DevSecOps Engineer

Who We Are? Ubeya is the workforce management platform behind some of the world's biggest moments. From Wembley Stadium to Wimbledon, Emirates to Johan Cruyff Arena, when tens of thousands of people show up, Ubeya makes sure everything runs smoothly behind the scenes. We're a fast-growing B2B2C SaaS company helping global enterprises and staffing agencies plan, manage, and pay large, dynamic workforces with ease. Our platform is used every single day to keep operations agile, teams empowered, and businesses ready to scale. Ubeya, huh? The name is inspired by the Japanese concept of the "Great Room", a space where people come together to solve problems and tackle urgent matters. Collaboration and efficiency are at the heart of everything we do. Our team builds technology with real-world impact, tackling complex challenges at scale, and turning ideas into solutions that make a difference for thousands of users worldwide. The Role We are looking for a hands-on DevSecOps Engineer to own the security of our platform, our infrastructure, and the way our team works. As part of R&D, you will be the go-to person for everything security: who has access to what, how our cloud is protected, how we detect and respond to threats, and how we prove all of it to our enterprise customers. Why does security matter so much here? Ubeya holds the personal data of hundreds of thousands of workers: identity details, contact information, availability, timesheets, and payroll data. Our customers trust us to keep that data safe, and to make sure every admin, manager, and worker sees only what they are permitted to see. Every integration and API we open to customers and partners is another door that has to be guarded. You will take ownership of our security practices and take them to the next level, working closely with R&D, DevOps, and Customer Success, and have a direct impact on the trust that global enterprises place in Ubeya. Requirements: 4+ years of hands-on experience in security operations, cloud security, or DevSecOps. Strong experience securing cloud-native environments; AWS and Kubernetes are a strong advantage. Hands-on experience with identity and access management (SSO, RBAC etc.) and with service and API authentication. Experience with security for AI tools and LLM-based systems, including risks like prompt injection, data leakage, model limitations, and safe use of AI coding assistants and agents. Familiar with vulnerability management, SIEM / log monitoring, and incident response processes. Experience with compliance frameworks and security questionnaires (SOC 2, ISO 27001, GDPR). Scripting skills (Python, Bash, or Node.js). A problem-solver with a strong "can-do" mindset and sense of ownership. Uses AI tools on a daily basis as part of core workflows, with a strong understanding of their capabilities and limitations. Strong communication skills in English and Hebrew (written and spoken). Responsibilities: Drive security hardening across our backend and frontend: secure coding practices, authentication, protection against OWASP Top 10 risks, and security reviews of new features together with R&D. Secure our AWS and Kubernetes environments: hardening, network policies, secrets management, and cloud posture monitoring. Build and run vulnerability management: dependency and container scanning, penetration test follow-ups. Set up security monitoring and alerting, and lead incident response when something goes wrong. Lead compliance efforts and answer customer security questionnaires. Write and maintain security policies, and raise security awareness across the team. Challenge existing processes, suggest improvements, and bring new ideas into the team.