Security Operations Engineer

Description

Kela is a defense technology startup pioneering next-generation command & control and data infrastructure systems. We empower defense organizations with robust, scalable, and secure platforms that integrate diverse sensors and AI to deliver real-time battlefield intelligence. Backed by leading investors, Kela combines Israeli innovation with global mission impact.

We are seeking a hands-on Security Operations Engineer to build and maintain Kela's security posture across corporate IT, SaaS, cloud, and production environments, continuously reducing cybersecurity risk and maintaining security compliance. You will close existing gaps and raise security maturity as the company scales.

Responsibilities

• Security posture: Build, maintain, and continuously improve security controls across endpoints, servers, identity, SaaS, cloud, and production.
• SaaS security and governance: Run access reviews, data-sharing controls, configuration posture, and third-party app risk across Google Drive, Notion, GitHub, and hundreds of other SaaS apps.
• Corporate security: Run SIEM/MDR and EDR, handle incident response, and own hardening, patching, and vulnerability management on Linux, macOS, and Windows.
• Cloud and application security posture: Run the CSPM and ASPM tools, prioritize findings, and drive fixes with the owning teams.
• Production security: Own security monitoring, access controls, and hardening for production environments, which are mostly Linux, working with DevOps.
• Compliance: Keep ISO and other audit evidence current at all times, and support audits and customer security questionnaires.
• Automation: Build scripts and workflows that cut manual security work and scale with the company.

Requirements

• 4+ years of hands-on security experience, ideally as the security owner at a mid-size company: either responsible for security end to end on your own, or leading a small team.
• Experience in hi-tech and cloud-based companies.
• Hands-on depth from roles such as MDR, incident response, red team, or similar, where you investigated and resolved threats end to end.
• Strong hands-on skills in Linux, macOS, and Windows (administration, hardening, troubleshooting).
• Hands-on experience with SIEM/MDR and EDR platforms (CrowdStrike an advantage).
• Experience with SSPM, CSPM, and/or ASPM tools.
• Cloud security experience across AWS, Azure, and GCP.
• Scripting skills: Bash, Python, PowerShell.
• Experience with security and compliance frameworks: ISO 27001, SOC 2 Type II, GDPR, PCI DSS, CIS Controls, and the NIST Cybersecurity Framework.
• Self-driven and able to work across teams and drive fixes without direct authority.
• Fluent in Hebrew and English.