V
Senior DevSecOps Engineer
ГибридПолная занятостьDevOps & SREHealthcare Technology
Secure development and cloud operations for a healthcare technology platform. Work with engineering teams to strengthen CI/CD, govern AI coding tools, and improve security monitoring. The Tel Aviv team works in a flexible hybrid model.
Обязанности
- Advise development teams on security and coordinate security priorities and remediation
- Design and maintain secure DevOps practices throughout the software development lifecycle
- Integrate security tools into CI/CD pipelines and guide teams on secure coding and vulnerability remediation
- Review and harden CI/CD architecture, including webhook verification and protection against SSRF and replay attacks
- Govern AI coding tools through least-privilege identities, access controls, and MDM policies
- Assess AI and LLM supply-chain risks and support secure adoption of AI tools
- Automate security testing and vulnerability scanning
- Operate security monitoring and alerting, manage the SIEM platform, and tune telemetry for high-signal events
- Define alert rules and dashboards to identify suspicious activity
Требования
- At least 5 years of DevOps, DevSecOps, or SecOps experience
- Strong CI/CD security experience, including SAST, DAST, SCA, and secrets scanning
- Proficiency with AWS networking, IAM, and security services
- Hands-on experience with Terraform or similar infrastructure-as-code tools
- Familiarity with security frameworks and tooling such as OWASP and CIS Benchmarks
- Experience integrating and managing SIEM tools
- Understanding of Docker and Kubernetes security
- Experience securing AI/LLM tools and agent-based development workflows
- Experience with just-in-time and least-privilege access for cloud data stores
Условия и преимущества
- Competitive cash compensation and equity
- Dental insurance
- Performance-based bonuses
- Cibus meal allowance and office meals