ABOUT THE ROLE

Sapiens International is looking for a Security Specialist (Information Security Specialist) to join our global IT Security team. This is a hands-on, incident-driven role responsible for reviewing and resolving security tickets raised by users and teams across the business.

You will be the first point of response for security tickets raised across our security tools — EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, Purview, and other platforms in our stack. You will review each ticket, investigate the cause, and work it through to resolution, escalating where needed. Alongside ticket handling, you will also support security tool administration and take up tasks assigned by your manager.

Work Schedule

• This is a rotational shift role. Shifts rotate every two weeks across three windows: Morning 9:00 AM – 6:00 PM, Afternoon 1:00 PM – 10:00 PM, and Evening 6:00 PM – 3:00 AM.

KEY RESPONSIBILITIES

Incident & Ticket Management

• Review, investigate, and resolve security incidents and tickets raised by users and teams across various security tools
• Handle tickets spanning multiple security platforms, working across a minimum of four of: EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Diagnose the root cause of each reported issue and take the appropriate action to fix it, whether it's a policy change, configuration update, or coordination with another team
• Coordinate with end users, IT, and other teams to gather information and drive tickets to closure within SLA
• Escalate complex or high-severity incidents to senior team members or the manager as needed

Security Tools & Task Support

• Support day-to-day administration and configuration of security tools such as EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Work on security tasks, tool improvements, and projects assigned by the manager

REQUIREMENTS

Experience

• 3+ years of experience in information security operations, a security operations center, or a security service-desk role
• Hands-on experience handling security tickets or incidents across multiple security tools
• Demonstrated exposure to at least four of the following: EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, or Purview

Technical — Must Have

• Working knowledge of common security tools and the issues they generate — EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Understanding of ticket-based troubleshooting — reading alerts, checking logs/policies, and identifying root cause
• Ability to work independently to research and resolve tickets using vendor documentation and internal knowledge bases

Soft Skills & Language

• Fluent verbal English
• Willing and flexible to work a rotational shift model (morning/afternoon/evening, rotating every two weeks)
• Able to multi-task, prioritize, and stay organized under ticket volume
• Team player with a proactive, ownership mindset

Advantage (Not Required)

• Prior hands-on exposure to any of: CSPM, Exposure Management, External Attack Surface Management, Identity Protection, or Purview
• Exposure to ITSM/ticketing tools (ServiceNow)
• Security-related certifications: CompTIA Security+, CEH, or vendor-specific (Microsoft, CrowdStrike, etc.)