- Platform (IT, DevOps, Security)
DevSecOps Engineer
About The Position
Fullpath by Cox Automotive is a fast-growing tech company in the automotive space with hubs across the US and Israel. We are disrupting the multi-trillion-dollar transportation industry with our advanced Customer Data Platform (CDP). Our work happens in the fast lane as we bring AI-powered, data-driven solutions to a quickly evolving industry. Our team at Fullpath is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal-driven. At our core, we believe every voice has value and can impact our bottom line.
We are looking for a DevSecOps Engineer to join our team and make a real impact on how we build, ship, and run software securely. Your mission will be to own the security of our delivery pipelines and cloud infrastructure, turning security from a gate at the end into a default that is built into every commit, build, and deployment. You won’t just find misconfigurations; you will build the platforms and guardrails that prevent them.
You will help us navigate the “Agentic Era” by securing the infrastructure that AI and LLM-based workloads run on, automating security controls end to end, and empowering developers to move fast without breaking security. As a member of the team, you will set technical direction, mentor other engineers, and work closely with the AppSec Architect, R&D, and DevOps.
This role is based out in Tel-Aviv and reports to the AI Security Architect.
What you will be responsible for
- Secure the pipeline: Design, build, and own secure CI/CD pipelines, embedding SAST, DAST, SCA, secrets detection, and container scanning with fast feedback and sensible quality gates.
- Threat modeling: Lead threat modeling and security design reviews for new services, architectures, and AI and agentic workflows, and turn the findings into concrete controls and guardrails.
- Cloud & infrastructure security: Secure our AWS and GCP environments using IaC, policy as code, and automated guardrails and drift detection.
- Container & K8s security: Own the security of our container platform end to end: hardened base images, image scanning and signing, cluster hardening, admission control and policy enforcement with Kyverno, network policies, and runtime threat detection.
- Supply chain integrity: Drive software supply chain security, including SBOMs, artifact signing and provenance, and dependency governance.
- Secrets & identity: Own secrets management and least-privilege access for workloads, pipelines, and AI agents, including workload identity and credential rotation.
- Data security: Protect customer and platform data across our CDP, including encryption in transit and at rest, key management, data classification, and least-privilege access to sensitive data stores.
- Secure AI infrastructure: Secure the platforms behind LLM-based and agentic workflows, including model access, API keys, data flows, and runtime isolation.
- Automate & build: Develop and maintain internal security tooling, automated workflows, and AI security agents that reduce manual work and scale security across all product lines.
- Detection & response: Extend our D&R capabilities by building scalable cloud and runtime detections, triaging alerts, and investigating and remediating incidents.
- Vulnerability management: Lead the tracking, triaging, and reporting of infrastructure and pipeline security findings, and drive remediation with engineering teams.
- Advocacy & mentorship: Partner with R&D and DevOps to embed security early and often, set secure-by-default standards, and share DevSecOps best practices with engineers.
- Document: Draft requirement documents, architecture proposals, and runbooks for security products and innovative technologies.
Requirements
- 4+ years in DevSecOps, Cloud Security, DevOps, or a similar role at a software company, with proven ownership of production pipeline and infrastructure security.
- Cloud security on AWS and GCP: IAM, networking, logging, and encryption.
- Kubernetes and container security: cluster hardening (CIS benchmarks), Kyverno or OPA Gatekeeper, image scanning and Tsigning (Trivy, Cosign), and runtime detection (Falco, Tetragon).
- Infrastructure as Code (Terraform or similar) and policy as code (OPA, Checkov, tfsec).
- CI/CD security (GitHub Actions, GitLab CI, Jenkins): SAST, DAST, SCA, secrets detection, and container and IaC scanning.
- Software supply chain security (SBOMs, artifact signing, provenance) and secrets management (Vault, AWS Secrets Manager, GCP Secret Manager, OIDC federation).
- Strong coding and scripting skills (Python, Go, Bash, or similar).
- Threat modeling (e.g., STRIDE), including for AI and agentic systems, and familiarity with the OWASP Top 10 for API, LLM, and Agentic applications.
- Cloud detection and response: logging, SIEM, and incident investigation.
- Endless curiosity and passion for emerging technology.
- Ability to prioritize and execute multiple tasks simultaneously, and to work independently with high ownership.
- Ability to guide and share knowledge with other engineers.
- Strong communication and collaboration skills.
- Fluent in English: ability to lead meetings and present.
The top candidate will also have
- Experience building internal security tooling, automation, or AI security agents that scale security across product lines.
- Hands-on experience securing LLM and agentic infrastructure in production: model access, API keys, data flows, and runtime isolation.
- A record of leading vulnerability management and driving remediation with engineering teams.
- Cloud data security experience: encryption, KMS, and data classification.
- Experience building scalable cloud and runtime detections.
Advantage
- Certifications: CSSLP, OSCP, GPEN, AWS Security Specialty, or CKS.
Why you should join us
- Family-friendly environment and flexible working hours.
- Our global team is made up of awesome forward thinking, innovative go-getters.
- Learning and growth opportunities within a fast-paced tech startup environment.
- Clear career advancement path for strong performers.
- We are committed to setting each other up for success. As a member of our team, you will work within an environment that encourages growth, initiative taking and continuous mutual feedback in order to reach your full potential.
- And of course, Cibus and lots of yummy treats in the kitchen :-)
In the meantime, you can get to know us a little better by checking out @lifeatfullpath on Instagram , Facebook & LinkedIn
Are you the one? Send your resume and your portfolio to:
fullpath.F3.578@applynow.io
