DevSecOps Engineer

Description

Fullpath by Cox Automotive is a fast-growing tech company in the automotive space with hubs across the US and Israel. We are disrupting the multi-trillion-dollar transportation industry with our advanced Customer Data Platform (CDP). Our work happens in the fast lane as we bring AI-powered, data-driven solutions to a quickly evolving industry. Our team at Fullpath is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal-driven. At our core, we believe every voice has value and can impact our bottom line.

We are looking for a DevSecOps Engineer to join our team and make a real impact on how we build, ship, and run software securely. Your mission will be to own the security of our delivery pipelines and cloud infrastructure, turning security from a gate at the end into a default that is built into every commit, build, and deployment. You won’t just find misconfigurations; you will build the platforms and guardrails that prevent them.

You will help us navigate the “Agentic Era” by securing the infrastructure that AI and LLM-based workloads run on, automating security controls end to end, and empowering developers to move fast without breaking security. As a member of the team, you will set technical direction, mentor other engineers, and work closely with the AppSec Architect, R&D, and DevOps.

This role is based out in Tel-Aviv and reports to the AI Security Architect.

What you will be responsible for

• Secure the pipeline: Design, build, and own secure CI/CD pipelines, embedding SAST, DAST, SCA, secrets detection, and container scanning with fast feedback and sensible quality gates.
• Threat modeling: Lead threat modeling and security design reviews for new services, architectures, and AI and agentic workflows, and turn the findings into concrete controls and guardrails.
• Cloud & infrastructure security: Secure our AWS and GCP environments using IaC, policy as code, and automated guardrails and drift detection.
• Container & K8s security: Own the security of our container platform end to end: hardened base images, image scanning and signing, cluster hardening, admission control and policy enforcement with Kyverno, network policies, and runtime threat detection.
• Supply chain integrity: Drive software supply chain security, including SBOMs, artifact signing and provenance, and dependency governance.
• Secrets & identity: Own secrets management and least-privilege access for workloads, pipelines, and AI agents, including workload identity and credential rotation.
• Data security: Protect customer and platform data across our CDP, including encryption in transit and at rest, key management, data classification, and least-privilege access to sensitive data stores.
• Secure AI infrastructure: Secure the platforms behind LLM-based and agentic workflows, including model access, API keys, data flows, and runtime isolation.
• Automate & build: Develop and maintain internal security tooling, automated workflows, and AI security agents that reduce manual work and scale security across all product lines.
• Detection & response: Extend our D&R capabilities by building scalable cloud and runtime detections, triaging alerts, and investigating and remediating incidents.
• Vulnerability management: Lead the tracking, triaging, and reporting of infrastructure and pipeline security findings, and drive remediation with engineering teams.
• Advocacy & mentorship: Partner with R&D and DevOps to embed security early and often, set secure-by-default standards, and share DevSecOps best practices with engineers.
• Document: Draft requirement documents, architecture proposals, and runbooks for security products and innovative technologies.

Requirements

• 4+ years in DevSecOps, Cloud Security, DevOps, or a similar role at a software company, with proven ownership of production pipeline and infrastructure security.
• Cloud security on AWS and GCP: IAM, networking, logging, and encryption.
• Kubernetes and container security: cluster hardening (CIS benchmarks), Kyverno or OPA Gatekeeper, image scanning and Tsigning (Trivy, Cosign), and runtime detection (Falco, Tetragon).
• Infrastructure as Code (Terraform or similar) and policy as code (OPA, Checkov, tfsec).
• CI/CD security (GitHub Actions, GitLab CI, Jenkins): SAST, DAST, SCA, secrets detection, and container and IaC scanning.
• Software supply chain security (SBOMs, artifact signing, provenance) and secrets management (Vault, AWS Secrets Manager, GCP Secret Manager, OIDC federation).
• Strong coding and scripting skills (Python, Go, Bash, or similar).
• Threat modeling (e.g., STRIDE), including for AI and agentic systems, and familiarity with the OWASP Top 10 for API, LLM, and Agentic applications.
• Cloud detection and response: logging, SIEM, and incident investigation.
• Endless curiosity and passion for emerging technology.
• Ability to prioritize and execute multiple tasks simultaneously, and to work independently with high ownership.
• Ability to guide and share knowledge with other engineers.
• Strong communication and collaboration skills.
• Fluent in English: ability to lead meetings and present.

The top candidate will also have

• Experience building internal security tooling, automation, or AI security agents that scale security across product lines.
• Hands-on experience securing LLM and agentic infrastructure in production: model access, API keys, data flows, and runtime isolation.
• A record of leading vulnerability management and driving remediation with engineering teams.
• Cloud data security experience: encryption, KMS, and data classification.
• Experience building scalable cloud and runtime detections.

Advantage

• Certifications: CSSLP, OSCP, GPEN, AWS Security Specialty, or CKS.

Why you should join us

• Family-friendly environment and flexible working hours.
• Our global team is made up of awesome forward thinking, innovative go-getters.
• Learning and growth opportunities within a fast-paced tech startup environment.
• Clear career advancement path for strong performers.
• We are committed to setting each other up for success. As a member of our team, you will work within an environment that encourages growth, initiative taking and continuous mutual feedback in order to reach your full potential.
• And of course, Cibus and lots of yummy treats in the kitchen :-)

  In the meantime, you can get to know us a little better by checking out @lifeatfullpath on Instagram, Facebook & LinkedIn

Are you the one? Send yourresume and your portfolioto:

[email protected]