DevSecOps

Location: Herzliya

Department: Shared Tech

As a DevSecOps Engineer in Playtika’s Product Security group, you own the security of our SDLC, CI/CD pipelines, and software supply chain. Your mission is to make the secure path the easiest path for studios and shared‑tech teams by embedding security controls into developer workflows, build systems, and runtime platforms. 

You will work closely with CI/CD & DevEx, Infrastructure/IT, SRE and OPS teams – as well as with other groups within the information security department itself – to design, implement, and operate scalable guardrails that keep our games and platforms secure without slowing delivery. You also act as a bridge between security and DevOps/IT teams, helping them adopt secure practices and tooling. 

 

Responsibilities:

• Embed security into CI/CD and SCM – integrate, configure, and maintain security tools and checks (e.g., SAST, SCA, secrets, container/IaC scanning, WAF integrations) across build, test, and deploy stages; ensure findings are routed to the right owners.
• Design and maintain security automations – build and operate in‑house scripts, services, and integrations that reduce manual work (e.g., policy checks, ticket creation, asset classification, ownership mapping).
• Govern pipeline and repository usage – define and enforce secure patterns for source control, CI/CD workflows/runners, artifact repositories, and credentials; review and approve new integrations and automations from a security perspective.
• Harden infrastructure that supports delivery – help set up and maintain secure server and runner environments (cloud and on‑prem), and triage DevOps/IT/OPS vulnerabilities (e.g., misconfigurations, exposed services) with the relevant teams.
• Provide visibility and evidence – build dashboards and reports that show security posture and trends for CI/CD and DevOps environments, and provide data for audits and compliance where needed.
• Document and train – write clear documentation for security automations, standards, and runbooks; provide ad‑hoc training and guidance to DevOps, R&D, and IT teams on DevSecOps best practices. 

 

Requirements: 

 

Must Have 

• 3+ years of experience in server/infra management and/or CI/CD engineering, with significant security responsibilities (DevSecOps, AppSec engineering, DevOps Security Champion or similar).
• Strong experience with CI/CD platforms and automation (e.g., Jenkins, TeamCity, Harness, GitHub Actions, GitLab CI, or similar) and Git‑based workflows.
• Proficiency with Unix/Linux environments (Windows Server experience is an advantage), plus solid understanding of basic networking concepts (IP, TCP/UDP, firewalls, load balancers).
• Hands‑on experience with security tooling and practices such as WAF, SAST/SCA, vulnerability scanning, secrets management, or container/IaC security.
• Scripting/automation skills in at least one language (e.g., Bash, Python, Groovy, PowerShell) for building and maintaining tools and integrations.
• Strong analytical and problem‑solving skills, with the ability to work autonomously and drive results in a cross‑functional environment. 

 

Nice to Have 

• Background as a DevSecOps engineer or DevOps security champion in a large R&D organization.
• Experience with cloud platforms (e.g., AWS or similar), configuration/management tools (e.g., Kubernetes, Ansible, Terraform, Docker), or private clouds/virtualization.
• Familiarity with database administration and additional security‑relevant areas (network debugging tools, logging/monitoring stacks). 

 

Personal Attributes 

• Automation‑first builder: you prefer robust, reusable guardrails over one‑off manual fixes.
• Collaborative bridge‑builder: effective at working between security, DevOps/IT, and R&D teams.
• Proactive and curious: self‑motivated learner who stays current on DevSecOps and supply‑chain threats and turns that knowledge into practical improvements for Playtika.