About monday.com:
monday.com is the AI work platform powering the most ambitious teams. 250,000+ customers across departments use us to bring people, workflows, and AI agents together on one flexible platform where AI doesn't just assist, it executes. We move fast, build things that matter, and foster an ownership-driven culture where you're empowered to shape how organizations work and outpace their competition.
About the team
We are looking for an experienced, multidisciplinary IT Security Engineer with a strong technical background and the ability to learn from scratch and own new technologies and domains. You’ll join our IT Security team, part of our InfraSec group based in our headquarters in Tel Aviv, Israel.
You will design, implement, and mature the security controls that protect our business applications, our workforce, and our corporate environment. You will be part of the IT Security team and partner with other security teams in the department, IT, R&D, and other stakeholders to embed security controls at scale.
Our strategy is built on an AI-first mindset, identity-centric controls, Zero Trust principles and scalable automation. You will own key security domains end-to-end, complete lifecycle, identifying and translating the risk to requirements to implementation of controls and operations. This is a highly technical role for someone who has matured the security posture of a continuously growing company.
About the role:
Platform & Posture Management: Own overall security posture and optimize enterprise tools across AI, IdP, DLP, EDR, BDR, SSPM, network, and email security.
Zero Trust & Hardening: Design workforce/external Zero Trust policies and harden endpoint, browser, SaaS, network, and supply chain configurations (including extensions, plugins, and packages).
Tech Evaluation & Automation: Evaluate and deploy new security technologies from PoC to production, building automated workflows to scale controls without added headcount.
Governance, Audits & SaaS Risk: Conduct SaaS and vendor risk assessments, access reviews, deployment audits, posture remediation, and AI governance.
Incident Support & Collaboration: Serve as a domain expert for SecOps incident response, partnering with IT and R&D to embed security standards and SOPs into operational processes.
Requirements:
Core Background: 5+ years in Cybersecurity Engineering, ideally in a high-growth SaaS environment.
Domain Expertise: Hands-on experience in Identity (Must: Okta, Ping, or Entra ID) plus 2+ of: Data Security (DLP/DSPM), Endpoint (EDR/BDR), Email, or Network/SASE.
Platforms & Controls: Hands-on with SSO, MFA, RBAC, SCIM, Zero Trust, SSPM platforms, SaaS, and applications security evaluations, understanding of common security frameworks (CIS, NIST, OWASP).
Mindset & Collaboration: Drive security through people relations, AI-first, hands-on problem solver with strong ownership, cross-team collaboration skills, and fluent English for global teams.
Strong advantage: Securing AI agents, agentic workflows, low-code/no-code platforms, and emerging SaaS threats.