{"id":4209969,"url":"https://alion.io/job/fullpath-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":1893711,"name":"Fullpath","domain":"fullpath.com","url":"https://alion.io/company/fullpath","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Cilium Tetragon","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Cosign","optional":false},{"name":"Falco","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"OPA Gatekeeper","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Vault","optional":false},{"name":"Open Policy Agent","optional":true}],"status":"live","first_seen_at":"2026-11-12T19:32:32Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-13T07:29:25Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Description\nFullpath by Cox Automotive is a fast-growing tech company in the automotive space with hubs across the US and Israel. We are disrupting the multi-trillion-dollar transportation industry with our advanced Customer Data Platform (CDP). Our work happens in the fast lane as we bring AI-powered, data-driven solutions to a quickly evolving industry. Our team at Fullpath is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal-driven. At our core, we believe every voice has value and can impact our bottom line.\nWe are looking for a DevSecOps Engineer to join our team and make a real impact on how we build, ship, and run software securely. Your mission will be to own the security of our delivery pipelines and cloud infrastructure, turning security from a gate at the end into a default that is built into every commit, build, and deployment. You won’t just find misconfigurations; you will build the platforms and guardrails that prevent them.\nYou will help us navigate the “Agentic Era” by securing the infrastructure that AI and LLM-based workloads run on, automating security controls end to end, and empowering developers to move fast without breaking security. As a member of the team, you will set technical direction, mentor other engineers, and work closely with the AppSec Architect, R&D, and DevOps.\nThis role is based out in Tel-Aviv and reports to the AI Security Architect.\nWhat you will be responsible for\nSecure the pipeline: Design, build, and own secure CI/CD pipelines, embedding SAST, DAST, SCA, secrets detection, and container scanning with fast feedback and sensible quality gates. \nThreat modeling: Lead threat modeling and security design reviews for new services, architectures, and AI and agentic workflows, and turn the findings into concrete controls and guardrails. \nCloud & infrastructure security: Secure our AWS and GCP environments using IaC, policy as code, and automated guardrails and drift detection. \nContainer & K8s security: Own the security of our container platform end to end: hardened base images, image scanning and signing, cluster hardening, admission control and policy enforcement with Kyverno, network policies, and runtime threat detection. \nSupply chain integrity: Drive software supply chain security, including SBOMs, artifact signing and provenance, and dependency governance.\nSecrets & identity: Own secrets management and least-privilege access for workloads, pipelines, and AI agents, including workload identity and credential rotation.\nData security: Protect customer and platform data across our CDP, including encryption in transit and at rest, key management, data classification, and least-privilege access to sensitive data stores. \nSecure AI infrastructure: Secure the platforms behind LLM-based and agentic workflows, including model access, API keys, data flows, and runtime isolation.\nAutomate & build: Develop and maintain internal security tooling, automated workflows, and AI security agents that reduce manual work and scale security across all product lines. \nDetection & response: Extend our D&R capabilities by building scalable cloud and runtime detections, triaging alerts, and investigating and remediating incidents. \nVulnerability management: Lead the tracking, triaging, and reporting of infrastructure and pipeline security findings, and drive remediation with engineering teams. \nAdvocacy & mentorship: Partner with R&D and DevOps to embed security early and often, set secure-by-default standards, and share DevSecOps best practices with engineers.\nDocument: Draft requirement documents, architecture proposals, and runbooks for security products and innovative technologies.\nRequirements\n4+ years in DevSecOps, Cloud Security, DevOps, or a similar role at a software company, with proven ownership of production pipeline and infrastructure security.\nCloud security on AWS and GCP: IAM, networking, logging, and encryption.\nKubernetes and container security: cluster hardening (CIS benchmarks), Kyverno or OPA Gatekeeper, image scanning and Tsigning (Trivy, Cosign), and runtime detection (Falco, Tetragon).\nInfrastructure as Code (Terraform or similar) and policy as code (OPA, Checkov, tfsec).\nCI/CD security (GitHub Actions, GitLab CI, Jenkins): SAST, DAST, SCA, secrets detection, and container and IaC scanning.\nSoftware supply chain security (SBOMs, artifact signing, provenance) and secrets management (Vault, AWS Secrets Manager, GCP Secret Manager, OIDC federation).\nStrong coding and scripting skills (Python, Go, Bash, or similar).\nThreat modeling (e.g., STRIDE), including for AI and agentic systems, and familiarity with the OWASP Top 10 for API, LLM, and Agentic applications.\nCloud detection and response: logging, SIEM, and incident investigation.\nEndless curiosity and passion for emerging technology. \nAbility to prioritize and execute multiple tasks simultaneously, and to work independently with high ownership.\nAbility to guide and share knowledge with other engineers.\nStrong communication and collaboration skills.\nFluent in English: ability to lead meetings and present.\nThe top candidate will also have\nExperience building internal security tooling, automation, or AI security agents that scale security across product lines.\nHands-on experience securing LLM and agentic infrastructure in production: model access, API keys, data flows, and runtime isolation.\nA record of leading vulnerability management and driving remediation with engineering teams.\nCloud data security experience: encryption, KMS, and data classification.\nExperience building scalable cloud and runtime detections.\nAdvantage\nCertifications: CSSLP, OSCP, GPEN, AWS Security Specialty, or CKS.\nWhy you should join us\nFamily-friendly environment and flexible working hours. \nOur global team is made up of awesome forward thinking, innovative go-getters. \nLearning and growth opportunities within a fast-paced tech startup environment. \nClear career advancement path for strong performers. \nWe are committed to setting each other up for success. As a member of our team, you will work within an environment that encourages growth, initiative taking and continuous mutual feedback in order to reach your full potential. \nAnd of course, Cibus and lots of yummy treats in the kitchen :-)In the meantime, you can get to know us a little better by checking out @lifeatfullpath on Instagram, Facebook & LinkedIn\n\nAre you the one? Send yourresume and your portfolioto:\n","description_format":"text","description_chars":6557,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule","Growth opportunities"],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Automotive Components","Marketing & Sales AI"],"lifecycle":[{"event":"open","at":"2026-11-13T00:41:36Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":7,"reasons":["conf:3","win:early"],"computed_at":"2026-11-13T11:21:10Z"},"pay":null,"html_url":"https://alion.io/job/fullpath-devsecops-engineer","json_url":"https://alion.io/job/fullpath-devsecops-engineer.json","meta":{"generated_at":"2026-11-13T11:21:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22876,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1893711},"rest":"https://alion.io/mcp/rest/get_company?id=1893711"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffullpath-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffullpath-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffullpath-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fullpath-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffullpath-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4209969}},{"tool":"search_jobs","arguments":{"company":"fullpath.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4209969},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}