What You'll Be Doing
Secure Riskified's AI adoption: implement and enforce technical guardrails for AI assistants, coding agents (e.g. Claude Code, Cursor), MCP servers and connectors, and AI-enabled SaaS
Operate and improve our AI security tooling – MCP gateway, agent telemetry, hook/event monitoring, and AI usage discovery – and turn findings into detections and policies
Assess third-party AI tools, OAuth apps, browser extensions, and agent integrations before they touch company data; run vendor security reviews for AI products
Build detections and response playbooks for AI-specific threats – prompt injection, data exfiltration via agents and connectors, shadow AI, and compromised integration tokens
Operate and maintain our cloud-delivered security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controls
Secure our SaaS footprint – SaaS security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platforms
Monitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, SaaS, and AI tooling
Maintain the SIEM/log pipeline: onboard new SaaS log sources (including AI and agent telemetry), develop custom correlation rules, and build dashboards
Run endpoint patching and vulnerability management, and coordinate remediation with owning teams
Implement and maintain DLP controls across email, endpoints, SaaS, and AI tools
Maintain identity security controls – SSO/MFA coverage, privileged access, joiner/mover/leaver, access reviews, and service/agent identities
Use AI to make the security team better – build automations, agents, and workflows that reduce manual work in triage, reviews, and compliance evidence
Qualifications
5+ years hands-on experience as a security engineer in a cloud-native / SaaS-first company
Experience in high-scale SaaS or fintech environments
Hands-on experience with LLM-based tools and agents (coding agents, AI assistants, MCP) and a solid understanding of their security risks – prompt injection, tool/connector abuse, data leakage, over-permissioned integrations
Proven hands-on experience with cloud SIEM/log platforms (log ingestion, detection engineering, dashboards)
Proven hands-on experience with incident response and forensic investigation in SaaS environments
Experience operating EDR/XDR, IdP/SSO, and MDM platforms (CrowdStrike, Okta, IRU/Jamf or equivalents)
Experience assessing SaaS and third-party integrations (OAuth scopes, API access, data flows)
Strong communicator, able to explain security risks to technical and non-technical stakeholders
Professional English (written and spoken)
Life at Riskified
We are a fast-growing and dynamic tech company with 750+ team members globally. We value collaboration and innovative thinking. We’re looking for bright, driven, and passionate people to grow with us.
Our Tel-Aviv team is currently working in a hybrid of remote and in-office work. We have recently moved to our new space in Tel Aviv - check it out here!
Some of our Tel Aviv Benefits & Perks
Equity for all employees, Keren Hishtalmut, pension
Private medical insurance, extra time off for parents and caregivers
Commuter and parking benefits
Team events, fully-stocked kitchen,lunch stipend, happy hours, yoga, pilates, functional training, basketball, soccer
Wide-ranging opportunities to volunteer and make an impact
Commitment to your professional development with global onboarding, skills-based courses, lunch & learns
Awesome Riskified gifts and swag!
In the News
Geektime: Riskified Goes Public
Walla!: Happy Hour at the Riskified Offices
Geektime Insider: A look at Riskified Tel Aviv
Globes: Riskified to contribute the highest amount up to date to Tmura
Globes: Riskified is among Israel’s fastest growing companies
TechCrunch: Riskified Prevents Fraud on Your Favorite E-commerce Site
Riskified is deeply committed to the principle of equal opportunity for all individuals. We do not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, disability, veteran status, or any other status protected by law.
