking principles (CCNA level) – mandatory
• Proven experience with F5 BIG-IP modules (APM, ASM, LTM) – mandatory
• Familiarity with HTTP/HTTPS, XML, WSDL, JSON
• Experience with cloud proxies (F5 XC, Cloudflare)
• Knowledge of TCL or Python scripting
• Experience with AWS, Azure, or GCP

2BSecure, a leading cybersecurity consulting firm, is seeking a highly motivated and skilled GRC Consultant to join our professional services team.
In this role, you will guide organizations in building, maintaining, and improving their governance, risk, and compliance posture while ensuring alignment with leading industry standards and regulatory requirements.

Responsibilities:

• Provide expert consulting in the fields of governance, risk, and compliance.
• Lead and support implementation of security frameworks and data privacy regulations.
• Conduct risk assessments and develop mitigation strategies.
• Draft and maintain information security policies, procedures, and guidelines.
• Design and implement Business Continuity and Disaster Recovery (BC/DR) programs.
• Collaborate closely with clients to identify needs and deliver tailored security solutions.

Requirements:

• Minimum of 2 years of experience in information security, preferably within a consulting company or enterprise security department
• Proven experience or familiarity with:
  • ISO 27001 – mandatory
  • Privacy Protection Law and related regulations – mandatory
  • Risk management methodologies and compliance frameworks
• High level of English – both written and spoken – is required
• Excellent communication, analytical, and interpersonal skills
• Ability to work independently and in a team-oriented environment

2BSecure is the leading information security and cyber-Security services Company.

We are seeking for an experienced and highly motivated Information security Project manager.

The Project Manager at 2Bsecure is responsible for planning, executing, and finalizing projects according to strict deadlines of our costumers. This includes coordinating the efforts of team members, third-part contractors and consultants to deliver projects according to plan.

The Project Manager will also define the project’s objectives and oversee quality control throughout its life cycle and ensuring alignment with the organization’s strategic goals.

Responsibilities:

• Develop detailed project plans, including scope, objectives, timelines and resources.
• Collaborate with internal and external stakeholders, including clients, technical teams, and management, to ensure project alignment with business goals and client expectations.
• Proactively identify and mitigate risks to project success, including cybersecurity threats, technical challenges, and resource constraints.
• Lead project execution, monitor progress against milestones, and adjust plans as necessary to ensure project success.
• Oversee project budgets.
• Provide regular project updates and status reports.
• Conduct post-project evaluations to identify lessons learned and opportunities for improvement in future project.

Project Management Skills:

• Strong leadership and team management abilities.
• Excellent organizational skills with a focus on detail and accuracy.
• Ability to manage multiple projects simultaneously and prioritize effectively.
• Strong problem-solving skills with a proactive approach to identifying and mitigating risks.
• Exceptional communication and interpersonal skills
• Technical concepts to non-technical stakeholders and lead cross-functional teams.
• Ability to adapt to rapidly changing environments and handle complex projects with shifting priorities.

Job Requirements

• Bachelor’s degree in Industrial Engineering and Management, Information Technology, or a related field.
• 4-5 years of experience in Project management.
• Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), Certified ScrumMaster (CSM), or equivalent certifications are highly desirable.
• Understanding of cybersecurity principles, practices, and technologies- Advantage.
• Familiarity with cybersecurity frameworks (as NIST, ISO 27001, etc.) and regulatory requirements- Advantage.
• Proficiency in project management tools (e.g., Microsoft Project, Jira, Trello).

2BSecure is seeking an experienced, highly motivated technologist to provide technical consulting and hands-on assistance in the areas of implementation, troubleshooting and support cyber security infrastructures.

The Information Security Professional Services Consultant will deliver a high-quality security solution to our clients, involving implementing and managing comprehensive security strategies.

The ideal candidate will possess deep knowledge of information security principles, strong technical expertise, and the ability to communicate complex security concepts to non-technical stakeholders.

Job requirements

• At least 2 years’ experience in information security.
• Relevant certifications such as CCNA, CISSP, CISM, CEH, OSCP, or equivalent are highly desirable.
• Having experience with a various of the following: proxy, Palo Alto xdr, MacAfee, Trend micro, MAIL RELAY- forcepoint, FORTIGATE.
• Understanding of network security, cloud security (AWS, Azure, GCP), and application security.
• Background in operating systems – Windows & Linux.
• Experience in IT infrastructure engineering and networking.
• Willing to travel to clients.
• Develop and maintain strong relationships with the clients organization.

2BSecure is seeking an experienced, highly motivated technologist to provide technical consulting and hands-on assistance in the areas of cloud infrastructure, automation solutions, and cloud architecture to clients.

Responsibilities:

• Design new cloud workloads according to customer needs and in a secure manner.
• Provide consulting services in the field of cloud security, including:
  • Risk surveys
  • Secure architecture review
  • Designing secure architectures and solutions
  • Hardening cloud workloads
• Provide cost-effective solutions to sales and pre-sales teams
• Understanding the client’s project goals and providing professional and commercial insight.
• Technically leading a public cloud project
• Design and write high-level and low-level technical documentation

Job requirements

• A minimum of four years’ experience in IT infrastructure engineering, including at least two years of experience supporting cloud-based infrastructure.
• In-depth knowledge of public, private, and hybrid cloud solutions, and experience integrating public clouds into traditional networks.
• Assessing cloud readiness from a business and technical perspective.
• Having experience with at least one of the following: AWS, Azure, Google Cloud.
• Excellent knowledge of networking, Linux, and Windows administration.
• An understanding of Infrastructure as Code, using tools like CloudFormation and Terraform.
• Hands-on experience with microservices and distributed application architectures, such as containers, Kubernetes, and/or serverless.
• Exceptional verbal and written communication skills, with a focus on customer service.
• data engineer or Microsoft Azure Architect Design.