Cloud Cyber Security Expert
QualityAI is the leading AI-first quality engineering company. We deliver end-to-end quality management services across the business and technology life cycle for enterprise customers who need certainty at Go-Live. We build and test services and products using AI, working across data, models, platforms, devices, and infrastructure to ensure those systems perform as expected at scale We are looking for a System Tester to join our team and take part in the verification and validation of complex aviation systems within a multidisciplinary development environment, located in Haifa. Responsibilities Conduct cyber risk assessments, threat modeling (including STRIDE), and security reviews for cloud environments, Microsoft 365, Power Platform, and enterprise AI solutions. Define security architecture, controls, and guardrails for new AI services and products, including Agentic and autonomous AI use cases. Assess the security posture of Microsoft 365 and Power Platform (Copilot, Power Apps, Power Automate, connectors, and data governance) and recommend mitigations. Evaluate risks related to enterprise AI, LLMs, RAG architectures, and autonomous agents, and define appropriate technical and process controls. Translate business and technical requirements into clear, actionable security requirements. Collaborate with architecture, IT, and business stakeholders to enable secure adoption of cloud and AI technologies. Produce structured deliverables such as risk assessments, security residual risk evaluations, and approval documentation. Work independently as well as collaboratively within cross-functional teams. Requirements 3–5 years of experience in cloud platform security (Azure preferred), including identity, network, data, and workload security. Strong expertise in Microsoft 365 security, including Entra ID, Microsoft Defender, Microsoft Purview, Conditional Access, and data protection. Knowledge of Power Platform security, including governance, DLP, connectors, and Copilot Studio. Experience with enterprise AI, LLMs, RAG architectures, and Agentic / autonomous AI systems. Strong background in threat modeling, risk assessment methodologies, and security control design. Solid understanding of IAM principles, authentication, authorization, and least-privilege design. Knowledge of API and web service security, and data protection practices. Familiarity with security frameworks and standards such as ISO 27001, NIST, and CIS. Why should you join us? Grow your career in a stable, innovative environment Collaborate closely with clients to deliver smart, high-quality solutions Make an impact in a dynamic, learning-driven environment Be part of a human, value-driven organization that cares