AppSec Jobs

Thales

Cyber Security and Database Security Engineer

IsraelWebsite
Apply on Thales's site →

At a Glance

2+ years experienceAWSAzureGCPPythonOWASP

About This Role

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it’s all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what’s possible.

We’re driving progress in some of the world’s most important industries - from the bottom of the oceans to the depths of space and cyberspace - and from manufacturing to engineering, we work together to build a future we can all trust.

Imperva, a Thales company, is a globally recognized cybersecurity leader, dedicated to securing data and applications across diverse environments. Our cutting-edge solutions empower organizations to safeguard their most critical assets, ensuring robust protection against emerging threats.

Cyber Security and Database Security Engineer
 

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.
 

Position Summary
 

Our partners and customers are interested in optimizing their incident response, security analysis and improved user experience with the Imperva platform and product suites.

As a Cybersecurity Engineer, you will be on the front lines providing world-class support as an Enterprise Services Engineer. You will help organizations understand Imperva’s various product platforms, such as Application Security and Data Security.

Your mission is to help customers improve their security postures and seamlessly migrate existing pipelines and workloads to Imperva. You will act as a premier problem solver, identifying complex challenges and advocating innovative solutions on behalf of the customer.
 

Key Areas of Responsibility
 

Technical Management & Optimization

  • Product Administration: Maintain the core Imperva product stack on behalf of enterprise customers, managing tasks from custom rule creation to comprehensive event analysis.
  • Policy Tuning: Optimize and fine-tune security and audit rules across deployed Imperva solutions to minimize false positives and maximize threat detection.
  • Deployment & Setup: Lead the technical configuration, physical or cloud installation, and baseline setup of Imperva platforms for new and existing accounts.
  • Health Monitoring: Conduct periodic system health checks and structured service reviews to ensure peak operational performance and platform stability.

Incident Response & Support Escalation

  • Threat Mitigation: Perform rapid incident response and detailed root-cause analysis during active security events.
  • Advanced Troubleshooting: Serve as the resident subject matter expert in diagnosing and resolving complex, deep-tier technical issues within Imperva ecosystems.
  • Case Champion: Accelerate time-to-resolution for critical support tickets, driving internal visibility onto deployment friction and customer pain points.
  • Global Collaboration: Partner with cross-functional teams including customers, partners, account managers, and global engineering teams.

Relationship & Account Consulting

  • Strategic Advisory: Build long-term technical relationships with enterprise stakeholders, assisting them with infrastructure design, roadmap planning, and deployment consulting.
  • Environment Assessment: Evaluate customer technical environments and security architectures to align product delivery with organizational requirements.
  • Customer Success: Support a diverse portfolio of active and onboarding customers, ensuring seamless retention and continuous platform adoption.

Leadership & Business Operations

  • Team Leadership: Provide day-to-day oversight, technical leadership, and operational supervision for the EMEA Enterprise Services engineering team.
  • Talent Development: Train, mentor, and coach junior and mid-level engineers to elevate collective technical capability across the department.
  • Operational Excellence: Assist management with tracking departmental KPIs, executing net-new strategic initiatives, and scaling the Enterprise Services program.
  • Commercial Alignment: Collaborate directly with Sales, Renewals, and Customer Success Management (CSM) teams to drive Enterprise Services adoption and support the active sales cycle.

Requirements

  • Education: Bachelor’s degree in information systems, Computer Science, Telecommunications, or a related technology field.
  • Core Experience: Minimum of 4 years in application or network security within a technical, customer-facing role.
  • Specialized Expertise: At least 2 years of experience in Data Security.
  • Networking Protocols: Deep understanding of TCP, HTTP/S, SSL, DNS, Reverse Proxies, and Firewalls.
  • Operating Systems: Practical expertise with Linux-based operating systems and system administration.
  • Scripting Skills: Automation expertise in common scripting languages including Bash and Python.
  • Application Security: Solid knowledge of the OWASP Top Ten Web Application and API vulnerabilities.
  • Database & Query: Proficiency in SQL and MongoDB, covering databases like MSSQL, Oracle, and MySQL.
  • Infrastructure Architecture: Experience analyzing complex deployments across both on-premises and cloud infrastructures.
  • Soft Skills: Advanced interpersonal, communication, analytical, critical thinking, and technical writing skills.
  • Availability: Flexibility to participate in a scheduled, rotating on-call shift roster.

Additional Preferred Experience

  • Technical Communication: Ability to articulate complex security concepts clearly to both technical and non-technical stakeholders.
  • Cloud Architecture: Familiarity with major public cloud platforms, with a strong preference for AWS (Azure and GCP are a plus).
  • Pattern Matching: Practical knowledge and ability to parse data by constructing and interpreting regular expressions (Regex).

Special Position Requirements
 

Operational Schedule: Participation in a rotating on-call roster, requiring occasional paid weekend and holiday shifts (averaging once per month).

Working Days: Primarily Monday to Friday, subject to operational changes.
We are working in a hybrid working model: Tel Aviv office/work from home
* The role may require security clearance process

Thales, champions inclusion and we believe diversity strengthens the fabric of our culture. We are an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, colour, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.
 

Source: Thales careers · View original posting


About Thales

Thales Group is a French multinational corporation based in Paris, specializing in aerospace and defense. Founded in 1893, the company has evolved through various mergers and rebranded as Thales in 2000 to unify its global presence. Thales designs and manufactures a wide range of systems, including defense electronics for air, land, sea, and space applications, as well as cybersecurity solutions that protect critical infrastructure. The company also provides aerospace avionics for both commercial and military aircraft, radar and sensor systems for surveillance and air traffic control, and secure communications systems. Operating in over 68 countries, Thales serves government, military, aerospace, and security sectors, generating significant revenue from its military activities. With a history of strategic acquisitions and partnerships, Thales continues to expand its capabilities and global footprint, delivering integrated solutions to a diverse range of customers worldwide.

Industry

defense & space

Employees

79,000

11568 engineers

Revenue

$21B

Website

Visit →

Security at Thales

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

  • Thales's application security philosophy, influenced by its Imperva acquisition, emphasizes the critical importance of API security, automated threat detection, and embedding security into development processes through DevSecOps.
  • They state that "API security is no longer optional - it's fundamental to maintaining business continuity and trust."and that "As we step into 2025, the critical importance of application and API security has never been more evident."The company promotes "DevSecOps practices, embedding security into development processes."and highlights that "Imperva Application Security integrates advanced threat detection engines with automated inline responses."Furthermore, they acknowledge that "More than half of all internet traffic is now automated.".

Security Team

  • Key public-facing leaders for application security include Tim Chang (Global VP & GM, Application Security) and Nanhi Singh (Head of Application Security Products / Chief Imperva Customer Officer as of blog date).
  • As of, LinkedIn Jobs showed 17 Thales Security Engineer Jobs in United States (search summary), including DevSecOps and Application Security roles.
  • Evidence describing the internal AppSec org model (centralized vs. embedded) and formal reporting line to CISO/CTO was not found in accessible public pages.

Key Initiatives

Thales/Imperva communications emphasize API security, detection and automated mitigation capabilities, and DevSecOps adoption driven by API growth. Specifically, "Imperva Application Security integrates advanced threat detection engines with automated inline responses"and promotes "DevSecOps practices, embedding security into development processes."Information regarding an internal Security Champions program, ticketing SLAs (e.g., MTTR or critical findings within X days), or detailed triage/remediation workflows are not publicly available.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Thales's site