לוח משרות דרושים DevSecOps Engineer

we are looking for a DevSecOps Engineer with deep experience in cloud-based applications and infrastructure.
WHAT YOULL DO

Plan detection use cases and delivering detection capabilities to identify attack tactics, techniques, and procedures
Play a key role in the security incident response process
Develop, promote, and monitor the adoption of sound cloud security practices
Take ownership of vulnerability management and patching policies
Identify and help mitigating security issues, misconfigurations, and vulnerabilities related to the Wiz cloud, container, and Kubernetes infrastructure
Collaborate with engineering, DevOps, and IT teams to ensure security is at the heart of what we do
Lead threat modeling exercises around cloud-native, SaaS, and cloud-first technologies
Mentor and provide technical leadership to other members of the Security team

CodeValue is a leading software company delivering a full spectrum of software services that enable customers to focus on their core business activities. At CodeValue, we leverage the Web by administering cross-platform development. We strive to build and maintain our top-notch expertise in this extremely dynamic and versatile field. We are looking for an DevSecOps Engineer to lead the security processes on top of the company's CI/CD processes and work closely with development and DevOps teams to ensure all processes meet security requirements and enhance existing processes:
* Develop and implement automated CI/CD processes while incorporating best practices for software security.
* Collaborate closely with development and infrastructure teams to identify and remediate security vulnerabilities in code and infrastructure.
* Establish and manage tools for identifying and monitoring information security.
* Develop strategies for identity and access management.
* Provide training and raise awareness of security among development teams.
* Manage and implement response plans for security incidents.

We are Tailor Brands . We built a platform that builds businesses. From launching and managing to growing a business, Tailor Brands is the all-in-one solution that empowers any business owner. Our platform services over 40 million small businesses Our "Guidance Engine" assesses each new business introduced to our platform and devises a tailored plan that allows you to manage all your business needs from a single dashboard. Through our business-building platform, we’re turning the process of starting, managing, and growing a business into a better experience; we’re simplifying the business journey. At Tailor Brands, we believe in more than just handing you another tool; we are dedicated to teaching you the art of building a business About the Role As a DevOps Engineer, your work will have a direct impact on development processes across the entire R&D organization. You will help lead our Infrastructure, SRE, CI/CD, Security, and Scale/Performance efforts. You will take a leading role in defining and designing these systems, all to enable our Fullstack and Data teams to be as independent and successful as possible. At Tailor Brands, the DevOps team doesn't manage all of our services on their own – they build the tools and guidance so our Development teams can own them end-to-end.
* Take an active role in the DevOps engineering team that focuses on all aspects of CI/CD infrastructure, GitOps full automation, and operational metrics to ensure the highest productivity for our Cloud engineering infrastructure
* Lead the design and delivery of software and infrastructure to improve the reliability, scalability, and efficiency of our services.
* Design, develop, and maintain our core platform and CI/CD infrastructure and our development environments
* Manage cloud security principles and define best practices
* Build, configure, and tune highly available and fault-tolerant Container Clusters and K8s infrastructures
* Take an active role in defining the team’s roadmap
* Develop automation to support our orchestration and application deployment

A calling and messaging app that connects people worldwide, providing high-quality audio and video calls, messaging, and more through a free and secure platform. With over 200 million active users, working at offers a unique opportunity to influence global communication.

We are seeking a highly motivated SecOps Engineer with a focus on cloud security to join our expanding Global Security team. As a key member, you will play a critical role in securing our multi-cloud environment and protecting our network infrastructure from evolving cyber threats.

Responsibilities
Designing and Defending:

Build and maintain a SIEM-NG (Security Information and Event Management Next Generation) system for cloud-based networks
Design and implement security structures, tools, and processes to safeguard cloud environments.
Stay updated on emerging technologies and security trends to enhance defense mechanisms.
Configuration and Maintenance:

Architect and deploy secure Intranets, WANs, and LANs within cloud platforms (e.g., AWS, Azure, GCP).
Ensure continuous functionality of network systems and promptly address any security incidents or vulnerabilities.
Deploy and update security software to mitigate risks and protect cloud resources.
Testing and Remediation:

Conduct regular security assessments and vulnerability scans to identify potential threats.
Implement security testing procedures for new software acquisitions and existing systems.
Monitor networks for intrusions and swiftly respond to security incidents.
Policy Development and Compliance:

Develop security protocols and policies to ensure compliance with regulatory standards.
Establish security best practices for cloud environments and communicate guidelines to the DevOps operations team.
Conduct security training and awareness programs for employees on cloud security practices.
Investigation and Reporting:

Conduct thorough root cause analysis in the event of security breaches or incidents.
Prepare detailed postmortem reports to share findings and recommendations with key stakeholders.
Collaborate with cross-functional teams to implement security improvements and prevent future breaches.

We are looking for an DevSecOps Engineer to lead the security processes on top of the company's CI/CD processes and work closely with development and DevOps teams to ensure all processes meet security requirements and enhance existing processes:
Develop and implement automated CI/CD processes while incorporating best practices for software security.
Collaborate closely with development and infrastructure teams to identify and remediate security vulnerabilities in code and infrastructure.
Establish and manage tools for identifying and monitoring information security.
Develop strategies for identity and access management.
Provide training and raise awareness of security among development teams.
Manage and implement response plans for security incidents.

we are looking for a DevSecOps Expert to join the Remediation and Recovery team that is part of our Enterprise Security group. As a DevSecOps Engineer, you will be responsible for developing, building, and deploying automation tools to expedite remediation and recovery efforts in response to large-scale incidents in complex client environments.

The ideal candidate will possess a background in IT and security platforms, coding skills, the ability to independently learn new technologies, an unwavering commitment to quality, a collaborative work ethic, and a profound passion for assisting clients during crises.

Responsibilities:

Support global organizations with incident response, containment, and remediation engagements.
Develop and maintain tools and custom code for remediation and recovery activities.
Assist in scaling up data decryption tools during ransomware recovery engagements.
Guide clients with hands-on support for architecture enhancements and optimization of their cloud infrastructure.
Design and assist clients in rapid architecture enhancements to defend against identified threat actors tools, tactics, and procedures in the cloud.
Implement automated system scans and code verification to ensure security.
Deploy automated security measures for consistent and efficient protection.

Were looking for an experienced DevSecOps Engineer to join our team and verify that our cloud environments and CI/CD flows are secured according to best practices.
As a SecDevOps Engineer, youll lead our security efforts around our dynamic and fast-paced production environments. Youll define and create operation tools and processes, and play a hands-on role in directly impacting work across all R&D flows.
Responsibilities:
Secure and monitor live production environments.
Perform security drill-downs and investigations.
Act as a subject matter expert and manage security incidents across all organizational environments.
Implement monitoring and alerting procedures and mechanisms.
Design and implement automation processes for security monitoring and incident response-related flows.
Design, implement, and develop security solutions according to R&D/production needs.
Work with our R&D teams and architects to design, enhance, and implement best-of-breed security topologies.
Identify new security threats, and trends by conducting continuous monitoring, vulnerability assessments, and log analyses.
Conduct regular internal and external security assessments, vulnerability scans, and penetration testing of systems and applications to identify and remediate security weaknesses and threats.
Manage our bug bounty program.
Maintain documentation of security processes, procedures, and configurations.
Generate regular reports on security metrics, compliance, and incident response activities for management and stakeholders.

We are seeking an experienced SecOps Manager to lead our security operations team.
In this role, you will spearhead the oversight of all facets of our organization's security operations, encompassing incident response, threat monitoring, security tool administration, compliance, and fraud activities.
You will collaborate closely with cross-functional teams to ensure our security posture is robust and aligned with industry best practices and regulations.
Responsibilities:
Manage the security operations center (SOC), ensuring 24/7 monitoring and incident response (managing the SOC manager)
Develop and maintain security processes, playbooks, and standard operating procedures
Manage the development of a fraud protection tool
Administer and optimize security tools and technologies (SIEM, EDR, SOAR, etc.)
Lead incident response efforts, including triage, analysis, containment, and remediation
Collaborate with other teams (IT, DevOps, Risk & Compliance) on security initiatives
Conduct regular vulnerability assessments and penetration testing
Ensure compliance with banking security regulations and standards
Provide security training and awareness programs for employees
Build and manage a team of skilled security and fraud analysts and engineers