ABOUT THE ROLE

Sapiens International is looking for a Security Specialist (Cybersecurity Specialist) to join our global IT Security team. This is a hands-on role for someone who wants to specialize in vulnerability management and cloud security — owning the end-to-end vulnerability lifecycle and the security of our cloud, container, and Kubernetes environments.

Familiarity with the other tools in our security stack — DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Microsoft Purview, DLP, and email protection — is an added advantage, but the core of this role is hands-on, specialized ownership of vulnerability management and cloud security.

KEY RESPONSIBILITIES

Vulnerability Management & Automation

• Own the end-to-end vulnerability management lifecycle: asset discovery, scan orchestration, CVSS-based prioritization, ticketing, SLA tracking, and remediation validation
• Build AI-assisted automation pipelines that replace manual reporting, accelerate remediation, and surface actionable risk insights for stakeholders
• Develop integrations between security tools and ITSM platforms using Python, REST APIs, and scripting
• Maintain dashboards and automated reporting for vulnerability posture and compliance KPIs

Cloud Security

• Manage end-to-end security for cloud VMs, Kubernetes, and containerised workloads — ensuring secure configuration, runtime protection, and access controls across the infrastructure
• Manage and operate CSPM, CNAPP, and CWP platforms across cloud accounts — policy configuration, findings triage, SLA-driven closure, and compliance posture tracking against CIS, NIST, or PCI-DSS benchmarks
• Manage container image security and registry operations — image scanning in CI/CD and runtime, access controls, and audit logs, partnering with developers and DevOps teams to drive remediation without blocking releases
• Manage Kubernetes and cloud misconfiguration findings and translate them into actionable remediation tasks for platform and application teams
• Drive Azure, AWS, GCP, OCI security hardening in line with CIS, NIST, or equivalent frameworks
• Conduct security architecture reviews for new cloud workloads and projects
• Implement and manage modern authentication frameworks: cloud IDP, SSO, MFA, and Zero Trust principles

Other Security Tools & Projects (Added Advantage)

• Support administration of other tools in our stack — DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Purview, DLP, and email protection/mail relay — as needed
• Work on additional security tool implementation, upgrades, and improvement projects assigned by the manager
• Partner with other IT and security teams to roll out new controls and policies
• Document standard operating procedures and runbooks for the tools you own

REQUIREMENTS

Experience

• 5+ years of experience in the cybersecurity field, with specialized, hands-on experience in vulnerability management and cloud security
• Proven experience owning the end-to-end vulnerability management lifecycle, from discovery through remediation
• Proven experience securing cloud, container, and Kubernetes environments, including CSPM, CNAPP, and CWP tools and compliance posture tracking
• Experience building security automation using Python, APIs, or scripting is a strong plus
• Exposure to other tools such as DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Purview, DLP, or email protection is an added advantage

Technical — Must Have (Vulnerability Management)

• CVSS-based vulnerability prioritization, scan orchestration, and remediation validation
• Building automation and integrations between security tools and ITSM platforms using Python and REST APIs
• Maintaining dashboards and automated reporting for vulnerability posture and compliance KPIs

Technical — Must Have (Cloud Security)

• Hands-on experience with CSPM, CNAPP, and CWP platforms
• Securing cloud VMs, Kubernetes, and containerised workloads — configuration, runtime protection, and access controls
• Container image security and CI/CD scanning
• Cloud IDP, SSO, MFA, and Zero Trust principles
• Azure, AWS, GCP, or OCI security hardening (CIS, NIST, or equivalent frameworks)
• Security architecture reviews for cloud workloads

Soft Skills & Language

• Fluent written and verbal English
• Perceptive, fast learner with a strong sense of urgency
• Able to multi-task, and remain organized in a fast-paced global environment
• Highly independent and proactive, with a team-first mindset

Advantage (Not Required)

• Hands-on exposure to DNS security
• Hands-on exposure to the CrowdStrike Falcon platform (EDR, Identity Protection, Exposure Management)
• Familiarity with Microsoft Purview, DLP, or email protection/mail relay
• Security-related certifications: CISSP, CISM, CEH, CompTIA Security+, or vendor-specific (CrowdStrike, Microsoft, etc.)