לוח משרות דרושים DevSecOps Engineer, לחיפוש זה נמצאו 30 משרות

We are looking for an experienced DevSecOps Engineer to join our DevOps core platform team and help strengthen the security of our cloud-native infrastructure and development pipelines.
You will work closely with our CISO, DevOps team, and developers to integrate security practices across the entire software development lifecycle (SDLC), helping ensure a secure, scalable, and resilient platform across cloud and on-prem environments.
Responsibilities
Integrate security practices into CI/CD pipelines and across the SDLC
Design and implement automated security solutions (vulnerability scanning, compliance checks, threat detection)
Build and maintain Infrastructure as Code (IaC) for secure, scalable cloud environments (Terraform, Ansible)
Automate security controls and operational processes across cloud and Kubernetes environments
Design, implement, and optimize CI/CD pipelines with a focus on security, reliability, and performance
Secure cloud and on-prem environments (IAM, network controls, encryption best practices)
Manage and harden Kubernetes workloads, including configuration, access control, and image security
Collaborate with DevOps, developers, and security teams to improve system reliability and overall security posture
Conduct security assessments, penetration testing, and compliance audits
Monitor threats, respond to incidents, and improve incident response processes
Promote DevSecOps culture by guiding teams on secure coding, infrastructure, and deployment practices
Enhance observability by integrating monitoring, logging, and SIEM solutions

Artlist is a leading creative technology company on a mission to empower creators and brands to bring their vision to life with video. Offering cutting-edge AI tools and models for image, video, and voiceover creation, alongside high-quality creative assets and powerful editing tools, Artlist enables creators to stay on trend and achieve their creative goals. Trusted by over 30 million creators worldwide and top brands including Google, Amazon, Microsoft, and Versace, Artlist provides a seamless, subscription-based platform with a global license, giving creators everything they need to produce professional video content efficiently. For more information, visit artlist.io About the role We're looking for an AI Application Security Engineer with a strong Application Security foundation and a hands-on engineering mindset. You'll work directly with Product and R&D to design secure applications, build security automation, and embed practical security controls into our products and development workflows. As part of a small security team, you'll take ownership across application security, AI security, cloud infrastructure, and security tooling. This is an opportunity to lead projects independently, make technical decisions, and help shape how security gets done at Artlist. Responsibilities
* Lead threat modeling and secure design reviews from the design stage, working directly with Product and R&D.
* Embed security into CI/CD pipelines, products, and technology environments through security testing, tooling, and automated controls.
* Define and implement guardrails for access control, data exposure, injection risks, and rate limiting.
* Build scripts and automation to improve security workflows and reduce manual work.
* Secure cloud infrastructure across AWS, GCP, and Azure.
* Own WAF and site protection, including custom rules, rate limiting, bot mitigation, and DDoS protection.
* Lead detection, response, and incident handling across endpoint, cloud, and application layers.
* Integrate and maintain security tools and controls, including SAST, cloud security platforms, WAF, and EDR, and coordinate penetration testing and remediation.
* Support SOC 2 and ISO 27001 requirements.

Required SecOps Specialist
About the team:
What will your job look like:
Develop, test, tune, and maintain SIEM detection rules, correlation logic, dashboards, and alert thresholds.
Integrate security tools and services using APIs, webhooks, scripts, and automation platforms.
Analyze logs and telemetry to identify suspicious or malicious activity, assess impact, and determine the appropriate response.
Monitor, triage, and investigate security alerts from SIEM, EDR, cloud, identity, email, and network-security platforms.
Build and enhance SOAR playbooks to automate alert enrichment, investigation, case management, notifications, and approved containment actions.
Validate SIEM data coverage, log quality, parsing, ingestion health, and retention across security-relevant systems.
Collaborate with IT, cloud, infrastructure, identity, network, and engineering teams to contain incidents and drive remediation.
Create and maintain incident-response runbooks, investigation guides, detection documentation, and automation procedures.
Translate investigation findings and post-incident lessons learned into improved detections, automation workflows, and security controls.

We are looking for a DevSecOps Engineer to join our amazing Security Cloud Engineering team. We are developing our revolutionary runtime engine and transforming the online experience for hundreds of millions of users. We are looking for people who are passionate about leading technology to the extreme.
If you are striving to develop an innovative product, make an impact, and work with the industrys brightest talent as part of one of the fastest-growing and successful startups around - this is where you want to be!
What You'll Own:
Promote a strong security culture using security-driven awareness and best practices for continual security improvement across the business.
Ensure that security countermeasures, mitigations, and containment strategies are implemented on both infrastructure and applications.
Leverage AI within the DevOps and DevSecOps landscapes to maximize security ROI while driving innovation across the global company.
Secure and optimize our cloud services, to ensure robust security and compliance.
Establish and enforce DevSecOps best practices within our CI/CD pipelines and automation processes.
Automate the deployment of security controls and processes to ensure consistent and scalable protection for all security layers.
Develop and implement strategies for proactive threat detection and risk mitigation.
Collaborate with Security, Engineering, and DevOps teams to define and execute security strategy.

we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we pioneered the world's first fully automated suite of AI-powered vehicle inspection systems, combining computer vision, Machine Learning, and generative AI.
Our technology is deployed across manufacturing plants, dealerships, wholesale auctions, fleets, and seaports worldwide. Named one of Fast Company's Most Innovative Companies of 2026, our 300+ global employees are solutions-oriented, accountable, and driven by one shared goal: making roads safer for everyone.
We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.
A day in the life and how youll make an impact:
* Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools.
* Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows.
* Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring.
* Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats.
* Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization.
* Work closely with stakeholders ( CISO, COO, system Architects, DevOps, IT, Finance, HR, etc) to identify requirements and prioritize security needs.
* Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration.
* Perform or manage penetration testing initiatives to identify security weaknesses.

We're hiring a Detection Engineering & Response Lead to build and run our D&R capability from the ground up. You'll own the detection engineering, threat intelligence, and incident response functions across Cloud - and lead a small, growing team of analysts and engineers.

This is a lead engineering role responsible for detection development, handling the most complex security incidents, forensics, and shaping the D&R strategy.

What youll do
Lead detection development: maintain low false-positive and false-negative rates. Work closely with alerts consumers (20+ teams) to keep noise low and signal high, ensuring they can act quickly without missing genuine threats.

Architect and operate detection coverage across our cloud and bare-metal environments

Build and extend our internal D&R tools and pipelines - onboard new logs, build and automate response runbooks.

Integrate threat intelligence into detection logic and IR playbooks, tracking adversary TTPs relevant to Cloud infrastructure

Lead incident response end-to-end: scoping, containment, root cause analysis, post-incident reviews and controlling critical action items are closed to prevent future possible incidents.

Partner with Compliance and Engineering teams to detect real threats while meeting the needs of both engineers and regulators.

Define and report on D&R metrics: MTTD, MTTR, detection coverage, false positive rates, etc.

Build and maintain Security Incident Response program: people, processes, tools.

Build tools, runbooks, and on-call processes that scale as the company grows.

We are seeking a skilled and experienced InfoSec & SecOps Lead to join our company (Formerly ActiveFence) CISO team. The ideal candidate will be responsible for driving the security initiatives.
Responsibilities:
Maintain holistically security corporate architecture and Hardening, including network, systems, applications. Evaluate and implement security remediations to enhance the organization security posture.
Corporate Security: Oversee security measures, including access control, surveillance, and emergency response planning. Manage relationships with external security vendors related to TPRM and IR.
Experience among others on SSPM/SaaS security, IDP, SIEM/SOC, Including conducting threat modeling exercises to identify potential vulnerabilities and risks where required.
Security Operations: Oversee the day-to-day security operations, including monitoring, incident response, Analyze security logs and alerts to identify & respond to security incidents. Conduct regular security assessments and manage the remediations program. Develop and maintain an effective incident response plan.Conduct post-incident reviews to identify lessons learned and improve future response efforts.
Experience with Vulnerability Management: Identify, prioritize vulnerabilities. Monitor and track vulnerability remediation efforts.
Collaborate with other teams within the organization to ensure the overall security posture is maintained. This may include working with IT, Devops, R&D, G&A to implement security policies and technical security procedures. Including all business units, educate employees on security best practices.
AI Governance: Partner with Business Units to create safe-use guardrails for AI. Conduct security reviews for internal AI implementations, ensuring adherence to frameworks like the OWASP Top 10 for LLMs.
Data Driven Metrics: Develop automated dashboards that track real-time security health, focusing on MTTR and reducing manual "toil" for the Security.

we are looking for a hands-on Security Operations Engineer to join our IT and Cybersecurity team.

You will take ownership of implementing, configuring, and operating security tools and controls across the organization. The role combines security operations, incident response, technical policy implementation, and compliance support.



Responsibilities
Implement, configure, and maintain security systems and policies.
Monitor and investigate security alerts and coordinate remediation.
Manage endpoint, identity, device, network, and cloud security controls.
Improve security coverage across endpoints, servers, users, and corporate systems.
Manage vulnerabilities and track remediation through completion.
Develop and maintain incident-response procedures and playbooks.
Translate security policies and regulatory requirements into technical controls.
Support security audits, evidence collection, risk assessments, and compliance activities.
Work closely with IT and R&D teams, business stakeholders, security vendors, and external providers.
Maintain security documentation, operational procedures, and management reports.

Great IT and security work means nobody notices the bugs because you already squashed them. From cloud engineers to IT operations managers, our team combines technical expertise with a deep respect for what's at stake. So if you're proactive and precise under pressure, the company Cyber, IT and MIS team might be the right place for you.
Join our Cloud Engineering department as a SecOps Engineer and play a critical role in safeguarding our complex, multi-cloud environment. You'll be essential in maintaining our incident response and security Service Level Agreements (SLAs), preventing team burnout, and ensuring our security posture remains robust in a dynamic, fast-paced setting.
What am I going to do?
Champion the monitoring and initial triage of security alerts, meticulously investigating potential threats to uphold our SLA targets.
Own and execute essential daily SecOps tasks, ensuring seamless operations and preventing critical backlogs.
Serve as a key security liaison for Cloud Engineering peers, facilitating project momentum without overburdening senior staff.
Configure, fine-tune, and optimize a suite of security tools, maximizing visibility and effectiveness across our cloud infrastructure.
Dive deep into security events and alerts, identifying vulnerabilities and prioritizing remediation actions with precision.
Develop and implement automation for routine security operations, including vulnerability scanning, incident triage, and configuration management, to enhance efficiency.

we are looking for a SecOps Engineer.
As a SecOps Engineer, you'll be the operational nerve center of Guardicore's R&D Security Squad, the team protecting the platform we build. Embedded with the engineers creating Guardicore, you'll drive real-time detection, response, and full-lifecycle vulnerability management, turning every finding into measurable risk reduction. If you thrive on hunting threats, reducing signal-to-noise, and driving remediation to closure, this is your arena.
As a SecOps Engineer, you will be responsible for:
Ingesting and analyzing vulnerabilities from tools such as Wiz, Vulcan, Grype, and Tenable, while quantifying impact by exploitability and reachability.
Building AI automations that streamline the full security operations loop. Auto-triaging and containing SIEM alerts by prioritizing vulnerability data across tools.
Engineering signal quality by designing correlation searches and tuning detection rules. Automating SOAR playbooks to cut false positives and shrink MTTR.
Driving remediation governance by generating tickets, assigning owners, enforcing deadlines, verifying fixes through rescans, and collecting evidence comprehensively.
Building visibility and KPIs through live dashboards for monitoring remediation speed, SLA compliance, MTTR/MTTD, patch age, and risk trends
Running detection and response, monitoring SIEM telemetry, triaging alerts, mitigating threats, conducting root-cause analysis, aligning TTPs with MITRE ATT&CK, recommending safeguards.

At Infinidat, a Lenovo company, we help enterprises and service providers empower their data-driven competitive advantage at scale. As our Senior DevSecOps Engineer, you will be the foundational security expert within the DevOps team. Following a recent corporate transition, our infrastructure is moving into a highly regulated environment subject to strict, ongoing security compliance frameworks and external audits. You will lead the charge in designing, securing, and continuously adapting our infrastructure to meet these evolving enterprise and regulatory standards. Your immediate priority will be securing the environments where protected data is stored across public cloud infrastructure, on-premise virtual environments, and containerized clusters. Beyond immediate compliance, you will architect our secure cloud posture from the ground up, embed automated security guards seamlessly into our deployment pipelines, and mentor the broader engineering team on modern security practices.

Responsibilities:

* Compliance & Audit Leadership: Serve as the primary technical lead for rigorous security audits, ensuring continuous compliance, rapid adaptation to new security requirements, and production of audit-ready documentation.
* Infrastructure Hardening & Governance: Own, scale, and maintain automated machine image hardening pipelines utilizing industry-standard security baselines (such as CIS benchmarks). Extend these frameworks to define and enforce strict security baselines across container clusters and image registries.
* Secure Architecture & Networking: Architect secure hybrid environments handling sensitive data, focusing on robust network segmentation, zero-trust principles, and secure infrastructure-as-code deployment methodologies.
* Application Security Integration: Manage and optimize the integration of automated security scanning tools (SAST, SCA, and DAST) into CI/CD pipelines. Ensure reliable capture, aggregation, and reporting of scan results to satisfy product governance and audit requirements.
* Threat Detection & Observability: Implement and manage anomaly detection tools, automated access log review mechanisms, and comprehensive centralized auditing and logging solutions.
* Security Incident Response: Serve as the primary technical escalation point for infrastructure security incidents, creating automated playbooks for rapid triage and mitigation.
* Mentorship: Act as the security subject matter expert, identifying technical gaps and upskilling the DevOps and development teams in secure infrastructure concepts.

Were looking for a sharp, hands-on and innovative Platform / DevOps Engineer who loves turning cloud chaos into clean, scalable systems. If rebuilding core cloud flows from scratch, structuring environments, and optimizing costs excites you - keep reading.

We're a fast-growing startup backed by top-tier investors, building powerful technology for leading clients. We move fast, ship continuously, and operate in production at scale - including dedicated, per-client installations each running a suite of interconnected services. Now we're looking for someone to take ownership of our infrastructure layer and elevate it to the next level.

This is not a maintenance role. This is a builder role.
You Will

Design and implement scalable CI/CD flows
Design and operate a fleet of independent per-client deployments - version tracking, controlled rollouts, drift detection across environments
Standardize and restructure environment & configuration management
Introduce and enforce IaC
Increase deployment reliability and rollback safety
Build the tooling and processes that let us answer, at any moment: what is running on each client, and is it healthy?
Enable developers to ship faster and safer
Help define long-term infrastructure standards

we are on a mission to create public transportation systems that provide far greater access to jobs, healthcare, and education. Our platform serves as the technology backbone for modern transit networks, transforming antiquated and siloed public transportation systems into smart, data-driven, and efficient digital networks. With hundreds of agency partners around the world, we are recognized as the leading transportation technology and service provider globally.
As a DevSecOps Engineer at our company, you will play a key role in securing the cloud-native infrastructure that powers one of the world's leading transportation technology platforms. You will have a strong focus on AWS cloud security, security infrastructure, automation, SecOps capabilities, and the secure adoption of AI technologies across the company. In this role, youll work closely with Engineering, Platform, IT, SOC, Application Security, and business teams to strengthen cloud security, automate security processes, and help embed modern security practices across our companys technology ecosystem.
About the Role:
Define, implement, and improve cloud security infrastructure solutions across our companys AWS environment
Secure and optimize cloud services, infrastructure, and applications to support scalable and resilient systems
Automate security controls, operational workflows, and repeatable processes across cloud environments
Support AI Security initiatives, including secure AI adoption, AI-related risk mitigation, and protection of AI-enabled systems
Leverage AI-driven security technologies to improve detection, investigation, response, automation, and operational efficiency
Set up, customize, and maintain log management, orchestration, and response systems
Operate and improve SecOps infrastructure, tooling, and automation workflows
Work closely with SOC and Application Security teams to strengthen detection, response, application security coverage, and security processes
Collaborate with Platform, IT, Engineering, and business teams to implement scalable security solutions across the company
Support secure DevSecOps and CI/CD workflows through security checks, guardrails, and automation
Evaluate, deploy, maintain, and tune security products and cloud security tools
Promote a strong security culture through awareness, best practices, and continuous improvement across the business.

We are seeking an Incident Response Engineer to join the IR team. This technical role focuses on active investigation, threat mitigation, and the continuous improvement of the security organizations posture through detection engineering and automation development.
The successful candidate will be responsible for the full lifecycle of security incidents, from initial triage to recovery. Beyond reactive response, this role involves tuning SIEM correlation rules and developing SOAR workflows to increase operational efficiency.
What Youll Be Doing:
Incident Management: Execute the IR lifecycle (Triage, Containment, Eradication, Recovery) for complex security events.
Technical Investigation: Perform root cause analysis and forensic examination across Windows, Mac, and Linux environments.
Detection & Tuning: Collaborate with the IR team to create, test, and tune SIEM rules and dashboards to reduce false positives and improve visibility.
Automation Engineering: Build and refine SOAR playbooks and automated response actions to streamline repetitive investigation tasks.
Cloud Security: Monitor and mitigate cloud-native threats across Azure, AWS, and GCP environments.