DevSecOps Engineer

1w1 week ago

Cyolo

Ramat Gan, IL · Full-time · ILS 350,000 – ILS 550,000

About this role

At Cyolo, security is part of the product. We are looking for a motivated and results-driven DevSecOps Engineer to take ownership of securing our platform. Drive improvements across CI/CD pipelines and cloud infrastructure while strengthening Cyolo’s security posture.

Enable fast, safe delivery for customers by embedding security into code, pipelines, and infrastructure. Work closely with R&D teams to maintain high engineering velocity. Tackle high-scale security challenges with hands-on expertise.

Implement automations and improvements in security tooling daily. Review code, IaC, and architecture from a security perspective. Own IAM, vulnerability remediation, and penetration testing processes.

Support audits, enhance monitoring, and build incident response capabilities. Drive solutions that keep the platform safe and reliable. Strengthen overall security while enabling rapid development.

Requirements

5+ years of hands-on experience in DevOps, Application Security, and Infrastructure Security
Proven experience working on production SaaS systems
Strong software engineering skills with solid application security expertise
Strong hands-on experience securing cloud environments (AWS / GCP / Azure)
Practical experience with CI/CD, IaC, and DevOps tooling (GitHub Actions, Terraform, CloudFormation, etc.)
Hands-on experience with security tools such as CSPM, SAST, SCA, and secret scanning (Orca, Veracode, or similar)
Experience building automations and integrations around security tooling
Familiarity with security frameworks such as SOC 2

Responsibilities

Secure applications and cloud infrastructure end-to-end
Implement and operate application security controls across the SDLC
Build, integrate, and maintain security automation inside CI/CD pipelines
Actively review code, IaC, and architecture from a security perspective
Perform threat modeling and guide engineers toward secure design decisions
Identify, triage, and remediate application and infrastructure vulnerabilities
Own IAM architecture, permissions, access policies, and secrets management
Execute and manage penetration testing, vulnerability scans, and bug bounty findings