Devsecops Engineer
תיאור המשרה
A global enterprise technology company engineering mission-critical, high-performance data storage platforms and resilient infrastructure solutions for Fortune 500 enterprises and global service providers.
Operating at the core of massive-scale enterprise architectures, the company's platforms are engineered to deliver unmatched reliability, continuous availability, and enterprise-grade cyber resilience against sophisticated threats.
Combining decades of commercial stability and extensive global market reach with cutting-edge cloud-native architectures, the company cultivates a world-class engineering environment tackling deep infrastructure security challenges at petabyte scale.
Operating with modern, flexible workplace policies.
Role Description-
- Serving as a Senior DevSecOps / Cloud Security Infrastructure Engineer, acting as the primary technical authority for infrastructure security, secure cloud architectures, and regulatory governance.
- Leading rigorous technical security audits and compliance frameworks, ensuring continuous alignment with strict compliance benchmarks and generating audit-ready technical documentation.
- Driving infrastructure hardening automation, authoring and enforcing baseline policies for Machine Images (CIS Benchmarks), container registries, and production Kubernetes environments.
- Designing zero-trust hybrid cloud topologies handling highly confidential data, incorporating advanced network segmentation and declarative Infrastructure as Code (IaC) workflows.
- Embedding and automating application and pipeline security scanning engines (SAST, SCA, and DAST) across modern CI/CD pipelines, centralizing vulnerability telemetry and reporting.
- Architecting centralized enterprise logging, anomaly detection, continuous monitoring, and automated configuration compliance auditing.
- Serving as the principal technical escalation focal point for infrastructure security incidents, engineering automated incident response playbooks for rapid threat mitigation.
- Mentoring and upskilling DevOps and core R&D teams on cloud infrastructure hardening, secure coding standards, and threat modeling.
Requirements-
- Proven professional experience as a Senior DevSecOps Engineer, Cloud Security Engineer, or Security Infrastructure Engineer – Mandatory
- Deep, hands-on practical expertise securing Public Cloud environments (AWS strongly preferred) and container orchestration platforms (Kubernetes / K8s – Mandatory)
- Significant practical track record with Infrastructure as Code (IaC, e.g., Terraform) and modern declarative GitOps / Continuous Delivery methodologies – Mandatory
- Proven background navigating and complying with stringent security standards, government regulations, or protected data frameworks (e.g., NIST, FedRAMP, CIS Benchmarks, SOC 2, or ISO 27001 – Mandatory)
- Solid hands-on experience architecting and deploying large-scale Enterprise Logging, observability, and automated configuration compliance systems – Mandatory
- High degree of technical leadership, analytical troubleshooting capabilities, and fluent communication in English (written and verbal) – Mandatory
מתעניינים במשרה הזו?