{"id":3402472,"url":"https://alion.io/job/honeycomb-insurance-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":678984,"name":"Honeycomb Insurance","domain":"honeycombinsurance.com","url":"https://alion.io/company/honeycombinsurance","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":105,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ArgoCD","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"Google GKE","optional":false},{"name":"Helm","optional":false},{"name":"Honeycomb","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-10-28T12:36:06Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-31T21:33:54Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Honeycomb Insurance\nAt Honeycomb, we're not just building technology; we’re reshaping the future of insurance. \nIn 2025, Honeycomb was recognized by Dun & Bradstreet as “Top 10 Best Start Up Companies to Work For ” in Israel, named by LinkedIn as “Top 10 Startups in Chicago ”, and Newsweek’s \"Greatest Startup Workplaces in America, 2025 \". Through the first half of 2026 we’ve been recognized on Inc. Magazine’s \"Best Workplaces \" List and Forbes \" Fintech 50 \".\nHow did we earn these honors?\nHoneycomb is a rapidly growing global startup, generously backed by top-tier investors and powered by an exceptional team of thinkers, builders, and problem-solvers. Dual-headquartered in Chicago and Tel Aviv (R&D center), and with 6 offices across the U.S., we are reinventing the commercial real estate insurance industry, an industry long overdue for disruption. Just as importantly, we ensure every employee feels deeply connected to our mission and one another.\nWith over $100B in insured assets, Honeycomb operates across 23 states, covering more than 65% of the U.S. population and increasing its coverage.\nIf you’re looking for a place where innovation is celebrated, culture actually means something, and smart people challenge you to be better every day - Honeycomb might be exactly what you’ve been looking for.\nAbout the Role We are looking for a hands-on DevSecOps Engineer to strengthen the security of Honeycomb's cloud-native\nenvironment, working closely with our Security, Engineering, DevOps, and AI teams. The role centers on Google\nCloud Platform (GCP), Kubernetes, vulnerability management, container and CI/CD security, cloud security\nposture, and AI security. You will identify and remediate security risks across our infrastructure, applications,\npipelines, and AI environments, while building automation and controls that let our teams move quickly and\nsecurely.\nResponsibilities\nIdentify, prioritize, and drive remediation of security vulnerabilities (CVEs) across container images,\napplication dependencies, Kubernetes workloads, and GCP infrastructure, in partnership with\nEngineering, DevOps, and AI teams.\nSecure our GCP and Kubernetes environments: IAM, networking, logging, cluster and workload\nhardening, RBAC, secrets, and network policies.\nOwn container security practices, including image scanning, base image management, secrets\nmanagement, and runtime security.\nOperate SAST, SCA, and CSPM tools to surface code, dependency, and cloud misconfiguration risks, and\nhelp teams remediate findings.\nPartner with the AI team to secure AI applications, models, agents, APIs, and development\nenvironments, including access controls, data protection, and monitoring of both internal and third-\nparty AI tools.\nImplement automated security gates and policy enforcement throughout CI/CD pipelines and the SDLC,\nwithout slowing development.\nEstablish and improve vulnerability management processes: risk-based prioritization, remediation SLAs,\nexception management, and reporting.\nAutomate security and operational tasks with Bash, Python, or similar.\nSupport security monitoring and incident response across cloud infrastructure, applications, and AI\nworkloads.\nPromote DevSecOps best practices and help build a security-first engineering culture. \nRequirements\nProven experience as a DevSecOps Engineer, or DevOps Engineer with a strong security focus.\nHands-on experience with GCP security and running Kubernetes in production.\nHands-on experience managing CVEs, vulnerability remediation, patching, and risk-based prioritization.\nStrong Linux skills, including hardening, troubleshooting, networking, and logs.\nExperience with container security and CI/CD security, including integrating scanning and controls into\npipelines.\nExperience with SAST/SCA tools (e.g., Semgrep, Snyk, SonarQube) and CSPM platforms (e.g., Wiz, Prisma\nCloud, CrowdStrike Falcon Cloud Security).\nSolid scripting in Bash and/or Python.\nAbility to work hands-on with engineering and AI/ML teams to investigate and remediate security issues.\nFluent English, written and verbal. \nAdvantages\nExperience securing GKE at scale, including Google Cloud IAM, Workload Identity, and VPC networking.\nInfrastructure as Code and GitOps tools such as Terraform, Helm, or ArgoCD.\nSoftware supply-chain security (SBOM, dependency management) and Kubernetes policy tools\n(admission controllers, Pod Security Standards, policy-as-code).\nFamiliarity with CIS Benchmarks, OWASP, NIST, or ISO 27001.\nExperience with SIEM, cloud detection, and incident response.\nBackground in fintech, insurance, or other regulated environments.","description_format":"text","description_chars":4610,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-28T14:58:17Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":105,"reasons":["conf:2","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/honeycomb-insurance-devsecops-engineer","json_url":"https://alion.io/job/honeycomb-insurance-devsecops-engineer.json","meta":{"generated_at":"2026-11-01T00:05:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":184,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678984},"rest":"https://alion.io/mcp/rest/get_company?id=678984"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhoneycomb-insurance-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhoneycomb-insurance-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhoneycomb-insurance-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/honeycomb-insurance-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhoneycomb-insurance-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3402472}},{"tool":"search_jobs","arguments":{"company":"honeycombinsurance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3402472},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}