DevSecOps Engineer

FullPath · telaviv

Description Fullpath by Cox Automotive is a fast-growing tech company in the automotive space with hubs across the US and Israel. We are disrupting the multi-trillion-dollar transportation industry with our advanced Customer Data Platform (CDP). Our work happens in the fast lane as we bring AI-powered, data-driven solutions to a quickly evolving industry. Our team at Fullpath is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal-driven. At our core, we believe every voice has value and can impact our bottom line. We are looking for a DevSecOps Engineer to join our team and make a real impact on how we build, ship, and run software securely. Your mission will be to own the security of our delivery pipelines and cloud infrastructure, turning security from a gate at the end into a default that is built into every commit, build, and deployment. You won’t just find misconfigurations; you will build the platforms and guardrails that prevent them. You will help us navigate the “Agentic Era” by securing the infrastructure that AI and LLM-based workloads run on, automating security controls end to end, and empowering developers to move fast without breaking security. As a member of the team, you will set technical direction, mentor other engineers, and work closely with the AppSec Architect, R&D, and DevOps. This role is based out in Tel-Aviv and reports to the AI Security Architect. What you will be responsible for Secure the pipeline: Design, build, and own secure CI/CD pipelines, embedding SAST, DAST, SCA, secrets detection, and container scanning with fast feedback and sensible quality gates. Threat modeling: Lead threat modeling and security design reviews for new services, architectures, and AI and agentic workflows, and turn the findings into concrete controls and guardrails. Cloud & infrastructure security: Secure our AWS and GCP environments using IaC, policy as code, and automated guardrails and drift detection. Container & K8s security: Own the security of our container platform end to end: hardened base images, image scanning and signing, cluster hardening, admission control and policy enforcement with Kyverno, network policies, and runtime threat detection. Supply chain integrity: Drive software supply chain security, including SBOMs, artifact signing and provenance, and dependency governance. Secrets & identity: Own secrets management and least-privilege access for workloads, pipelines, and AI agents, including workload identity and credential rotation. Data security: Protect customer and platform data across our CDP, including encryption in transit and at rest, key management, data classification, and least-privilege access to sensitive data stores. Secure AI infrastructure: Secure the platforms behind LLM-based and agentic workflows, including model access, API keys, data flows, and runtime isolation. Automate & build: Develop and maintain internal security tooling, automated workflows, and AI security agents that reduce manual work and scale security across all product lines. Detection & response: Extend our D&R capabilities by building scalable cloud and runtime detections, triaging alerts, and investigating and remediating incidents. Vulnerability management: Lead the tracking, triaging, and reporting of infrastructure and pipeline security findings, and drive remediation with engineering teams. Advocacy & mentorship: Partner with R&D and DevOps to embed security early and often, set secure-by-default standards, and share DevSecOps best practices with engineers. Document: Draft requirement documents, architecture proposals, and runbooks for security products and innovative technologies. Requirements 4+ years in DevSecOps, Cloud Security, DevOps, or a similar role at a software company, with proven ownership of production pipeline and infrastructure security. Cloud security on AWS and GCP: IAM, networking, logging, and encryption. Kubernetes and container security: cluster hardening (CIS benchmarks), Kyverno or OPA Gatekeeper, image scanning and Tsigning (Trivy, Cosign), and runtime detection (Falco, Tetragon). Infrastructure as Code (Terraform or similar) and policy as code (OPA, Checkov, tfsec). CI/CD security (GitHub Actions, GitLab CI, Jenkins): SAST, DAST, SCA, secrets detection, and container and IaC scanning. Software supply chain security (SBOMs, artifact signing, provenance) and secrets management (Vault, AWS Secrets Manager, GCP Secret Manager, OIDC federation). Strong coding and scripting skills (Python, Go, Bash, or similar). Threat modeling (e.g., STRIDE), including for AI and agentic systems, and familiarity with the OWASP Top 10 for API, LLM, and Agentic applications. Cloud detection and response: logging, SIEM, and incident investigation. Endless curiosity and passion for emerging technology. Ability to prioritize and execute multiple tasks simultaneously, and to work

Apply »