Senior Security Engineer
Eleos HealthTel Aviv District и ещё 1 городот 5 лет
AWSAzureNetworkingGCPSoftware DevelopmentCloud SecurityIAMApplication SecurityInfrastructure as CodeSecurity EngineeringData SecurityMulti-cloud
Описание
This role suits an engineer who thinks in systems, codes when needed, and is energized by securing modern AI-driven, multi-cloud environments.
Responsibilities
- Act as a security architect for new initiatives. Join design and solution-concept meetings with R&D before code is written and help shape architectures that are secure by default
- Produce threat models, reference designs, and decision docs that engineers actually use
- Partner with R&D as a peer, not a gatekeeper
- Embed with product and engineering teams
- Translate security requirements into engineering language, and engineering trade-offs into risk language for leadership
- Own security across our multi-cloud footprint (AWS, GCP, Azure)
- Design and implement controls for identity, network, workload, and data protection that work consistently across environments
- Drive AI security
- Build our defenses against threats specific to LLM and ML systems: prompt injection, model abuse, training-data integrity, agentic-workflow risks, MCP/tool-use exposure, secrets in prompts, and supply-chain risk in the AI stack
- Help define what "secure AI development" means for us in practice
- Lead data security initiatives. Classification, encryption, key management, DLP, access governance, and data-flow mapping
- Evaluate and implement new technologies
- Run POCs and deploy new tooling end-to-end
- Write code. Automate controls, build internal tools, contribute to detection pipelines, and integrate security into CI/CD
Requirements
- 5+ years in security engineering, application security, or cloud security, with meaningful time in a hands-on technical capacity
- Strong software development background — you've shipped production code and read others' code fluently
- Deep experience securing multi-cloud environments, including IAM, networking, workload security, and infrastructure-as-code
- Architect-level thinking: ability to look at a system diagram and identify trust boundaries, blast radius, failure modes, and the controls that actually matter
- Hands-on experience with data security at scale, classification, encryption, key management, access controls
- Demonstrated experience introducing and operationalizing new security technologies, not just maintaining existing ones
- Track record of working closely with engineering teams; you're comfortable in design reviews and code reviews
- Direct experience with AI/ML security, securing LLM applications, agentic systems, model deployments, or AI infrastructure