Cloud Security Lead (Cloud Security Architecture & Hardening)

Location: Tel Aviv, Israel; full-time onsite

Company

hirify.global develops an enterprise platform that unifies AI enablement, network access, data protection, identity, and endpoint control in a secure enterprise workspace.

What you will do

• Design and enforce security baselines, hardened configurations, and reference architectures across AWS, GCP, and Azure.
• Evaluate cloud services and establish secure deployment standards for IaaS, PaaS, serverless, Kubernetes, and containerized workloads.
• Build security-as-code, Infrastructure-as-Code security, policy-as-code, and CI/CD controls.
• Develop automation for detection, alerting, triage, and configuration integrity using cloud SDKs and APIs.
• Implement cloud-native monitoring and observability using services such as CloudTrail, GuardDuty, and Security Command Center.
• Investigate security events, create incident-response runbooks, improve architectures after incidents, and enable security best practices across product, engineering, and IT.

Requirements

• Deep expertise in secure cloud architecture, network segmentation, policy enforcement, and infrastructure hardening.
• Expert knowledge of cloud security, DevSecOps, Kubernetes and container security, IAM, and security baselines.
• Proficiency in Python, Bash, or PowerShell and extensive experience with IaC security and policy-as-code tools.
• Strong understanding of detection engineering, security operations, vulnerability management, and cloud attack techniques.
• 3+ years of hands-on experience with CSPM tools, cloud security monitoring, and SIEM solutions.
• Operations-focused mindset with an interest in resilient cloud infrastructure and continuous security improvement.

Nice to have

• Experience building or running purple-team activities, including cloud infrastructure penetration testing and design-flaw identification.

Culture & Benefits

• Work on a security-focused enterprise platform used by major organizations.
• Collaborate with product, engineering, and IT teams on security enablement and awareness.
• Contribute to a cloud security program focused on continuous operational excellence.