DevSecOps (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
DevSecOps (Cybersecurity): Embedding security across the software development lifecycle and automating security within CI/CD pipelines with an accent on application security tooling and runtime protection. Focus on designing secure SDLC processes, managing software supply chain risks, and securing AWS and Kubernetes infrastructure.
Location: Tel Aviv District, Israel
Company
is a pioneer in SASE, converging enterprise networking and security into a single centralized global cloud service.
What you will do
- Design and implement the Secure SDLC across R&D, embedding security controls from design to deployment.
- Build and maintain security automation in CI/CD pipelines using SAST, DAST, SCA, and secrets scanning.
- Own the vulnerability management program, including triage, prioritization, and remediation tracking.
- Manage software supply chain security, SBOM generation, and artifact integrity.
- Secure application infrastructure focusing on Docker, Kubernetes, and AWS cloud environments.
- Partner with developers to provide secure coding guidance, training, and threat modeling.
Requirements
- At least 3 years of experience in application security, DevSecOps, or a related security engineering role.
- Hands-on experience integrating security tools (SAST, DAST, SCA) into CI/CD pipelines.
- Proficiency in programming/scripting languages such as Python, Go, or Java.
- Practical experience securing AWS environments and containerized workloads (Docker, Kubernetes).
- Familiarity with microservices architectures and infrastructure-as-code (Terraform).
- Strong understanding of Secure SDLC principles and supply chain security.
Nice to have
- Experience with ASPM tools, policy-as-code (OPA, Kyverno), or threat modeling methodologies.
- Security certifications such as CKS, AWS Security Specialty, or OSCP.
- BSc in Computer Science.
- Experience working in Agile teams.
Culture & Benefits
- Opportunity to work at a fast-growing company in a cutting-edge product category (SASE).
- Environment focused on building a worldwide market leader in secure cloud platforms.
- Collaboration within high-impact R&D teams.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →