Senior DevSecOps Engineer

Viz.ai is the leader in building and deploying AI-powered Care Pathways and helping doctors do their work. The Viz Platform is deployed in 2,000 hospitals across the United States and trusted by many of the leading life sciences companies. The team is looking for DevSecops to join its mission to increase access to life-saving treatments. The company is a remote-first company across the U.S. and EU, with a team in Tel Aviv operating in a flexible hybrid model.

Responsibilities

Act as a security advisor to development teams; Collaborate cross-functionally to prioritize and address security topics; Communicate risk, projects and mitigation strategies clearly and effectively; Design, implement, and maintain secure DevOps practices across the SDLC; Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines; Guide developers and DevOps teams on secure coding, vulnerability management, and remediation; Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models; Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.); Enforce least-privilege identities, admin console + MDM policy enforcement, and agent access scoping; Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise); Partner with engineering on secure AI tool adoption and usage governance; Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle; Build and operate monitoring and alerting systems to ensure visibility; Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise; Define alerting rules and dashboards to proactively identify suspicious activity; Champion Viz values in every aspect

Requirements

5+ years of experience as a DevOps / DevSecOps / SecOps; Strong experience with CI/CD security (SAST, DAST, SCA, secrets scanning, etc.); Proficiency in AWS, including networking, IAM, and security services; Hands-on with infrastructure-as-code tools like Terraform; Familiarity with automated security tooling and frameworks (e.g., OWASP, CIS Benchmarks); Excellent problem-solving, communication, and collaboration skills; Experience with integrating and managing SIEM tools; Understanding of security best practices for Docker and Kubernetes; Experience securing AI/LLM tooling and agent-based dev workflows (access governance, MDM enforcement, supply chain risk); Experience with JIT/least-privilege access models for cloud data stores

Benefits

Highly competitive cash compensation; Equity; Benefits package; Dental insurance; Performance-based bonuses; Cibus meal allowance; Meals at the office; In the U.S.: medical, dental, vision, 401(k), generous vacation, and additional benefits for full-time employees