דרושים » מחשבים ורשתות » Application Security Engineer - AI & Product Security

We are seeking a talented Senior DevSecOps Engineer / Security Architect to act as the primary security owner and focal point for the Velocity R&D organization. The ideal candidate will possess a background in IT and security platforms, strong coding skills, the ability to independently learn new technologies, an unwavering commitment to quality, a collaborative work ethic, and a profound passion for securing complex infrastructures.

As a SecOps Engineer, you will help protect our companys cloud environments, products, corporate systems, and sensitive healthcare data by investigating SIEM alerts, supporting incident response, and improving the quality of security monitoring and operations.
This is a hands-on security operations role for someone who can analyze security signals, understand real risk, communicate clearly, and help the organization detect, investigate, and respond quickly and effectively to security events.
You will work closely with real production environments, where accurate investigation, clear documentation, and practical escalation are critical to protecting sensitive healthcare data, customer trust, and the reliability of our companys clinical AI platform.
Responsibilities
Own the end-to-end investigation of SIEM alerts across cloud, product, identity, endpoint, and SaaS environments: analyze the relevant evidence, separate false positives from real threats, and prioritize cases based on risk and impact.
Escalate high-risk findings with a clear summary of what happened, what is affected, why it matters, and what actions are required.
Support incident response by collecting evidence, assisting with containment, tracking remediation, and maintaining clear investigation records for internal reviews, compliance needs, and post-incident learning.
Improve SIEM rules, dashboards, alert logic, playbooks, telemetry coverage, and detection quality to reduce noise and strengthen security monitoring.
Work with Security, IT, DevOps, R&D, Product Security, and Compliance teams to resolve issues and improve security operations.

We are growing and are looking for DevSecops to join our mission to increase access to life-saving treatments.

The Role:

Collaboration & Enablement

Act as a security advisor to development teams.

Collaborate cross-functionally to prioritize and address security topics.

Communicate risk, projects and mitigation strategies clearly and effectively.

Security in Dev & CI/CD

Design, implement, and maintain secure DevOps practices across the SDLC.

Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines.

Guide developers and DevOps teams on secure coding, vulnerability management, and remediation.

Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models.

AI Security & Governance

Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.)

least-privilege identities, admin console + MDM policy enforcement, agent access scoping.

Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise).

Partner with engineering on secure AI tool adoption and usage governance.

Automation & Monitoring

Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle.

Build and operate monitoring and alerting systems to ensure visibility.

Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise (e.g., cutting CI/CD and internal telemetry noise while preserving high-signal events).

Define alerting rules and dashboards to proactively identify suspicious activity.

Were looking for a DevSecOps Manager to lead our Israel-based DevSecOps team and own the security posture of our cloud infrastructure. Youll inherit a strong, established team of DevOps and DevSecOps engineers with meaningful ownership and a mature security program.
This is a hands-on leadership role that combines people management, technical depth, and architectural influence. Youll define the cloud security roadmap, remain close to the code and systems, and partner with Product Security, R&D, and Cloud Engineering to make security part of the platform by default.
Youll own:
The security posture of our multi-cloud infrastructure across AWS, Azure, and GCP.
Identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management.
Security controls embedded directly into the cloud platform, enabling R&D teams to build and operate securely by default.
Developer toolchain security, including CI/CD pipelines, software supply chain risks, and developer-facing guardrails.
The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.
The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers.
Teams roadmap, priorities, and quarterly planning in alignment with Cloud Engineering and the broader Security organization.
The teams role as the primary cloud security partner for Product Security, R&D, and Cloud Engineering.
Clear security standards, ownership boundaries, and operating practices across the cloud platform.
Youll solve:
Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.
Gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management.
Security risks within Kubernetes, including RBAC, pod security, network policies, and runtime protection.
Risks across GitHub, CI/CD pipelines, third-party dependencies, and the software supply chain.
Friction between strong security controls and the speed, usability, and autonomy R&D teams need.
Repetitive security work by turning manual controls into automated, reusable platform capabilities.
Cross-functional challenges that require alignment between Cloud Engineering, Product Security, R&D, and compliance stakeholders.
Emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remediation through completion.

we are looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them.
You will strengthen threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster.
This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure corporate and cloud environments.
You will also help shape how secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution-and want the autonomy and cross-functional access to make security improvements stick-this role is built for you.

At UVeye, we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we pioneered the world's first fully automated suite of AI-powered vehicle inspection systems, combining computer vision, machine learning, and generative AI.
With over $380M in funding and strategic partnerships with Toyota, Amazon, General Motors, JLR, Volvo, and Hertz, our technology is deployed across manufacturing plants, dealerships, wholesale auctions, fleets, and seaports worldwide. Named one of Fast Company's Most Innovative Companies of 2026, our 300+ global employees are solutions-oriented, accountable, and driven by one shared goal: making roads safer for everyone.
We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.
?A day in the life and how you’ll make an impact: Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools. Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows. Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring. Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats. Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization. Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc’) to identify requirements and prioritize security needs. Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration. Perform or manage penetration testing initiatives to identify security weaknesses.

We're looking for a Security Operations (SecOps) specialist to take ownership of our security infrastructure and operations as we scale. In this hands-on, high-impact role, youll play a crucial role in managing the infrastructure, services and service providers that help keep secure from outside attacks and insider threats, along with managing our information compliance programs.
Responsibilities:
Support and lead our security programs, both internal and with 3rd party vendors.
Lead incident response simulations and continuous vulnerability remediation efforts, optimizing our observability and alerting frameworks.
Support the design and maintenance of resilient, scalable cloud infrastructure, ensuring security is baked into the foundation.
Work closely with company leadership to ensure adoption of security best practices.
Work closely with R&D teams to help them shift security testing left into the early phases of development.
Monitor, detect, and respond to security alerts and infrastructure anomalies, optimizing our logging, tracing, and alerting frameworks.
Conduct regular reviews of security tools and infrastructure such as endpoint security, malware detection, firewall logs, and the like.
Collaborate with our CISO to implement and automate controls supporting fintech/insurtech compliance and data privacy standards (PII protection, SOC2).