We are growing and are looking for DevSecops to join our mission to increase access to life-saving treatments.

The Role:

• Collaboration & Enablement

  • Act as a security advisor to development teams.

  • Collaborate cross-functionally to prioritize and address security topics.

  • Communicate risk, projects and mitigation strategies clearly and effectively.

• Security in Dev & CI/CD

  • Design, implement, and maintain secure DevOps practices across the SDLC.

  • Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines.

  • Guide developers and DevOps teams on secure coding, vulnerability management, and remediation.

  • Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models.

• AI Security & Governance

  • Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.)

  • least-privilege identities, admin console + MDM policy enforcement, agent access scoping.

  • Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise).

  • Partner with engineering on secure AI tool adoption and usage governance.

• Automation & Monitoring

  • Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle.

  • Build and operate monitoring and alerting systems to ensure visibility.

  • Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise (e.g., cutting CI/CD and internal telemetry noise while preserving high-signal events).

  • Define alerting rules and dashboards to proactively identify suspicious activity.

• Champion Viz values in every aspect: "Patient First," "I'm Accountable," "Kindness Wins," "Quality Squared," and "Time is Brain."

Requirements:

• 5+ years of experience as a DevOps / DevSecOps / SecOps

• Strong experience with CI/CD security (SAST, DAST, SCA, secrets scanning, etc.).

• Proficiency in AWS, including networking, IAM, and security services.

• Hands-on with infrastructure-as-code tools like Terraform.

• Familiarity with automated security tooling and frameworks (e.g., OWASP, CIS Benchmarks).

• Excellent problem-solving, communication, and collaboration skills.

• Experience with integrating and managing SIEM tools.

• Understanding of security best practices for Docker and Kubernetes.

• Experience securing AI/LLM tooling and agent-based dev workflows (access governance, MDM enforcement, supply chain risk).

• Experience with JIT/least-privilege access models for cloud data stores.

Location:

Our office in Tel-Aviv is located in Menachem Begin 150, within walking distance of Arlozorov and Ha'Shalom train stations.

Why should you join us?

• If you are looking to make an impact, we are mission-driven and are making a difference in peoples’ lives every day.

#LI: GH1

#LI: remote