Moon Active is one of the world's fastest-growing mobile game companies, providing entertainment to millions of players across the globe. Headquartered in Tel Aviv.
We are looking for a SecOps Engineer to join our Security Operations team. In this role, you will help defend the organization end-to-end, from IT security to endpoint and cloud security - while performing third-party and internal security reviews, handling incident response, conducting threat hunting, and supporting GenAI security work.
Responsibilities- Design, operate, and improve security infrastructure by maintaining core controls, hardening systems, and leading cloud security efforts to address misconfigurations, vulnerabilities, and identity risks
- Monitor, investigate, and remediate security alerts and threats by performing DFIR, analyzing attack vectors, proactively hunting adversary activity, and leading incident response
- Perform security reviews of third-party vendors, SaaS platforms, and internal applications, assessing architectures, data flows, integrations, and risk exposure
- Defend the organization end-to-end across endpoints, identities, applications, and cloud by operating and advancing SecOps controls (SIEM/EDR/CSPM), building automations, enforcing best practices, and partnering cross-functionally to drive security outcomes
- 3+ years of hands-on experience in security operations, incident response, or a similar cybersecurity role
- Strong hands-on experience in IT security, endpoint protection, identity security, and general security operations
- Solid understanding of cloud platforms (GCP/AWS/Azure) and practical experience improving cloud security
- Experience with AI artifacts (Skills, MCP, Hooks etc.)
- Strong knowledge of SIEM technologies (Splunk, etc.) and experience with incident response and DFIR workflows
- Proficiency with Python, Bash, or PowerShell for automation and scripting
- Familiarity with SOAR platforms and building automated playbooks
- Strong communication skills with the ability to collaborate across DevOps, IT, R&D, and business teams
#LI-Hybrid
Skills Required
- 3+ years of hands-on experience in security operations, incident response, or a similar cybersecurity role
- Strong hands-on experience in IT security, endpoint protection, identity security, and general security operations
- Solid understanding of cloud platforms (GCP/AWS/Azure) and practical experience improving cloud security
- Experience with AI artifacts (Skills, MCP, Hooks etc.)
- Strong knowledge of SIEM technologies (Splunk, etc.) and experience with incident response and DFIR workflows
- Proficiency with Python, Bash, or PowerShell for automation and scripting
- Familiarity with SOAR platforms and building automated playbooks
- Strong communication skills with the ability to collaborate across DevOps, IT, R&D, and business teams
Moon Active Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Moon Active and has not been reviewed or approved by Moon Active.
-
Healthcare Strength — Health coverage includes comprehensive medical and life insurance for employees and, in many locations, their families as outlined in role postings. This breadth of protection is positioned as a core part of the package.
-
Wellbeing & Lifestyle Benefits — On-site daily meals, stocked kitchens, fitness options (e.g., MultiSport cards, classes), and office events are highlighted across major offices, enhancing everyday value. Gifts and quality facilities further support a lifestyle-oriented experience.
-
Leave & Time Off Breadth — Paid vacation and sick leave are explicitly included, with some locations describing generous allowances. Parental leave is also referenced in certain postings, extending time-away support.
Moon Active Insights
What We Do
As one of the world’s fastest-growing mobile game companies, we produce engaging entertainment that is enjoyed by players across the universe!
