23013 - Cloud Cyber Security Expert

QualityAI is the leading AI-first quality engineering company. We deliver end-to-end quality management services across the business and technology life cycle for enterprise customers who need certainty at Go-Live. 

 We build and test services and products using AI, working across data, models, platforms, devices, and infrastructure to ensure those systems perform as expected at scale 

We are looking for a System Tester to join our team and take part in the verification and validation of complex aviation systems within a multidisciplinary development environment, located in Haifa.

Responsibilities

• Conduct cyber risk assessments, threat modeling (including STRIDE), and security reviews for cloud environments, Microsoft 365, Power Platform, and enterprise AI solutions.
• Define security architecture, controls, and guardrails for new AI services and products, including Agentic and autonomous AI use cases.
• Assess the security posture of Microsoft 365 and Power Platform (Copilot, Power Apps, Power Automate, connectors, and data governance) and recommend mitigations.
• Evaluate risks related to enterprise AI, LLMs, RAG architectures, and autonomous agents, and define appropriate technical and process controls.
• Translate business and technical requirements into clear, actionable security requirements. Collaborate with architecture, IT, and business stakeholders to enable secure adoption of cloud and AI technologies.
• Produce structured deliverables such as risk assessments, security residual risk evaluations, and approval documentation.
• Work independently as well as collaboratively within cross-functional teams.

Requirements

•  3–5 years of experience in cloud platform security (Azure preferred), including identity, network, data, and workload security.
• Strong expertise in Microsoft 365 security, including Entra ID, Microsoft Defender, Microsoft Purview, Conditional Access, and data protection.
• Knowledge of Power Platform security, including governance, DLP, connectors, and Copilot Studio.
• Experience with enterprise AI, LLMs, RAG architectures, and Agentic / autonomous AI systems.
• Strong background in threat modeling, risk assessment methodologies, and security control design.
• Solid understanding of IAM principles, authentication, authorization, and least-privilege design.
• Knowledge of API and web service security, and data protection practices.
• Familiarity with security frameworks and standards such as ISO 27001, NIST, and CIS.