לוח משרות דרושים DevSecOps Engineer משרה מלאה, לחיפוש זה נמצאו 27 משרות

we are looking for a SecOps Engineer.
As a SecOps Engineer, you'll be the operational nerve center of Guardicore's R&D Security Squad, the team protecting the platform we build. Embedded with the engineers creating Guardicore, you'll drive real-time detection, response, and full-lifecycle vulnerability management, turning every finding into measurable risk reduction. If you thrive on hunting threats, reducing signal-to-noise, and driving remediation to closure, this is your arena.
As a SecOps Engineer, you will be responsible for:
Ingesting and analyzing vulnerabilities from tools such as Wiz, Vulcan, Grype, and Tenable, while quantifying impact by exploitability and reachability.
Building AI automations that streamline the full security operations loop. Auto-triaging and containing SIEM alerts by prioritizing vulnerability data across tools.
Engineering signal quality by designing correlation searches and tuning detection rules. Automating SOAR playbooks to cut false positives and shrink MTTR.
Driving remediation governance by generating tickets, assigning owners, enforcing deadlines, verifying fixes through rescans, and collecting evidence comprehensively.
Building visibility and KPIs through live dashboards for monitoring remediation speed, SLA compliance, MTTR/MTTD, patch age, and risk trends
Running detection and response, monitoring SIEM telemetry, triaging alerts, mitigating threats, conducting root-cause analysis, aligning TTPs with MITRE ATT&CK, recommending safeguards.

At Infinidat, a Lenovo company, we help enterprises and service providers empower their data-driven competitive advantage at scale. As our Senior DevSecOps Engineer, you will be the foundational security expert within the DevOps team. Following a recent corporate transition, our infrastructure is moving into a highly regulated environment subject to strict, ongoing security compliance frameworks and external audits. You will lead the charge in designing, securing, and continuously adapting our infrastructure to meet these evolving enterprise and regulatory standards. Your immediate priority will be securing the environments where protected data is stored across public cloud infrastructure, on-premise virtual environments, and containerized clusters. Beyond immediate compliance, you will architect our secure cloud posture from the ground up, embed automated security guards seamlessly into our deployment pipelines, and mentor the broader engineering team on modern security practices.

Responsibilities:

* Compliance & Audit Leadership: Serve as the primary technical lead for rigorous security audits, ensuring continuous compliance, rapid adaptation to new security requirements, and production of audit-ready documentation.
* Infrastructure Hardening & Governance: Own, scale, and maintain automated machine image hardening pipelines utilizing industry-standard security baselines (such as CIS benchmarks). Extend these frameworks to define and enforce strict security baselines across container clusters and image registries.
* Secure Architecture & Networking: Architect secure hybrid environments handling sensitive data, focusing on robust network segmentation, zero-trust principles, and secure infrastructure-as-code deployment methodologies.
* Application Security Integration: Manage and optimize the integration of automated security scanning tools (SAST, SCA, and DAST) into CI/CD pipelines. Ensure reliable capture, aggregation, and reporting of scan results to satisfy product governance and audit requirements.
* Threat Detection & Observability: Implement and manage anomaly detection tools, automated access log review mechanisms, and comprehensive centralized auditing and logging solutions.
* Security Incident Response: Serve as the primary technical escalation point for infrastructure security incidents, creating automated playbooks for rapid triage and mitigation.
* Mentorship: Act as the security subject matter expert, identifying technical gaps and upskilling the DevOps and development teams in secure infrastructure concepts.