Experienced IT Security Engineer

📋 Job Overview

About monday.com:
monday.com is the AI work platform powering the most ambitious teams. 250,000+ customers across departments use us to bring people, workflows, and AI agents together on one flexible platform where AI doesn't just assist, it executes. We move fast, build things that matter, and foster an ownership-driven culture where you're empowered to shape how organizations work and outpace their competition.

🏢 About monday.com

We are looking for an experienced, multidisciplinary IT Security Engineer with a strong technical background and the ability to learn from scratch and own new technologies and domains. You’ll join our IT Security team, part of our InfraSec group based in our headquarters in Tel Aviv, Israel.

🎯 The Role

You will design, implement, and mature the security controls that protect our business applications, our workforce, and our corporate environment. You will be part of the IT Security team and partner with other security teams in the department, IT, R&D, and other stakeholders to embed security controls at scale.

✅ Key Responsibilities

• Own overall security posture and optimize enterprise tools across AI, IdP, DLP, EDR, BDR, SSPM, network, and email security.
• Design workforce/external Zero Trust policies and harden endpoint, browser, SaaS, network, and supply chain configurations (including extensions, plugins, and packages).
• Evaluate and deploy new security technologies from PoC to production, building automated workflows to scale controls without added headcount.
• Conduct SaaS and vendor risk assessments, access reviews, deployment audits, posture remediation, and AI governance.
• Serve as a domain expert for SecOps incident response, partnering with IT and R&D to embed security standards and SOPs into operational processes.

📌 Required Qualifications

• Core Background: 5+ years in Cybersecurity Engineering, ideally in a high-growth SaaS environment.
• Domain Expertise: Hands-on experience in Identity (Must: Okta, Ping, or Entra ID) plus 2+ of: Data Security (DLP/DSPM), Endpoint (EDR/BDR), Email, or Network/SASE.
• Platforms & Controls: Hands-on with SSO, MFA, RBAC, SCIM, Zero Trust, SSPM platforms, SaaS, and applications security evaluations, understanding of common security frameworks (CIS, NIST, OWASP).
• Mindset & Collaboration: Drive security through people relations, AI-first, hands-on problem solver with strong ownership, cross-team collaboration skills, and fluent English for global teams.

⭐ Desirable Experience

• Securing AI agents, agentic workflows, low-code/no-code platforms, and emerging SaaS threats.