Hybrid Senior DevSecOps Engineer

at CloudQuery

• Job title: Senior DevSecOps Engineer
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Ansible, AWS, Cloud, Google Cloud Platform, Grafana, Prometheus, Python, Terraform, Go
• Location requirements: Hybrid, Tel Aviv Yafo, Israel

About the role

• Leading security and infrastructure for a high-performance data integration platform across AWS and GCP. Bridging engineering and security, overseeing security architecture and deployment workflows.

Responsibilities

• Secure Infrastructure: Design, implement, and manage secure, scalable cloud infrastructure across AWS and GCP. Enforce security best practices, ensuring flexibility and robustness.
• Application Security: Lead security initiatives for our architecture. Implement comprehensive protection mechanisms against web threats and vulnerabilities, and establish robust strategies for managing credentials and sensitive data securely across the platform.
• DevSecOps & CI/CD: Architect and optimize CI/CD pipelines (Specifically GitHub Actions), embedding automated security gates and checks to catch vulnerabilities early in the software delivery lifecycle.
• Compliance & Governance: Lead the implementation and maintenance of security controls for major frameworks such as SOC 2, GDPR, and ISO 27001.
• Observability: Define and maintain a high-level monitoring and alerting strategy to detect security anomalies and performance bottlenecks, ensuring complete system visibility

Requirements

• DevOps Expertise: 5+ years of experience managing production environments with a deep understanding of AWS (security models, permissions, and core services).
• CI/CD Automation: Strong proficiency with GitHub Actions for building and maintaining automated pipelines
• Compliance Experience: Proven experience implementing or maintaining compliance with SOC 2, GDPR, or ISO 27001 standards.
• Infrastructure as Code: Proven experience with Terraform (or equivalent) for managing complex stateful environments.
• Configuration Management: Experience with tools like Ansible (or equivalent automation/init scripts).
• Observability Tools: Hands-on experience with standard monitoring stacks like Grafana, Prometheus, or similar.
• Scripting: Proficiency in Go, Python or Bash for automation and tooling.
• Language: Fluent English (written and verbal) is required to support our distributed, international team.