DevSecOps Engineer

Fullpath

. Design, build, and own secure CI/CD pipelines with SAST, DAST, SCA, secrets detection, and container scanning .

Posted 11/12/2026full-timeTel Aviv • IsraelMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing CI/CD pipelines, cloud environments, and container platforms while driving software supply chain security and incident response. Proficient in implementing infrastructure as code and policy as code practices to enhance security posture.

Highest-signal resume keywords

DevSecOps ExperienceCloud Security on AWS and GCPKubernetes and Container SecurityInfrastructure as Code (Terraform)Secrets Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CI/CD SecurityThreat ModelingSoftware Supply Chain SecurityCoding in PythonScripting in BashImage Scanning and SigningRuntime Threat DetectionPolicy as CodeContainer SecurityCloud Detection and Response

Soft Skills

Strong Communication SkillsCollaboration SkillsAbility to Prioritize TasksMentoring EngineersCuriosity for Emerging Technology

Tools & Technologies

GitHub ActionsGitLab CIJenkinsVaultAWS Secrets ManagerGCP Secret ManagerTrivyCosignFalcoTetragon

Certifications & Qualifications

CSSLPOSCPGPENAWS Security SpecialtyCKS

Industry Keywords

CI/CD PipelinesSASTDASTSCASecrets DetectionContainer ScanningInfrastructure SecurityData ClassificationAPI SecurityLLM Security

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformJenkinsKubernetesPythonTerraformVaultGo

About the role

Key responsibilities & impact

Design, build, and own secure CI/CD pipelines with SAST, DAST, SCA, secrets detection, and container scanning
Lead threat modeling and security design reviews for services, architectures, and AI and agentic workflows
Secure AWS and GCP environments using infrastructure as code, policy as code, automated guardrails, and drift detection
Own container platform security, including hardened base images, image scanning and signing, cluster hardening, admission control, Kyverno policy enforcement, network policies, and runtime threat detection
Drive software supply chain security through SBOMs, artifact signing, provenance, and dependency governance
Own secrets management and least-privilege access for workloads, pipelines, and AI agents
Protect customer and platform data through encryption, key management, data classification, and least-privilege access
Secure infrastructure supporting LLM-based and agentic workflows, including model access, API keys, data flows, and runtime isolation
Develop and maintain internal security tooling, automated workflows, and AI security agents
Build cloud and runtime detections, triage alerts, and investigate and remediate incidents
Lead tracking, triaging, and reporting of infrastructure and pipeline security findings and drive remediation
Partner with R&D and DevOps to embed security early, set secure-by-default standards, and share DevSecOps practices
Draft requirement documents, architecture proposals, and runbooks
Set technical direction, mentor engineers, and collaborate with the AppSec Architect, R&D, and DevOps
Report to the AI Security Architect

Requirements

What you’ll need

4+ years in DevSecOps, Cloud Security, DevOps, or a similar role at a software company, with proven ownership of production pipeline and infrastructure security
Cloud security on AWS and GCP: IAM, networking, logging, and encryption
Kubernetes and container security: cluster hardening (CIS benchmarks), Kyverno or OPA Gatekeeper, image scanning and signing (Trivy, Cosign), and runtime detection (Falco, Tetragon)
Infrastructure as Code (Terraform or similar) and policy as code (OPA, Checkov, tfsec)
CI/CD security using GitHub Actions, GitLab CI, or Jenkins, including SAST, DAST, SCA, secrets detection, and container and IaC scanning
Software supply chain security, including SBOMs, artifact signing, and provenance
Secrets management using Vault, AWS Secrets Manager, GCP Secret Manager, or OIDC federation
Strong coding and scripting skills in Python, Go, Bash, or similar
Threat modeling, such as STRIDE, including for AI and agentic systems
Familiarity with OWASP Top 10 for API, LLM, and Agentic applications
Cloud detection and response: logging, SIEM, and incident investigation
Endless curiosity and passion for emerging technology
Ability to prioritize and execute multiple tasks simultaneously and work independently with high ownership
Ability to guide and share knowledge with other engineers
Strong communication and collaboration skills
Fluent in English; ability to lead meetings and present
Advantageous certifications: CSSLP, OSCP, GPEN, AWS Security Specialty, or CKS

Benefits

Comp & perks

Family-friendly environment
Flexible working hours
Learning and growth opportunities within a fast-paced tech startup environment
Clear career advancement path for strong performers
Environment encouraging growth, initiative taking, and continuous mutual feedback
Cibus and lots of treats in the kitchen