לוח משרות דרושים DevSecOps Engineer עבודה היברידית, לחיפוש זה נמצאו 3 משרות

We are growing and are looking for DevSecops to join our mission to increase access to life-saving treatments.

The Role:

Collaboration & Enablement

Act as a security advisor to development teams.

Collaborate cross-functionally to prioritize and address security topics.

Communicate risk, projects and mitigation strategies clearly and effectively.

Security in Dev & CI/CD

Design, implement, and maintain secure DevOps practices across the SDLC.

Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines.

Guide developers and DevOps teams on secure coding, vulnerability management, and remediation.

Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models.

AI Security & Governance

Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.)

least-privilege identities, admin console + MDM policy enforcement, agent access scoping.

Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise).

Partner with engineering on secure AI tool adoption and usage governance.

Automation & Monitoring

Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle.

Build and operate monitoring and alerting systems to ensure visibility.

Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise (e.g., cutting CI/CD and internal telemetry noise while preserving high-signal events).

Define alerting rules and dashboards to proactively identify suspicious activity.

Were looking for a DevSecOps Manager to lead our Israel-based DevSecOps team and own the security posture of our cloud infrastructure. Youll inherit a strong, established team of DevOps and DevSecOps engineers with meaningful ownership and a mature security program.
This is a hands-on leadership role that combines people management, technical depth, and architectural influence. Youll define the cloud security roadmap, remain close to the code and systems, and partner with Product Security, R&D, and Cloud Engineering to make security part of the platform by default.
Youll own:
The security posture of our multi-cloud infrastructure across AWS, Azure, and GCP.
Identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management.
Security controls embedded directly into the cloud platform, enabling R&D teams to build and operate securely by default.
Developer toolchain security, including CI/CD pipelines, software supply chain risks, and developer-facing guardrails.
The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.
The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers.
Teams roadmap, priorities, and quarterly planning in alignment with Cloud Engineering and the broader Security organization.
The teams role as the primary cloud security partner for Product Security, R&D, and Cloud Engineering.
Clear security standards, ownership boundaries, and operating practices across the cloud platform.
Youll solve:
Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.
Gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management.
Security risks within Kubernetes, including RBAC, pod security, network policies, and runtime protection.
Risks across GitHub, CI/CD pipelines, third-party dependencies, and the software supply chain.
Friction between strong security controls and the speed, usability, and autonomy R&D teams need.
Repetitive security work by turning manual controls into automated, reusable platform capabilities.
Cross-functional challenges that require alignment between Cloud Engineering, Product Security, R&D, and compliance stakeholders.
Emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remediation through completion.