Location: Kfar Saba, Israel (hybrid)

NEXT’s mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience.

Simply put, wherever you find small businesses, you’ll find NEXT.

Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow — that’s where you come in.

We are looking for a Head of security operations and Incident response who will be a key member of the security group at Next Insurance. You will be instrumental in ensuring the security of our cloud and product infrastructure and protecting our customers' data per our security requirements.

You will play a significant role in maturing the company's cloud infrastructure, security data lake architecture and capabilities, and technology frameworks.

You will work with our DevOps, product engineers, DataOps, and IT teams to provide a highly secure environment supporting our products and services.

Being a cloud-first company, automation, detection, and response are key - you will lead the design and development of secure automation practices in an agile environment to support security and compliance of the cloud infrastructure at scale for both production and corporate security infrastructure.

What we need:

• You have start-up DNA: You have demonstrated an ability to thrive in a dynamic start-up environment or have the DNA to do so.
• 8+ or more years of security leadership and management experience
• Experience designing and deploying security controls across all domains, such as access management, data protection, vulnerability management, incident response and management, application security, network security, preventive, detective, and offensive security solutions.
• Experience securing cloud and SaaS-based infrastructures.
• Experience leading highly complex, org-wide security change programs
• Outstanding interpersonal and communication skills; ability to influence both internally and externally and to drive multi-functional alignment and action
• Experience integrating security in the CI/CD pipeline using configuration management and automation tools.
• Good understanding of information security architecture, mitigation of threats, and compensating controls.

What you'll do:

You will provide engineering and operational support for leading security tools and deploy and run services that entirely use public cloud services.

You will provide engineering support in the following areas:

• Lead and manage the security operations team responsible for ensuring the security of our products, platforms, and cloud infrastructure.
• Develop and execute a comprehensive security strategy that aligns with our core strategic objectives.
• Work closely with product development teams to embed security best practices and considerations across the entire development lifecycle, ensuring that new features meet the highest trust standards
• Lead the enhancement of our incident detection & response procedures and protocols, ensuring a proactive and effective response to security incidents.
• Oversee the evolution of our SOC, implementing cutting-edge technologies and refining processes to ensure the highest level of security monitoring and incident detection.
• Establish and lead a threat intelligence program, providing valuable insights into the evolving threat landscape and enabling proactive security measures.
• You’ll work with the broader product security organization to help improve the overall cyber resilience of the NEXT products and services.
• You will support security verticals (product, workforce, operations, and compliance), executing the security roadmap based on Next Insurance‘s priorities and initiatives.
• Work with business owners and support developing and deploying solutions aligned with the business priorities.
• You will provide security infrastructure deployment, service maintenance, change control, support, and system resiliency.
• Achieve a deep knowledge of our product architecture and real-world usage patterns to gain better business insight into what solutions will deliver the best value for the team.