Security Operations Engineer

Kela Technologies Tel-Aviv, Tel-Aviv District, Israel

Software Development · 51-200 employees

2 d ago

Mid (2-5 yrs) Full-time Israel

Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The Security Operations Engineer will build and maintain security controls across corporate IT, cloud, and production environments to reduce risk. They will also manage incident response, vulnerability patching, and ensure compliance with security frameworks like ISO 27001 and SOC 2.

What they look for

Security Operations Cloud Security Incident Response SIEM MDR EDR Linux MacOS Windows Python Bash PowerShell ISO 27001 SOC 2 Vulnerability Management Compliance

Requirements

Candidates must have 4+ years of hands-on security experience in cloud-based environments with proficiency in Linux, macOS, and Windows. Strong technical skills in SIEM, EDR, and scripting languages like Python or Bash are required, along with experience in security frameworks.

Full description

Kela is a defense technology startup pioneering next-generation command & control and data infrastructure systems. We empower defense organizations with robust, scalable, and secure platforms that integrate diverse sensors and AI to deliver real-time battlefield intelligence. Backed by leading investors, Kela combines Israeli innovation with global mission impact.

We are seeking a hands-on Security Operations Engineer to build and maintain Kela's security posture across corporate IT, SaaS, cloud, and production environments, continuously reducing cybersecurity risk and maintaining security compliance. You will close existing gaps and raise security maturity as the company scales.

Responsibilities

Security posture: Build, maintain, and continuously improve security controls across endpoints, servers, identity, SaaS, cloud, and production.
SaaS security and governance: Run access reviews, data-sharing controls, configuration posture, and third-party app risk across Google Drive, Notion, GitHub, and hundreds of other SaaS apps.
Corporate security: Run SIEM/MDR and EDR, handle incident response, and own hardening, patching, and vulnerability management on Linux, macOS, and Windows.
Cloud and application security posture: Run the CSPM and ASPM tools, prioritize findings, and drive fixes with the owning teams.
Production security: Own security monitoring, access controls, and hardening for production environments, which are mostly Linux, working with DevOps.
Compliance: Keep ISO and other audit evidence current at all times, and support audits and customer security questionnaires.
Automation: Build scripts and workflows that cut manual security work and scale with the company.

Requirements

4+ years of hands-on security experience, ideally as the security owner at a mid-size company: either responsible for security end to end on your own, or leading a small team.
Experience in hi-tech and cloud-based companies.
Hands-on depth from roles such as MDR, incident response, red team, or similar, where you investigated and resolved threats end to end.
Strong hands-on skills in Linux, macOS, and Windows (administration, hardening, troubleshooting).
Hands-on experience with SIEM/MDR and EDR platforms (CrowdStrike an advantage).
Experience with SSPM, CSPM, and/or ASPM tools.
Cloud security experience across AWS, Azure, and GCP.
Scripting skills: Bash, Python, PowerShell.
Experience with security and compliance frameworks: ISO 27001, SOC 2 Type II, GDPR, PCI DSS, CIS Controls, and the NIST Cybersecurity Framework.
Self-driven and able to work across teams and drive fixes without direct authority.
Fluent in Hebrew and English.