# Vehicle & API Security [Upstream](https://gurify.com/jobs?q=Upstream) · Herzliya, Israel · Posted last week [Security](https://gurify.com/jobs/security) [Apply on the original posting → (opens in a new tab)](https://www.comeet.com/jobs/upstream/E4.003/senior-soc-analyst---vehicle--api-security/45.477) ## Job description Upstream Security protects connected vehicles, mobility services, and their supporting digital ecosystems. Our AI-powered cybersecurity platform combines vehicle security, API security, threat intelligence, detection and response, and managed SOC services. We are looking for a Senior SOC Analyst to join Upstream’s managed cybersecurity services team. You will investigate and respond to cybersecurity incidents involving connected vehicles, mobility applications, backend services, and APIs. As a senior analyst, you will serve as a security focal point for customers, lead complex investigations, improve detection capabilities, and help deploy and maintain agentic AI workflows used across SOC operations. This is a full-time, hybrid position based in Herzliya, Israel. ### Responsibilities - Monitor, investigate, and respond to vehicle and API security alerts. - Lead complex investigations, assess impact, identify root causes, and provide actionable mitigation recommendations. - Analyze suspicious vehicle behavior, API activity, authentication events, and mobility-related telemetry. - Investigate API threats including authorization abuse, credential attacks, injection, data exposure, automation, and business-logic abuse. - Deploy, configure, test, and maintain agentic AI workflows supporting alert triage, investigations, threat hunting, reporting, and response. - Monitor the accuracy, reliability, and operational performance of AI-driven workflows and continuously improve their prompts, tools, guardrails, and decision logic. - Conduct proactive threat hunting and OSINT investigations to identify emerging threats and attack patterns. - Develop and maintain investigation playbooks, operational procedures, and response processes. - Tune detection logic, behavioral profiles, and machine-learning models to improve detection quality and reduce false positives. - Produce clear investigation reports, incident updates, dashboards, and executive-level summaries. - Act as a trusted security advisor to customers during investigations, workshops, and business reviews. - Mentor analysts and promote consistent investigation quality across the SOC. - Track operational performance against SLAs, quality standards, and SOC KPIs. - Collaborate with threat intelligence, research, product, engineering, and customer-facing teams to improve Upstream’s security capabilities. - Participate in the team’s rotating on-call schedule and provide timely support for urgent security incidents when required. ### Requirements - 3+ years of experience in SOC operations, incident response, threat hunting, or security investigations. - Previous customer facing analyst role, preferably within MSSP, consulting, or professional services context, preferably in English - Strong practical understanding of APIs, including REST, authentication, authorization, OAuth, and JWT. - Hands-on API security experience with technologies such as WAFs, API gateways, API security platforms, SIEM, Burp Suite, or similar tools. - Experience investigating common API threats, including account abuse, authorization flaws, injection, data exposure, and business-logic attacks. - Experience with SIEM, SOAR, XDR, security automation, and large-scale data analysis. - Experience deploying or maintaining automation, AI-assisted, or agentic AI workflows. - Scripting experience, preferably with Python or SQL. - Ability to lead complex investigations and operate effectively in high-pressure environments. - Fluent English. - Willingness to participate in a rotating on-call schedule. - Experience in automotive, mobility, IoT, cloud security, mobile application security, or managed security services is preferred. Upstream is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other characteristic protected by applicable law. **Live in Upstream’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role. We remove it as soon as it disappears at source. ## More jobs like this - UP [Cyber Threat Intelligence Analyst](https://gurify.com/job/cyber-threat-intelligence-analyst-at-upstream-5ff5b0a15a51) Upstream · Herzliya, Israel · last week - UP [Senior DevOps Engineer](https://gurify.com/job/senior-devops-engineer-at-upstream-7160e7609bcf) Upstream · Herzliya, Israel · 4 days ago - AI [Senior Application Security Engineer](https://gurify.com/job/senior-application-security-engineer-at-aidocmedical-fb09debcc24b) Aidocmedical · Tel Aviv-Yafo, Israel · 3 days ago - AS [Aikido Security](https://gurify.com/job/aikido-security-3ee07294ce6b) Tel Aviv, Israel · 3 days ago - SI [Solutions Architect, Cloud Identity Security](https://gurify.com/job/solutions-architect-cloud-identity-security-at-silverfort-9a1b3bfbea18) Silverfort · Tel Aviv-Yafo, Israel · 4 days ago - AI [Senior Cloud Security Engineer](https://gurify.com/job/senior-cloud-security-engineer-at-aidocmedical-4e82bd000d86) Aidocmedical · Tel Aviv-Yafo, Israel · 3 days ago ```json {"@context":"https://schema.org/","@type":"JobPosting","title":"Vehicle \u0026 API Security","description":"\u003Cp\u003EUpstream Security protects connected vehicles, mobility services, and their supporting digital ecosystems. Our AI-powered cybersecurity platform combines vehicle security, API security, threat intelligence, detection and response, and managed SOC services.\u003C/p\u003E\u003Cp\u003EWe are looking for a Senior SOC Analyst to join Upstream\u2019s managed cybersecurity services team. You will investigate and respond to cybersecurity incidents involving connected vehicles, mobility applications, backend services, and APIs.\u003C/p\u003E\u003Cp\u003EAs a senior analyst, you will serve as a security focal point for customers, lead complex investigations, improve detection capabilities, and help deploy and maintain agentic AI workflows used across SOC operations.\u003C/p\u003E\u003Cp\u003EThis is a full-time, hybrid position based in Herzliya, Israel.\u003C/p\u003E\u003Ch3\u003EResponsibilities\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EMonitor, investigate, and respond to vehicle and API security alerts.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead complex investigations, assess impact, identify root causes, and provide actionable mitigation recommendations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAnalyze suspicious vehicle behavior, API activity, authentication events, and mobility-related telemetry.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInvestigate API threats including authorization abuse, credential attacks, injection, data exposure, automation, and business-logic abuse.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeploy, configure, test, and maintain agentic AI workflows supporting alert triage, investigations, threat hunting, reporting, and response.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMonitor the accuracy, reliability, and operational performance of AI-driven workflows and continuously improve their prompts, tools, guardrails, and decision logic.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EConduct proactive threat hunting and OSINT investigations to identify emerging threats and attack patterns.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDevelop and maintain investigation playbooks, operational procedures, and response processes.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETune detection logic, behavioral profiles, and machine-learning models to improve detection quality and reduce false positives.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProduce clear investigation reports, incident updates, dashboards, and executive-level summaries.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAct as a trusted security advisor to customers during investigations, workshops, and business reviews.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMentor analysts and promote consistent investigation quality across the SOC.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETrack operational performance against SLAs, quality standards, and SOC KPIs.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with threat intelligence, research, product, engineering, and customer-facing teams to improve Upstream\u2019s security capabilities.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EParticipate in the team\u2019s rotating on-call schedule and provide timely support for urgent security incidents when required.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ERequirements\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E3\u002B years of experience in SOC operations, incident response, threat hunting, or security investigations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPrevious customer facing analyst role, preferably within MSSP, consulting, or professional services context, preferably in English\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong practical understanding of APIs, including REST, authentication, authorization, OAuth, and JWT.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on API security experience with technologies such as WAFs, API gateways, API security platforms, SIEM, Burp Suite, or similar tools.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience investigating common API threats, including account abuse, authorization flaws, injection, data exposure, and business-logic attacks.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with SIEM, SOAR, XDR, security automation, and large-scale data analysis.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience deploying or maintaining automation, AI-assisted, or agentic AI workflows.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EScripting experience, preferably with Python or SQL.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to lead complex investigations and operate effectively in high-pressure environments.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFluent English.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWillingness to participate in a rotating on-call schedule.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience in automotive, mobility, IoT, cloud security, mobile application security, or managed security services is preferred.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003EUpstream is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, veteran status, or any other characteristic protected by applicable law.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"vehicle-api-security-at-upstream-9917ab479580"},"url":"https://gurify.com/job/vehicle-api-security-at-upstream-9917ab479580","datePosted":"2026-11-04","validThrough":"2026-12-28T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Upstream","sameAs":"https://www.comeet.com/jobs/upstream"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"IL","addressLocality":"Herzliya"}},"employmentType":"FULL_TIME"} ``` ```json {"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Israel","item":"https://gurify.com/jobs/israel"},{"@type":"ListItem","position":3,"name":"Vehicle \u0026 API Security","item":"https://gurify.com/job/vehicle-api-security-at-upstream-9917ab479580"}]} ```