Moon Active is one of the world's fastest-growing mobile game companies, providing entertainment to millions of players across the globe. Headquartered in Tel Aviv.
We are looking for a SecOps Engineer to join our Security Operations team. In this role, you will help defend the organization end-to-end, from IT security to endpoint and cloud security - while performing third-party and internal security reviews, handling incident response, conducting threat hunting, and supporting GenAI security work.
Responsibilities
- Design, operate, and improve security infrastructure by maintaining core controls, hardening systems, and leading cloud security efforts to address misconfigurations, vulnerabilities, and identity risks.
- Monitor, investigate, and remediate security alerts and threats by performing DFIR, analyzing attack vectors, proactively hunting adversary activity, and leading incident response.
- Perform security reviews of third-party vendors, SaaS platforms, and internal applications, assessing architectures, data flows, integrations, and risk exposure.
- Defend the organization end-to-end across endpoints, identities, applications, and cloud by operating and advancing SecOps controls (SIEM/EDR/CSPM), building automations, enforcing best practices, and partnering cross-functionally to drive security outcomes.
Requirements
- 3+ years of hands-on experience in security operations, incident response, or a similar cybersecurity role.
- Strong hands-on experience in IT security, endpoint protection, identity security, and general security operations.
- Solid understanding of cloud platforms (GCP/AWS/Azure) and practical experience improving cloud security.
- Experience with AI artifacts (Skills, MCP, Hooks etc.).
- Strong knowledge of SIEM technologies (Splunk, etc.) and experience with incident response and DFIR workflows.
- Proficiency with Python, Bash, or PowerShell for automation and scripting.
- Familiarity with SOAR platforms and building automated playbooks.
- Strong communication skills with the ability to collaborate across DevOps, IT, R&D, and business teams.
#LI-Hybrid